[ { "path": ".cobra.yaml", "content": "author: Emmanuel Gautier \nlicense: MIT License\n" }, { "path": ".docker/Dockerfile-build", "content": "FROM golang:1.26-bookworm AS builder\n\nWORKDIR /go/src/github.com/cerberauth/vulnapi\n\nCOPY go.mod go.mod\nCOPY go.sum go.sum\n\nENV CGO_ENABLED 0\nENV GO111MODULE on\n\nRUN go mod download\n\nCOPY . .\n\nRUN go build -o /usr/bin/vulnapi .\n\nFROM gcr.io/distroless/static-debian12:nonroot AS runner\n\nCOPY --from=builder --chown=nonroot:nonroot /usr/bin/vulnapi /usr/bin/vulnapi\n\nENTRYPOINT [\"vulnapi\"]\nCMD [\"vulnapi\"]\n" }, { "path": ".docker/Dockerfile-goreleaser", "content": "FROM gcr.io/distroless/static-debian12:nonroot\n\nARG TARGETOS\nARG TARGETARCH\nARG TARGETVARIANT\n\nCOPY --chown=nonroot:nonroot ${TARGETOS}/${TARGETARCH}${TARGETVARIANT:+/$TARGETVARIANT}/vulnapi /usr/bin/vulnapi\n\nENTRYPOINT [\"/usr/bin/vulnapi\"]\n" }, { "path": ".github/CODEOWNERS", "content": "* @cerberauth @emmanuelgautier\n" }, { "path": ".github/FUNDING.yml", "content": "github: [emmanuelgautier]\nbuy_me_a_coffee: emmanuelgautier\n" }, { "path": ".github/workflows/ci.yml", "content": "name: CI\n\non:\n push:\n tags:\n - \"v*.*.*\"\n branches:\n - main\n pull_request:\n branches:\n - main\n\nconcurrency:\n group: ${{ github.workflow }}-${{ github.ref }}\n cancel-in-progress: true\n\njobs:\n build:\n runs-on: ubuntu-latest\n\n permissions:\n contents: read\n checks: write\n\n steps:\n - uses: actions/checkout@v6\n\n - uses: cerberauth/ci/actions/go-build-test@main\n with:\n codecov-token: ${{ secrets.CODECOV_TOKEN }}\n\n publish:\n needs: build\n if: startsWith(github.ref, 'refs/tags/')\n runs-on: ubuntu-latest\n\n permissions:\n contents: write\n id-token: write\n packages: write\n pull-requests: write\n\n steps:\n - uses: actions/checkout@v6\n with:\n fetch-depth: 0\n\n - run: git fetch --force --tags\n\n - uses: cerberauth/ci/actions/releaser@main\n with:\n package-name: vulnapi\n dockerhub-username: ${{ secrets.DOCKERHUB_USERNAME }}\n dockerhub-token: ${{ secrets.DOCKERHUB_TOKEN }}\n snapcraft-store-credentials: ${{ secrets.SNAPCRAFT_STORE_CREDENTIALS }}\n chocolatey-api-key: ${{ secrets.CHOCOLATEY_API_KEY }}\n aur-key: ${{ secrets.AUR_KEY }}\n github-token: ${{ secrets.PAT }}\n" }, { "path": ".github/workflows/scans.yml", "content": "name: Scans\n\non:\n push:\n branches:\n - main\n pull_request:\n branches:\n - main\n\nenv:\n GO_VERSION: \"1.26\"\n\nconcurrency:\n group: ${{ github.workflow }}-${{ github.ref }}\n cancel-in-progress: true\n\npermissions:\n contents: read\n packages: read\n\njobs:\n run-api-discovery:\n name: API Discovery\n runs-on: ubuntu-latest\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Login to GitHub Container Registry\n uses: docker/login-action@v4\n with:\n registry: ghcr.io\n username: ${{ github.repository_owner }}\n password: ${{ secrets.GITHUB_TOKEN }}\n\n - name: Run Server\n run: docker run -d -p 8080:8080 ghcr.io/cerberauth/api-vulns-challenges/discoverable:latest\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n run: |\n go run main.go discover api http://localhost:8080 --rate 500/s --sqa-opt-out\n\n - name: Stop Server\n if: ${{ always() }}\n run: docker stop $(docker ps -q --filter ancestor=ghcr.io/cerberauth/api-vulns-challenges/discoverable:latest)\n\n run-unreachable-curl-scan:\n name: Unreachable API\n runs-on: ubuntu-latest\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n continue-on-error: true\n run: |\n go run main.go scan curl http://localhost:8080 --sqa-opt-out\n\n - name: Check for vulnerabilities\n if: ${{ steps.vulnapi.outputs.conclusion == 'failure' }}\n run: echo \"Unreachable API found\"\n\n run-bad-ssl-scan-curl:\n name: Bad SSL Scan ${{ matrix.challenge.name }}\n runs-on: ubuntu-latest\n\n strategy:\n fail-fast: true\n matrix:\n challenge:\n [\n { name: \"expired\", url: \"https://expired.badssl.com\" },\n { name: \"wrong-hostname\", url: \"https://wrong.host.badssl.com\" },\n { name: \"self-signed\", url: \"https://self-signed.badssl.com\" },\n { name: \"untrusted\", url: \"https://untrusted-root.badssl.com\" },\n { name: \"revoked\", url: \"https://revoked.badssl.com\" },\n { name: \"pinning-test\", url: \"https://pinning-test.badssl.com\" },\n ]\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n continue-on-error: true\n run: |\n go run main.go scan curl ${{ matrix.challenge.url }} --sqa-opt-out\n\n - name: Check for vulnerabilities\n if: ${{ steps.vulnapi.outputs.conclusion == 'failure' }}\n run: echo \"Bad SSL found in ${{ matrix.challenge.name }}\"\n\n run-jwt-scans:\n name: JWT Scans\n runs-on: ubuntu-latest\n\n strategy:\n fail-fast: false\n matrix:\n challenge:\n [\n \"jwt-alg-none-bypass\",\n \"jwt-blank-secret\",\n \"jwt-kid-path-traversal\",\n \"jwt-kid-sql-injection\",\n \"jwt-not-verified\",\n \"jwt-null-signature\",\n \"jwt-weak-hmac-secret\",\n ]\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Login to GitHub Container Registry\n uses: docker/login-action@v4\n with:\n registry: ghcr.io\n username: ${{ github.repository_owner }}\n password: ${{ secrets.GITHUB_TOKEN }}\n\n - name: Run Server\n run: docker run -d -p 8080:8080 ghcr.io/cerberauth/api-vulns-challenges/${{ matrix.challenge }}:latest\n\n - name: Get JWT\n id: get-jwt\n run: echo \"jwt=$(docker run --rm ghcr.io/cerberauth/api-vulns-challenges/jwt-strong-eddsa-key:latest jwt)\" >> $GITHUB_OUTPUT\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n continue-on-error: true\n run: |\n go run main.go scan curl http://localhost:8080 -H \"Authorization: Bearer ${{ steps.get-jwt.outputs.jwt }}\" --sqa-opt-out\n\n - name: Check for vulnerabilities\n if: ${{ steps.vulnapi.outputs.conclusion == 'failure' }}\n run: echo \"Vulnerabilities found in ${{ matrix.challenge }}\"\n\n - name: Stop Server\n if: ${{ always() }}\n run: docker stop $(docker ps -q --filter ancestor=ghcr.io/cerberauth/api-vulns-challenges/${{ matrix.challenge }}:latest)\n\n run-header-strong-api-key-scan:\n name: Strong API Key Scan\n runs-on: ubuntu-latest\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Login to GitHub Container Registry\n uses: docker/login-action@v4\n with:\n registry: ghcr.io\n username: ${{ github.repository_owner }}\n password: ${{ secrets.GITHUB_TOKEN }}\n\n - name: Run Server\n run: docker run -d -p 8080:8080 ghcr.io/cerberauth/api-vulns-challenges/strong-api-key:latest\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n run: |\n go run main.go scan curl http://localhost:8080 -H \"X-API-Key: abcdef1234\" --sqa-opt-out\n\n - name: Stop Server\n if: ${{ always() }}\n run: docker stop $(docker ps -q --filter ancestor=ghcr.io/cerberauth/api-vulns-challenges/strong-api-key:latest)\n\n run-header-api-key-scan:\n name: API Key in header Scan\n runs-on: ubuntu-latest\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Login to GitHub Container Registry\n uses: docker/login-action@v4\n with:\n registry: ghcr.io\n username: ${{ github.repository_owner }}\n password: ${{ secrets.GITHUB_TOKEN }}\n\n - name: Run Server\n run: docker run -d -p 8080:8080 ghcr.io/cerberauth/api-vulns-challenges/auth-not-verified:latest\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n continue-on-error: true\n run: |\n go run main.go scan curl http://localhost:8080 -H \"X-API-Key: abcdef1234\" --sqa-opt-out\n\n - name: Check for vulnerabilities\n if: ${{ steps.vulnapi.outputs.conclusion == 'failure' }}\n run: echo \"Vulnerabilities found\"\n\n - name: Stop Server\n if: ${{ always() }}\n run: docker stop $(docker ps -q --filter ancestor=ghcr.io/cerberauth/api-vulns-challenges/auth-not-verified:latest)\n\n run-bearer-api-key-scan:\n name: Bearer API Key Scan\n runs-on: ubuntu-latest\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Login to GitHub Container Registry\n uses: docker/login-action@v4\n with:\n registry: ghcr.io\n username: ${{ github.repository_owner }}\n password: ${{ secrets.GITHUB_TOKEN }}\n\n - name: Run Server\n run: docker run -d -p 8080:8080 ghcr.io/cerberauth/api-vulns-challenges/auth-not-verified:latest\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n continue-on-error: true\n run: |\n go run main.go scan curl http://localhost:8080 -H \"Authorization: Bearer abcdef1234\" --sqa-opt-out\n\n - name: Check for vulnerabilities\n if: ${{ steps.vulnapi.outputs.conclusion == 'failure' }}\n run: echo \"Vulnerabilities found\"\n\n - name: Stop Server\n if: ${{ always() }}\n run: docker stop $(docker ps -q --filter ancestor=ghcr.io/cerberauth/api-vulns-challenges/auth-not-verified:latest)\n\n run-header-strong-http-basic-scan:\n name: Strong HTTP Basic Scan\n runs-on: ubuntu-latest\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Login to GitHub Container Registry\n uses: docker/login-action@v4\n with:\n registry: ghcr.io\n username: ${{ github.repository_owner }}\n password: ${{ secrets.GITHUB_TOKEN }}\n\n - name: Run Server\n run: docker run -d -p 8080:8080 ghcr.io/cerberauth/api-vulns-challenges/strong-http-basic:latest\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n run: |\n go run main.go scan curl http://localhost:8080 -H \"X-API-Key: abcdef1234\" --sqa-opt-out\n\n - name: Stop Server\n if: ${{ always() }}\n run: docker stop $(docker ps -q --filter ancestor=ghcr.io/cerberauth/api-vulns-challenges/strong-http-basic:latest)\n\n run-http-misconfigurations-scans:\n name: HTTP Misconfigurations Scans\n runs-on: ubuntu-latest\n\n strategy:\n fail-fast: false\n matrix:\n include:\n - challenge: \"misconfiguration.http_headers\"\n url: \"http://localhost:8080\"\n - challenge: \"misconfiguration.http_headers\"\n url: \"http://localhost:8080/headers/cors-wildcard\"\n - challenge: \"misconfiguration.http_headers\"\n url: \"http://localhost:8080/headers/csp-frame-ancestors\"\n - challenge: \"misconfiguration.http_cookies\"\n url: \"http://localhost:8080/cookies/unsecure\"\n - challenge: \"misconfiguration.http_cookies\"\n url: \"http://localhost:8080/cookies/not-httponly\"\n - challenge: \"misconfiguration.http_cookies\"\n url: \"http://localhost:8080/cookies/samesite-none\"\n - challenge: \"misconfiguration.http_cookies\"\n url: \"http://localhost:8080/cookies/no-expiration\"\n - challenge: \"misconfiguration.http_method_override\"\n url: \"http://localhost:8080/cookies/http-method-override\"\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Login to GitHub Container Registry\n uses: docker/login-action@v4\n with:\n registry: ghcr.io\n username: ${{ github.repository_owner }}\n password: ${{ secrets.GITHUB_TOKEN }}\n\n - name: Run Server\n run: docker run -d -p 8080:8080 ghcr.io/cerberauth/api-vulns-challenges/http-misconfigurations:latest\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n continue-on-error: true\n run: |\n go run main.go scan curl ${{ matrix.url }} --scans \"${{ matrix.challenge }}\" --sqa-opt-out\n\n - name: Check for vulnerabilities\n if: ${{ steps.vulnapi.outputs.conclusion == 'failure' }}\n run: echo \"Vulnerabilities found in ${{ matrix.challenge }}\"\n\n - name: Stop Server\n if: ${{ always() }}\n run: docker stop $(docker ps -q --filter ancestor=ghcr.io/cerberauth/api-vulns-challenges/http-misconfigurations:latest)\n\n run-graphql-scans:\n name: GraphQL Scans\n runs-on: ubuntu-latest\n\n strategy:\n fail-fast: false\n matrix:\n include:\n - challenge: \"graphql.introspection_enabled\"\n url: \"http://localhost:4000/graphql\"\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Login to GitHub Container Registry\n uses: docker/login-action@v4\n with:\n registry: ghcr.io\n username: ${{ github.repository_owner }}\n password: ${{ secrets.GITHUB_TOKEN }}\n\n - name: Run Server\n run: docker run -d -p 4000:4000 ghcr.io/cerberauth/api-vulns-challenges/apollo:latest\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n continue-on-error: true\n run: |\n go run main.go scan graphql ${{ matrix.url }} --scans \"${{ matrix.challenge }}\" --sqa-opt-out\n\n - name: Check for vulnerabilities\n if: ${{ steps.vulnapi.outputs.conclusion == 'failure' }}\n run: echo \"Vulnerabilities found in ${{ matrix.challenge }}\"\n\n - name: Stop Server\n if: ${{ always() }}\n run: docker stop $(docker ps -q --filter ancestor=ghcr.io/cerberauth/api-vulns-challenges/apollo:latest)\n\n run-openapi-scans:\n name: OpenAPI Scans\n runs-on: ubuntu-latest\n\n permissions:\n contents: read\n packages: read\n\n strategy:\n fail-fast: false\n matrix:\n openapi:\n [\n \"simple_api_key.openapi.json\",\n \"simple_http_bearer_jwt.openapi.json\",\n \"simple_http_bearer.openapi.json\",\n \"simple_no_scheme.openapi.json\",\n \"complex.openapi.json\",\n \"petstore.openapi.json\"\n ]\n\n steps:\n - uses: actions/checkout@v6\n\n - name: Login to GitHub Container Registry\n uses: docker/login-action@v4\n with:\n registry: ghcr.io\n username: ${{ github.repository_owner }}\n password: ${{ secrets.GITHUB_TOKEN }}\n\n - name: Run Server\n run: docker run -d -p 8080:8080 ghcr.io/cerberauth/api-vulns-challenges/auth-not-verified:latest\n\n - name: Setup Go environment\n uses: actions/setup-go@v6\n with:\n go-version: ${{ env.GO_VERSION }}\n\n - name: VulnAPI\n id: vulnapi\n continue-on-error: true\n run: |\n go run main.go scan openapi ./test/stub/${{ matrix.openapi }} --sqa-opt-out\n\n - name: Check for vulnerabilities\n if: ${{ steps.vulnapi.outputs.conclusion == 'failure' }}\n run: echo \"Vulnerabilities found\"\n\n - name: Stop Server\n if: ${{ always() }}\n run: docker stop $(docker ps -q --filter ancestor=ghcr.io/cerberauth/api-vulns-challenges/auth-not-verified:latest)\n" }, { "path": ".github/workflows/stale.yml", "content": "name: \"Close Stale Issues\"\n\non:\n workflow_dispatch: {}\n schedule:\n - cron: \"0 0 * * *\"\n\njobs:\n stale:\n uses: cerberauth/ci/.github/workflows/stale.yml@main\n permissions:\n contents: write\n issues: write\n pull-requests: write\n" }, { "path": ".gitignore", "content": "# If you prefer the allow list template instead of the deny list, see community template:\n# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore\n#\n# Binaries for programs and plugins\n*.exe\n*.exe~\n*.dll\n*.so\n*.dylib\n\n# Test binary, built with `go test -c`\n*.test\n\n# Output of the go coverage tool, specifically when used with LiteIDE\n*.out\n\n# Dependency directories (remove the comment below to include it)\n# vendor/\n\n# Go workspace file\ngo.work\n\n__debug_bin*\n\nvulnapi\ndist/\nreport.json\n" }, { "path": ".golangci.yml", "content": "version: \"2\"\nlinters:\n enable:\n - goconst\n - gocritic\n - gosec\n settings:\n gosec:\n excludes:\n - G101\n - G107\n exclusions:\n generated: lax\n presets:\n - comments\n - common-false-positives\n - legacy\n - std-error-handling\n paths:\n - .+_test.go\n - third_party$\n - builtin$\n - examples$\nformatters:\n enable:\n - gofmt\n - goimports\n exclusions:\n generated: lax\n paths:\n - .+_test.go\n - third_party$\n - builtin$\n - examples$\n" }, { "path": ".goreleaser.yaml", "content": "# yaml-language-server: $schema=https://goreleaser.com/static/schema.json\n# vim: set ts=2 sw=2 tw=0 fo=jcroql\nversion: 2\n\nproject_name: vulnapi\n\nbefore:\n hooks:\n - go mod tidy\n - go generate ./...\n\nsnapshot:\n version_template: \"{{ incpatch .Version }}-next\"\n\ngomod:\n proxy: true\n\nreport_sizes: true\n\nmetadata:\n mod_timestamp: \"{{ .CommitTimestamp }}\"\n\nbuilds:\n - id: vulnapi\n binary: vulnapi\n env:\n - CGO_ENABLED=0\n goos:\n - linux\n - windows\n - darwin\n goarch:\n - amd64\n - arm64\n - arm\n - \"386\"\n goarm:\n - \"7\"\n ignore:\n - goos: windows\n goarch: arm64\n - goos: windows\n goarch: arm\n - goos: darwin\n goarch: \"386\"\n - goos: darwin\n goarch: arm\n mod_timestamp: \"{{ .CommitTimestamp }}\"\n flags:\n - -trimpath\n ldflags:\n - -s -w -X main.version={{.Version}} -X main.commit={{.Commit}} -X main.date={{ .CommitDate }}\n\nuniversal_binaries:\n - id: vulnapi-universal\n ids:\n - vulnapi\n replace: true\n\nchecksum:\n name_template: \"checksums.txt\"\n\nsource:\n enabled: true\n\narchives:\n - name_template: >-\n {{ .ProjectName }}_\n {{- title .Os }}_\n {{- if eq .Arch \"amd64\" }}x86_64\n {{- else if eq .Arch \"386\" }}i386\n {{- else }}{{ .Arch }}{{ end }}\n {{- if .Arm }}v{{ .Arm }}{{ end }}\n formats: [\"tar.gz\"]\n format_overrides:\n - goos: windows\n formats: [\"zip\"]\n builds_info:\n group: root\n owner: root\n mtime: \"{{ .CommitDate }}\"\n files:\n - README.md\n - LICENSE\n\nsboms:\n - artifacts: archive\n\nsigns:\n - cmd: cosign\n signature: \"${artifact}.sigstore.json\"\n output: true\n artifacts: checksum\n args:\n - sign-blob\n - \"--bundle=${signature}\"\n - \"${artifact}\"\n - --yes\n\nchangelog:\n sort: asc\n use: github\n format: \"{{ .SHA }}: {{ .Message }}{{ if .Logins }} ({{ .Logins | englishJoin }}){{ end }}\"\n groups:\n - title: \"New Features\"\n regexp: '^.*?feat(\\(.+\\))??!?:.+$'\n order: 0\n - title: \"Bug Fixes\"\n regexp: '^.*?(fix|refactor)(\\(.+\\))??!?:.+$'\n order: 1\n - title: \"Other\"\n order: 999\n filters:\n exclude:\n - '^docs:'\n - '^test:'\n - '^chore\\(deps\\): '\n - '^(build|ci): '\n - Merge pull request\n - Merge branch\n\nmilestones:\n - close: true\n\nrelease:\n name_template: \"v{{ .Version }}\"\n\nhomebrew_casks:\n - name: vulnapi\n description: &description \"Scan your APIs for security vulnerabilities and weaknesses.\"\n license: &license MIT\n homepage: &homepage https://github.com/cerberauth/vulnapi\n repository:\n owner: &owner cerberauth\n name: homebrew-tap\n branch: &main main\n commit_author: &commit_author\n name: cerberauth-bot\n email: 268418261+cerberauth-bot@users.noreply.github.com\n\nscoops:\n - name: vulnapi\n description: *description\n homepage: *homepage\n license: *license\n repository:\n owner: *owner\n name: scoop-bucket\n branch: *main\n commit_author: *commit_author\n\nnfpms:\n - file_name_template: \"{{ .ConventionalFileName }}\"\n package_name: vulnapi\n vendor: CerberAuth\n homepage: *homepage\n maintainer: Emmanuel Gautier \n description: *description\n license: *license\n bindir: /usr/bin\n section: utils\n formats:\n - apk\n - deb\n - rpm\n - termux.deb\n - archlinux\n\nsnapcrafts:\n - name_template: \"{{ .ProjectName }}_{{ .Arch }}{{ if .Arm }}v{{ .Arm }}{{ end }}\"\n title: VulnAPI\n publish: true\n summary: *description\n description: \"Scan your APIs for common security vulnerabilities and weaknesses, including OWASP top 10.\"\n license: *license\n confinement: strict\n grade: stable\n apps:\n vulnapi:\n plugs:\n - home\n - network\n - removable-media\n channel_templates:\n - edge\n - beta\n - candidate\n - stable\n\naurs:\n - name: vulnapi-bin\n homepage: *homepage\n description: *description\n maintainers:\n - Emmanuel Gautier \n license: *license\n private_key: \"{{ .Env.AUR_KEY }}\"\n git_url: ssh://aur@aur.archlinux.org/vulnapi-bin.git\n skip_upload: auto\n package: |-\n install -Dm755 \"./vulnapi\" \"${pkgdir}/usr/bin/vulnapi\"\n install -Dm644 \"./LICENSE\" \"${pkgdir}/usr/share/licenses/vulnapi/LICENSE\"\n\nwinget:\n - name: vulnapi\n publisher: CerberAuth\n publisher_url: https://www.cerberauth.com\n license: *license\n license_url: https://github.com/cerberauth/vulnapi/blob/main/LICENSE\n homepage: *homepage\n short_description: *description\n repository:\n owner: *owner\n name: winget-pkgs\n branch: \"vulnapi-{{.Version}}\"\n\nchocolateys:\n - name: vulnapi\n title: VulnAPI\n owners: CerberAuth\n authors: CerberAuth\n description: *description\n project_url: *homepage\n icon_url: \"https://www.cerberauth.com/icons/vulnapi.png\"\n license_url: https://github.com/cerberauth/vulnapi/blob/main/LICENSE\n copyright: CerberAuth\n tags: \"security vulnerability api openapi developer\"\n summary: *description\n api_key: \"{{ .Env.CHOCOLATEY_API_KEY }}\"\n source_repo: https://push.chocolatey.org/\n skip_publish: false\n\ndockers_v2:\n - id: vulnapi-dockerhub\n dockerfile: .docker/Dockerfile-goreleaser\n images:\n - \"cerberauth/vulnapi\"\n tags:\n - \"{{ .Tag }}\"\n - \"v{{ .Major }}\"\n - \"v{{ .Major }}.{{ .Minor }}\"\n - \"latest\"\n platforms:\n - linux/amd64\n - linux/arm64\n - linux/arm/v7\n\n - id: vulnapi-ghcr\n dockerfile: .docker/Dockerfile-goreleaser\n images:\n - \"ghcr.io/cerberauth/vulnapi\"\n tags:\n - \"{{ .Tag }}\"\n - \"v{{ .Major }}\"\n - \"v{{ .Major }}.{{ .Minor }}\"\n - \"latest\"\n platforms:\n - linux/amd64\n - linux/arm64\n - linux/arm/v7\n\ndocker_signs:\n - cmd: cosign\n artifacts: manifests\n output: true\n args:\n - \"sign\"\n - \"${artifact}@${digest}\"\n - \"--yes\"\n" }, { "path": ".vscode/launch.json", "content": "{\n // Use IntelliSense to learn about possible attributes.\n // Hover to view descriptions of existing attributes.\n // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387\n \"version\": \"0.2.0\",\n \"configurations\": [\n {\n \"name\": \"Launch Server\",\n \"type\": \"go\",\n \"request\": \"launch\",\n \"mode\": \"auto\",\n \"program\": \"${workspaceRoot}\",\n \"args\": [\"--sqa-opt-out\", \"serve\"]\n }\n ]\n}" }, { "path": ".whitesource", "content": "{\n \"scanSettings\": {\n \"baseBranches\": []\n },\n \"checkRunSettings\": {\n \"vulnerableCheckRunConclusionLevel\": \"failure\",\n \"displayMode\": \"diff\",\n \"useMendCheckNames\": true\n },\n \"issueSettings\": {\n \"minSeverityLevel\": \"LOW\",\n \"issueType\": \"DEPENDENCY\"\n }\n}" }, { "path": "LICENSE", "content": "MIT License\n\nCopyright (c) 2023 CerberAuth\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n" }, { "path": "README.md", "content": "

\n \"vulnapi\n

\n\n---\n\n[![Join Discord](https://img.shields.io/discord/1242773130137833493?label=Discord&style=for-the-badge)](https://www.cerberauth.com/community)\n[![GitHub Workflow Status](https://img.shields.io/github/actions/workflow/status/cerberauth/vulnapi/ci.yml?branch=main&label=core%20build&style=for-the-badge)](https://github.com/cerberauth/vulnapi/actions/workflows/ci.yml)\n![Latest version](https://img.shields.io/github/v/release/cerberauth/vulnapi?sort=semver&style=for-the-badge)\n[![Github Repo Stars](https://img.shields.io/github/stars/cerberauth/vulnapi?style=for-the-badge)](https://github.com/cerberauth/vulnapi)\n![License](https://img.shields.io/github/license/cerberauth/vulnapi?style=for-the-badge)\n\n# VulnAPI: An API Security Vulnerability Scanner\n\nVulnAPI is an Open-Source DAST designed to help you scan your APIs for common security vulnerabilities and weaknesses.\n\nBy using this tool, you can detect and mitigate security vulnerabilities in your APIs before they are exploited by attackers.\n\n![Demo](demo.gif)\n\n## Installation\n\nBefore making your first scan with VulnAPI, you have to download and install it. Please follow the instructions on the [Installation documentation](https://www.cerberauth.com/docs/vulnapi/installation/) page.\n\n## Documentation\n\nBefore scanning, you can discover target API useful information by using the `discover` command.\n\nThe Vulnerability Scanner CLI offers two methods for scanning APIs:\n* **Using Curl-like CLI**: This method involves directly invoking the CLI with parameters resembling curl commands.\n* **Using OpenAPI Contracts**: This method utilizes OpenAPI contracts to specify API endpoints for scanning.\n\n### Discover Command\n\nTo discover target API useful information, leaked files and well-known path execute the following command:\n\n```bash\nvulnapi discover api [API_URL]\n```\n\nExample output:\n\n```bash\n| TYPE | URL |\n|---------------|---------------------------------------------|\n| OpenAPI | http://localhost:5000/openapi.json |\n| GraphQL | http://localhost:5000/graphql |\n| Well-Known | http://localhost:8080/.well-known/jwks.json |\n| Exposed Files | http://localhost:8080/.env.dev |\n\n| TECHNOLOGIE/SERVICE | VALUE |\n|---------------------|---------------|\n| Framework | Flask:2.2.3 |\n| Language | Python:3.7.17 |\n| Server | Flask:2.2.3 |\n```\n\n### Using Curl-like CLI\n\nTo perform a scan using the Curl-like CLI, execute the following command:\n\n```bash\nvulnapi scan curl [API_URL] [CURL_OPTIONS]\n```\n\nReplace `[API_URL]` with the URL of the API to scan, and `[CURL_OPTIONS]` with any additional curl options you wish to include.\n\nExample:\n\n```bash\nvulnapi scan curl -X POST https://vulnapi.cerberauth.com/vulnerable/api -H \"Authorization: Bearer eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiIxMjM0NTY3ODkwIiwiaWF0IjoxNTE2MjM5MDIyfQ.\"\n```\n\n### Using OpenAPI Contracts\n\nTo perform a scan using OpenAPI contracts, execute the following command:\n\n```bash\necho \"[JWT_TOKEN]\" | vulnapi scan openapi [PATH_OR_URL_TO_OPENAPI_FILE]\n```\n\nReplace [PATH_OR_URL_TO_OPENAPI_FILE] with the path or the URL to the OpenAPI contract JSON file and [JWT_TOKEN] with the JWT token to use for authentication.\n\nExample:\n\n```bash\nvulnapi scan openapi https://vulnapi.cerberauth.com/vulnerable/.well-known/openapi.json\n```\n\n## Output\n\nThe CLI provides detailed reports on any vulnerabilities detected during the scan. Below is an example of the output format:\n\n| TECHNOLOGIE/SERVICE | VALUE |\n|---------------------|---------------|\n| Framework | Flask:2.2.3 |\n| Language | Python:3.11.9 |\n| Server | Flask:2.2.3 |\n\n\nAdvice: There are some low-risk issues. It's advised to take a look.\n\n| OPERATION | RISK LEVEL | CVSS 4.0 SCORE | OWASP | VULNERABILITY |\n|------------------------------|------------|----------------|--------------------------------|--------------------------------|\n| GET / | Medium | 5.1 | API8:2023 Security | X-Frame-Options Header is |\n| | | | Misconfiguration | missing |\n| | Medium | 5.1 | API8:2023 Security | CORS Headers are missing |\n| | | | Misconfiguration | |\n| | Medium | 5.1 | API8:2023 Security | CSP frame-ancestors policy is |\n| | | | Misconfiguration | not set |\n| | Info | 0.0 | API8:2023 Security | X-Content-Type-Options Header |\n| | | | Misconfiguration | is missing |\n| | Info | 0.0 | API8:2023 Security | Operation May Accepts |\n| | | | Misconfiguration | Unauthenticated Requests |\n| | Info | 0.0 | API8:2023 Security | HSTS Header is missing |\n| | | | Misconfiguration | |\n| | Info | 0.0 | API8:2023 Security | CSP Header is not set |\n| | | | Misconfiguration | |\n| GET /books/v1 | Medium | 5.1 | API8:2023 Security | CSP frame-ancestors policy is |\n| | | | Misconfiguration | not set |\n| | Medium | 5.1 | API8:2023 Security | X-Frame-Options Header is |\n| | | | Misconfiguration | missing |\n| | Medium | 5.1 | API8:2023 Security | CORS Headers are missing |\n| | | | Misconfiguration | |\n| | Info | 0.0 | API8:2023 Security | CSP Header is not set |\n| | | | Misconfiguration | |\n| | Info | 0.0 | API8:2023 Security | HSTS Header is missing |\n| | | | Misconfiguration | |\n| | Info | 0.0 | API8:2023 Security | X-Content-Type-Options Header |\n| | | | Misconfiguration | is missing |\n| | Info | 0.0 | API8:2023 Security | Operation May Accepts |\n| | | | Misconfiguration | Unauthenticated Requests \n\nIn this example, each line represents a detected vulnerability, severity level (critical), vulnerability type, affected operation (GET http://localhost:8080/), and a description of the vulnerability.\n\n## Vulnerabilities Detected\n\nAll the vulnerabilities detected by the project are listed at this URL: [API Vulnerabilities Detected](https://www.cerberauth.com/docs/vulnapi/vulnerabilities?utm_source=github&utm_medium=readme).\n\n> More vulnerabilities and best practices will be added in future releases. If you have any suggestions or requests for additional vulnerabilities or best practices to be included, please feel free to open an issue or submit a pull request.\n\n## Proxy Support\n\nThe scanner supports proxy configurations for scanning APIs behind a proxy server. To use a proxy, set the `HTTP_PROXY` or `HTTPS_PROXY` environment variables with the proxy URL.\n\nA command arg `--proxy` is also available to specify the proxy URL.\n\n## Additional Options\n\nThe VulnAPI may support additional options for customizing scans or output formatting. Run `vulnapi -h` or `vulnapi help` command to view available options and their descriptions.\n\n## Telemetry\n\nThe scanner collects anonymous usage data to help improve the tool. This data includes the number of scans performed, number of detected vulnerabilities, and the severity of vulnerabilities. No sensitive information is collected. You can opt-out of telemetry by passing the `--sqa-opt-out` flag.\n\n## Complete CLI Help\n\nTo view the complete CLI help, execute the following command:\n\n```bash\nvulnapi -h\n```\n\nHere is the output of the help command:\n\n```bash\nvulnapi\n\nUsage:\n vulnapi [command]\n\nAvailable Commands:\n completion Generate the autocompletion script for the specified shell\n help Help about any command\n jwt Generate JWT tokens\n scan API Scan\n serve Start the server\n\nFlags:\n -h, --help help for vulnapi\n --sqa-opt-out Opt out of sending anonymous usage statistics and crash reports to help improve the tool\n\nUse \"vulnapi [command] --help\" for more information about a command.\n```\n\n## Disclaimer\n\nThis scanner is provided for educational and informational purposes only. It should not be used for malicious purposes or to attack any system without proper authorization. Always respect the security and privacy of others.\n\n## Thanks\n\nThis project used the following open-source libraries:\n* [SecLists](https://github.com/danielmiessler/SecLists)\n* [projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo)\n\n## License\n\nThis repository is licensed under the [MIT License](https://github.com/cerberauth/vulnapi/blob/main/LICENSE) @ [CerberAuth](https://www.cerberauth.com/). You are free to use, modify, and distribute the contents of this repository for educational and testing purposes.\n" }, { "path": "api/curl.go", "content": "package api\n\nimport (\n\t\"net/http\"\n\t\"net/url\"\n\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/gin-gonic/gin\"\n)\n\ntype NewURLScanRequest struct {\n\tURL string `form:\"url\" json:\"url\" binding:\"required\"`\n\tMethod string `form:\"method\" json:\"method\" binding:\"required\"`\n\tData string `form:\"data\" json:\"data\"`\n\n\tOpts *ScanOptions `json:\"options\"`\n}\n\nfunc (h *Handler) ScanURL(ctx *gin.Context) {\n\tvar form NewURLScanRequest\n\tif err := ctx.ShouldBindJSON(&form); err != nil {\n\t\tctx.JSON(http.StatusBadRequest, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\tparsedUrl, err := url.Parse(form.URL)\n\tif err != nil {\n\t\tctx.JSON(http.StatusBadRequest, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\topts := parseScanOptions(form.Opts)\n\topts.Header = ctx.Request.Header\n\topts.Cookies = ctx.Request.Cookies()\n\tclient := request.NewClient(opts)\n\n\ts, err := scenario.NewURLScan(form.Method, parsedUrl, form.Data, client, &scan.ScanOptions{\n\t\tIncludeScans: form.Opts.Scans,\n\t\tExcludeScans: form.Opts.ExcludeScans,\n\t})\n\tif err != nil {\n\t\tctx.JSON(http.StatusInternalServerError, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\treporter, _, err := s.Execute(ctx, nil)\n\tif err != nil {\n\t\tctx.JSON(http.StatusInternalServerError, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\tctx.JSON(http.StatusOK, HTTPResponseReports{\n\t\tReports: reporter.GetScanReports(),\n\t})\n}\n" }, { "path": "api/graphql.go", "content": "package api\n\nimport (\n\t\"net/http\"\n\t\"net/url\"\n\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/gin-gonic/gin\"\n)\n\ntype NewGraphQLScanRequest struct {\n\tEndpoint string `form:\"endpoint\" json:\"endpoint\" binding:\"required\"`\n\n\tOpts *ScanOptions `json:\"options\"`\n}\n\nfunc (h *Handler) ScanGraphQL(ctx *gin.Context) {\n\tvar form NewGraphQLScanRequest\n\tif err := ctx.ShouldBindJSON(&form); err != nil {\n\t\tctx.JSON(http.StatusBadRequest, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\tparsedEndpoint, err := url.Parse(form.Endpoint)\n\tif err != nil {\n\t\tctx.JSON(http.StatusBadRequest, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\topts := parseScanOptions(form.Opts)\n\topts.Header = ctx.Request.Header\n\topts.Cookies = ctx.Request.Cookies()\n\tclient := request.NewClient(opts)\n\n\ts, err := scenario.NewGraphQLScan(parsedEndpoint, client, &scan.ScanOptions{\n\t\tIncludeScans: form.Opts.Scans,\n\t\tExcludeScans: form.Opts.ExcludeScans,\n\t})\n\tif err != nil {\n\t\tctx.JSON(http.StatusInternalServerError, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\treporter, _, err := s.Execute(ctx, nil)\n\tif err != nil {\n\t\tctx.JSON(http.StatusInternalServerError, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\tctx.JSON(http.StatusOK, HTTPResponseReports{\n\t\tReports: reporter.GetScanReports(),\n\t})\n}\n" }, { "path": "api/handler.go", "content": "package api\n\nimport (\n\t\"github.com/gin-gonic/gin\"\n)\n\ntype Handler struct{}\n\nfunc NewHandler() *Handler {\n\treturn &Handler{}\n}\n\nfunc Routes(r *gin.Engine, h *Handler) {\n\tscanAPI := r.Group(\"/scans\")\n\tscanAPI.POST(\"/openapi\", h.ScanOpenAPI)\n\tscanAPI.POST(\"/graphql\", h.ScanGraphQL)\n\tscanAPI.POST(\"/url\", h.ScanURL)\n}\n" }, { "path": "api/openapi.go", "content": "package api\n\nimport (\n\t\"encoding/json\"\n\t\"net/http\"\n\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/gin-gonic/gin\"\n)\n\ntype NewOpenAPIScanRequest struct {\n\tSchema string `json:\"schema\" binding:\"required\"`\n\tSecuritySchemes map[string]struct {\n\t\tValue string `json:\"value\" binding:\"required\"`\n\t} `json:\"securitySchemes\"`\n\n\tOpts *ScanOptions `json:\"options\"`\n}\n\nfunc (h *Handler) ScanOpenAPI(ctx *gin.Context) {\n\tvar form NewOpenAPIScanRequest\n\tif err := ctx.ShouldBindJSON(&form); err != nil {\n\t\tctx.JSON(http.StatusBadRequest, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\tdoc, err := openapi.LoadFromData(ctx, []byte(form.Schema))\n\tif err != nil {\n\t\tctx.JSON(http.StatusInternalServerError, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\tif err := doc.Validate(ctx); err != nil {\n\t\tctx.JSON(http.StatusInternalServerError, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\topts := parseScanOptions(form.Opts)\n\topts.Header = ctx.Request.Header\n\topts.Cookies = ctx.Request.Cookies()\n\tclient := request.NewClient(opts)\n\n\tvalues := make(map[string]interface{}, len(form.SecuritySchemes))\n\tif form.SecuritySchemes != nil {\n\t\tfor key, value := range form.SecuritySchemes {\n\t\t\tvalues[key] = &value.Value\n\t\t}\n\t}\n\tsecuritySchemesValues := openapi.NewSecuritySchemeValues(values)\n\ts, err := scenario.NewOpenAPIScan(ctx, doc, securitySchemesValues, client, &scan.ScanOptions{\n\t\tIncludeScans: form.Opts.Scans,\n\t\tExcludeScans: form.Opts.ExcludeScans,\n\t})\n\tif err != nil {\n\t\tctx.JSON(http.StatusInternalServerError, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\treporter, _, err := s.Execute(ctx, nil)\n\tif err != nil {\n\t\tctx.JSON(http.StatusInternalServerError, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\tresponse := HTTPResponseReports{\n\t\tReports: reporter.GetScanReports(),\n\t}\n\t_, err = json.Marshal(response)\n\tif err != nil {\n\t\tctx.JSON(http.StatusInternalServerError, gin.H{\"error\": err.Error()})\n\t\treturn\n\t}\n\n\tctx.JSON(http.StatusOK, response)\n}\n" }, { "path": "api/request.go", "content": "package api\n\nimport (\n\t\"net/url\"\n\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n)\n\ntype ScanOptions struct {\n\tRateLimit int `json:\"rateLimit\"`\n\tProxyURL string `json:\"proxy\"`\n\n\tScans []string `json:\"scans\"`\n\tExcludeScans []string `json:\"excludeScans\"`\n}\n\nfunc parseScanOptions(opts *ScanOptions) request.NewClientOptions {\n\tif opts == nil {\n\t\topts = &ScanOptions{}\n\t}\n\n\tvar proxyURL *url.URL\n\tif opts.ProxyURL != \"\" {\n\t\tproxyURL, _ = url.Parse(opts.ProxyURL)\n\t}\n\n\treturn request.NewClientOptions{\n\t\tRateLimit: opts.RateLimit,\n\t\tProxyURL: proxyURL,\n\n\t\tHeader: nil,\n\t\tCookies: nil,\n\t}\n}\n" }, { "path": "api/response.go", "content": "package api\n\nimport (\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\ntype HTTPResponseReports struct {\n\tReports []*report.ScanReport `json:\"reports\"`\n}\n" }, { "path": "api/response_test.go", "content": "package api_test\n\nimport (\n\t\"encoding/json\"\n\t\"net/http\"\n\t\"testing\"\n\t\"time\"\n\n\t\"github.com/cerberauth/vulnapi/api\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestMarshalHTTPResponseReports(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", op)\n\tsr.StartTime = time.Date(2020, 1, 1, 0, 0, 0, 0, time.UTC)\n\tsr.EndTime = time.Date(2020, 1, 1, 0, 0, 0, 0, time.UTC)\n\n\thrr := api.HTTPResponseReports{\n\t\tReports: []*report.ScanReport{sr},\n\t}\n\n\tb, err := json.Marshal(hrr)\n\n\tassert.NoError(t, err)\n\tassert.NotEmpty(t, b)\n}\n" }, { "path": "cmd/discover/api.go", "content": "package discover\n\nimport (\n\t\"log\"\n\t\"net/http\"\n\t\"net/url\"\n\n\t\"github.com/cerberauth/cobracurl\"\n\tinternalCmd \"github.com/cerberauth/vulnapi/internal/cmd\"\n\t\"github.com/cerberauth/vulnapi/internal/cmd/printtable\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\t\"github.com/schollz/progressbar/v3\"\n\t\"github.com/spf13/cobra\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\nfunc NewAPICmd() (apiCmd *cobra.Command) {\n\tapiCmd = &cobra.Command{\n\t\tUse: \"api [url]\",\n\t\tShort: \"Discover api endpoints and server information\",\n\t\tArgs: cobra.ExactArgs(1),\n\t\tRun: func(cmd *cobra.Command, args []string) {\n\t\t\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\t\t\ttelemetryDiscoverApiSuccessCounter, _ := telemetryMeter.Int64Counter(\"discover.api.success.counter\")\n\t\t\ttelemetryDiscoverApiErrorCounter, _ := telemetryMeter.Int64Counter(\"discover.api.error.counter\")\n\t\t\tctx := cmd.Context()\n\n\t\t\tif args[0] == \"\" {\n\t\t\t\ttelemetryDiscoverApiErrorCounter.Add(ctx, 1, metric.WithAttributes(otelErrorReasonAttributeKey.String(\"url is required\")))\n\t\t\t\tlog.Fatal(\"url is required\")\n\t\t\t}\n\n\t\t\tparsedUrl, err := url.Parse(args[0])\n\t\t\tif err != nil {\n\t\t\t\ttelemetryDiscoverApiErrorCounter.Add(ctx, 1, metric.WithAttributes(otelErrorReasonAttributeKey.String(\"invalid url\")))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tclient, err := internalCmd.NewHTTPClientFromCmd(cmd)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryDiscoverApiErrorCounter.Add(ctx, 1, metric.WithAttributes(otelErrorReasonAttributeKey.String(\"invalid client\")))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t\theaders, cookies, err := cobracurl.BuildRequestHeaders(cmd)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryDiscoverApiErrorCounter.Add(ctx, 1, metric.WithAttributes(otelErrorReasonAttributeKey.String(\"error building request headers\")))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t\tclient = client.WithHeader(headers).WithCookies(cookies)\n\n\t\t\ts, err := scenario.NewDiscoverAPIScan(http.MethodGet, parsedUrl, client, &scan.ScanOptions{\n\t\t\t\tIncludeScans: internalCmd.GetIncludeScans(),\n\t\t\t\tExcludeScans: internalCmd.GetExcludeScans(),\n\t\t\t})\n\t\t\tif err != nil {\n\t\t\t\ttelemetryDiscoverApiErrorCounter.Add(ctx, 1, metric.WithAttributes(otelErrorReasonAttributeKey.String(\"invalid scan\")))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tvar bar *progressbar.ProgressBar\n\t\t\tif !internalCmd.GetNoProgress() {\n\t\t\t\tbar = internalCmd.NewProgressBar(len(s.GetOperationsScans()))\n\t\t\t\t// nolint:errcheck\n\t\t\t\tdefer bar.Finish()\n\t\t\t}\n\t\t\treporter, _, err := s.Execute(ctx, func(operationScan *scan.OperationScan) {\n\t\t\t\tif bar != nil {\n\t\t\t\t\t// nolint:errcheck\n\t\t\t\t\tbar.Add(1)\n\t\t\t\t}\n\t\t\t})\n\t\t\tif err != nil {\n\t\t\t\ttelemetryDiscoverApiErrorCounter.Add(ctx, 1, metric.WithAttributes(otelErrorReasonAttributeKey.String(\"error executing scan\")))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tprinttable.WellKnownPathsScanReport(reporter)\n\t\t\tprinttable.FingerprintScanReport(reporter)\n\n\t\t\ttelemetryDiscoverApiSuccessCounter.Add(ctx, 1)\n\t\t},\n\t}\n\n\tinternalCmd.AddCommonArgs(apiCmd)\n\n\treturn apiCmd\n}\n" }, { "path": "cmd/discover/domain.go", "content": "package discover\n\nimport (\n\t\"fmt\"\n\t\"log\"\n\n\t\"github.com/cerberauth/cobracurl\"\n\tinternalCmd \"github.com/cerberauth/vulnapi/internal/cmd\"\n\t\"github.com/cerberauth/vulnapi/internal/cmd/printtable\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\t\"github.com/schollz/progressbar/v3\"\n\t\"github.com/spf13/cobra\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\nfunc NewDomainCmd() (domainCmd *cobra.Command) {\n\tdomainCmd = &cobra.Command{\n\t\tUse: \"domain [domain]\",\n\t\tShort: \"Discover subdomains with API endpoints\",\n\t\tArgs: cobra.ExactArgs(1),\n\t\tRun: func(cmd *cobra.Command, args []string) {\n\t\t\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\t\t\ttelemetryDiscoverDomainSuccessCounter, _ := telemetryMeter.Int64Counter(\"discover.domain.success.counter\")\n\t\t\ttelemetryDiscoverDomainErrorCounter, _ := telemetryMeter.Int64Counter(\"discover.domain.error.counter\")\n\t\t\tctx := cmd.Context()\n\n\t\t\tdomain := args[0]\n\n\t\t\tclient, err := internalCmd.NewHTTPClientFromCmd(cmd)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryDiscoverDomainErrorCounter.Add(ctx, 1, metric.WithAttributes(otelErrorReasonAttributeKey.String(\"invalid client\")))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t\theaders, cookies, err := cobracurl.BuildRequestHeaders(cmd)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryDiscoverDomainErrorCounter.Add(ctx, 1, metric.WithAttributes(otelErrorReasonAttributeKey.String(\"error building request headers\")))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t\tclient = client.WithHeader(headers).WithCookies(cookies)\n\n\t\t\tfmt.Printf(\"Discovering APIs for %s\\n\", domain)\n\t\t\tscans, err := scenario.NewDiscoverDomainsScan(domain, client, &scan.ScanOptions{\n\t\t\t\tIncludeScans: internalCmd.GetIncludeScans(),\n\t\t\t\tExcludeScans: internalCmd.GetExcludeScans(),\n\t\t\t})\n\t\t\tif err != nil {\n\t\t\t\ttelemetryDiscoverDomainErrorCounter.Add(ctx, 1, metric.WithAttributes(otelErrorReasonAttributeKey.String(\"invalid scan\")))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t\tfmt.Printf(\"Found %d Domains\\n\", len(scans))\n\n\t\t\tfor _, s := range scans {\n\t\t\t\tfmt.Println()\n\t\t\t\tfmt.Printf(\"Scanning %s\\n\", s.Operations[0].URL.String())\n\n\t\t\t\tvar bar *progressbar.ProgressBar\n\t\t\t\tif !internalCmd.GetNoProgress() {\n\t\t\t\t\tbar = internalCmd.NewProgressBar(len(s.GetOperationsScans()))\n\t\t\t\t\t// nolint:errcheck\n\t\t\t\t\tdefer bar.Finish()\n\t\t\t\t}\n\t\t\t\treporter, _, err := s.Execute(ctx, func(operationScan *scan.OperationScan) {\n\t\t\t\t\tif bar != nil {\n\t\t\t\t\t\t// nolint:errcheck\n\t\t\t\t\t\tbar.Add(1)\n\t\t\t\t\t}\n\t\t\t\t})\n\t\t\t\tif err != nil {\n\t\t\t\t\ttelemetryDiscoverDomainErrorCounter.Add(ctx, 1, metric.WithAttributes(otelErrorReasonAttributeKey.String(\"error executing scan\")))\n\t\t\t\t\tlog.Fatal(err)\n\t\t\t\t}\n\n\t\t\t\tprinttable.WellKnownPathsScanReport(reporter)\n\t\t\t\tprinttable.FingerprintScanReport(reporter)\n\n\t\t\t\ttelemetryDiscoverDomainSuccessCounter.Add(ctx, 1)\n\t\t\t}\n\t\t},\n\t}\n\n\tinternalCmd.AddCommonArgs(domainCmd)\n\n\treturn domainCmd\n}\n" }, { "path": "cmd/discover/root.go", "content": "package discover\n\nimport (\n\t\"github.com/spf13/cobra\"\n\t\"go.opentelemetry.io/otel/attribute\"\n)\n\nconst (\n\totelName = \"github.com/cerberauth/vulnapi/cmd/discover\"\n\n\totelErrorReasonAttributeKey = attribute.Key(\"error_reason\")\n)\n\nfunc NewDiscoverCmd() (discoverCmd *cobra.Command) {\n\tdiscoverCmd = &cobra.Command{\n\t\tUse: \"discover [type]\",\n\t\tShort: \"Discover APIs, API endpoints and server information\",\n\t}\n\n\tdiscoverCmd.AddCommand(NewDomainCmd())\n\tdiscoverCmd.AddCommand(NewAPICmd())\n\n\treturn discoverCmd\n}\n" }, { "path": "cmd/discover/root_test.go", "content": "package discover_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/cmd/discover\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewDiscoverCmd(t *testing.T) {\n\tscanCmd := discover.NewDiscoverCmd()\n\n\tassert.NotNil(t, scanCmd)\n\n\t// Assert that NewCURLScanCmd and NewOpenAPIScanCmd commands are added\n\tassert.NotNil(t, scanCmd.Commands())\n}\n" }, { "path": "cmd/jwt/root.go", "content": "package jwt\n\nimport (\n\t\"errors\"\n\t\"fmt\"\n\t\"log\"\n\t\"strings\"\n\n\t\"github.com/cerberauth/jwtop/jwt/editor\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\tjwtlib \"github.com/golang-jwt/jwt/v5\"\n\t\"github.com/spf13/cobra\"\n\t\"go.opentelemetry.io/otel/attribute\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\nconst (\n\totelName = \"github.com/cerberauth/vulnapi/cmd/discover\"\n\n\totelErrorReasonAttributeKey = attribute.Key(\"error_reason\")\n\talgorithmAttributeKey = attribute.Key(\"algorithm\")\n)\n\ntype Algorithm string\n\nconst (\n\tNone Algorithm = \"NONE\"\n\tHS256 Algorithm = \"HS256\"\n\tHS384 Algorithm = \"HS384\"\n\tHS512 Algorithm = \"HS512\"\n\tRS256 Algorithm = \"RS256\"\n\tRS384 Algorithm = \"RS384\"\n\tRS512 Algorithm = \"RS512\"\n\tES256 Algorithm = \"ES256\"\n\tES384 Algorithm = \"ES384\"\n)\n\nvar (\n\tsecret string\n\talg string\n\taud string\n)\n\nfunc GetAlgorithm(alg string) (jwtlib.SigningMethod, error) {\n\tswitch strings.ToUpper(alg) {\n\tcase string(HS256):\n\t\treturn jwtlib.SigningMethodHS256, nil\n\tcase string(HS384):\n\t\treturn jwtlib.SigningMethodHS384, nil\n\tcase string(HS512):\n\t\treturn jwtlib.SigningMethodHS512, nil\n\tcase string(RS256):\n\t\treturn jwtlib.SigningMethodRS256, nil\n\tcase string(RS384):\n\t\treturn jwtlib.SigningMethodRS384, nil\n\tcase string(RS512):\n\t\treturn jwtlib.SigningMethodRS512, nil\n\tcase string(ES256):\n\t\treturn jwtlib.SigningMethodES256, nil\n\tcase string(ES384):\n\t\treturn jwtlib.SigningMethodES384, nil\n\tcase string(None):\n\t\treturn jwtlib.SigningMethodNone, nil\n\tdefault:\n\t\treturn nil, fmt.Errorf(\"invalid algorithm: %s\", alg)\n\t}\n}\n\nfunc NewJWTCmd() (cmd *cobra.Command) {\n\trootCmd := &cobra.Command{\n\t\tUse: \"jwt\",\n\t\tShort: \"Generate JWT tokens\",\n\t}\n\n\tgenerateCmd := &cobra.Command{\n\t\tUse: \"generate [token]\",\n\t\tShort: \"Generate a new JWT token from an existing token\",\n\t\tArgs: cobra.ExactArgs(1),\n\t\tRun: func(cmd *cobra.Command, args []string) {\n\t\t\totelAlgorithmAttribute := algorithmAttributeKey.String(alg)\n\n\t\t\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\t\t\ttelemetryJwtSuccessCounter, _ := telemetryMeter.Int64Counter(\"jwt.success.counter\")\n\t\t\ttelemetryJwtErrorCounter, _ := telemetryMeter.Int64Counter(\"jwt.error.counter\")\n\t\t\tctx := cmd.Context()\n\n\t\t\ttokenString := args[0]\n\t\t\tvar key interface{}\n\t\t\tvar newTokenString string\n\t\t\ttokenWriter, err := editor.NewTokenEditor(tokenString)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryJwtErrorCounter.Add(ctx, 1, metric.WithAttributes(otelAlgorithmAttribute, otelErrorReasonAttributeKey.String(\"invalid token\")))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tif secret != \"\" {\n\t\t\t\tkey = []byte(secret)\n\t\t\t}\n\n\t\t\tvar signingMethod jwtlib.SigningMethod\n\t\t\tif alg != \"\" {\n\t\t\t\tif signingMethod, err = GetAlgorithm(alg); err != nil {\n\t\t\t\t\ttelemetryJwtErrorCounter.Add(ctx, 1, metric.WithAttributes(otelAlgorithmAttribute, otelErrorReasonAttributeKey.String(\"invalid algorithm\")))\n\t\t\t\t\tlog.Fatal(err)\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif signingMethod == jwtlib.SigningMethodNone {\n\t\t\t\tkey = jwtlib.UnsafeAllowNoneSignatureType\n\t\t\t}\n\n\t\t\tif signingMethod == nil || key == nil {\n\t\t\t\terr = errors.New(\"algorithm and secret are required\")\n\t\t\t\ttelemetryJwtErrorCounter.Add(ctx, 1, metric.WithAttributes(otelAlgorithmAttribute, otelErrorReasonAttributeKey.String(err.Error())))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tnewTokenString, err = tokenWriter.SignWithMethodAndKey(signingMethod, key)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryJwtErrorCounter.Add(ctx, 1, metric.WithAttributes(otelAlgorithmAttribute, otelErrorReasonAttributeKey.String(\"invalid token\")))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tfmt.Println(newTokenString)\n\n\t\t\ttelemetryJwtSuccessCounter.Add(ctx, 1, metric.WithAttributes(otelAlgorithmAttribute))\n\t\t},\n\t}\n\n\tgenerateCmd.Flags().StringVarP(&secret, \"secret\", \"\", \"\", \"Secret key to sign the token\")\n\tgenerateCmd.Flags().StringVarP(&alg, \"alg\", \"\", \"\", \"Algorithm to sign the token\")\n\tgenerateCmd.Flags().StringVarP(&aud, \"aud\", \"\", \"\", \"Audience of the token\")\n\n\trootCmd.AddCommand(generateCmd)\n\n\treturn rootCmd\n}\n" }, { "path": "cmd/root.go", "content": "package cmd\n\nimport (\n\t\"context\"\n\t\"fmt\"\n\t\"os\"\n\n\t\"github.com/spf13/cobra\"\n\n\t\"github.com/cerberauth/vulnapi/cmd/discover\"\n\t\"github.com/cerberauth/vulnapi/cmd/jwt\"\n\t\"github.com/cerberauth/vulnapi/cmd/scan\"\n\t\"github.com/cerberauth/vulnapi/cmd/serve\"\n\t\"github.com/cerberauth/x/telemetryx\"\n)\n\nvar (\n\tsqaOptOut bool\n\totelShutdown func(context.Context) error\n)\n\nvar name = \"vulnapi\"\n\nfunc NewRootCmd(projectVersion, commit, date string) (cmd *cobra.Command) {\n\tversionCmd := &cobra.Command{\n\t\tUse: \"version\",\n\t\tShort: \"Print the version number of this application\",\n\t\tLong: `All software has versions. This is this application's`,\n\t\tRun: func(cmd *cobra.Command, args []string) {\n\t\t\tfmt.Println(projectVersion + \" (commit=\" + commit + \", built=\" + date + \")\")\n\t\t},\n\t}\n\n\trootCmd := &cobra.Command{\n\t\tUse: name,\n\t\tVersion: projectVersion + \" (commit=\" + commit + \", built=\" + date + \")\",\n\t\tShort: name,\n\t\tPersistentPreRun: func(cmd *cobra.Command, args []string) {\n\t\t\tif !sqaOptOut {\n\t\t\t\totelShutdown, _ = telemetryx.New(cmd.Context(), name, projectVersion, telemetryx.WithCommit(commit), telemetryx.WithBuildDate(date))\n\t\t\t}\n\t\t},\n\t\tPersistentPostRun: func(cmd *cobra.Command, args []string) {\n\t\t\tif otelShutdown != nil {\n\t\t\t\t_ = otelShutdown(cmd.Context())\n\t\t\t\totelShutdown = nil\n\t\t\t}\n\t\t},\n\t}\n\trootCmd.AddCommand(versionCmd)\n\trootCmd.AddCommand(discover.NewDiscoverCmd())\n\trootCmd.AddCommand(scan.NewScanCmd())\n\trootCmd.AddCommand(jwt.NewJWTCmd())\n\trootCmd.AddCommand(serve.NewServeCmd())\n\n\trootCmd.PersistentFlags().BoolVarP(&sqaOptOut, \"sqa-opt-out\", \"\", false, \"Opt out of sending anonymous usage statistics and crash reports to help improve the tool\")\n\n\treturn rootCmd\n}\n\nfunc Execute(projectVersion, commit, date string) {\n\tc := NewRootCmd(projectVersion, commit, date)\n\tdefer func() {\n\t\tif otelShutdown != nil {\n\t\t\t_ = otelShutdown(context.Background())\n\t\t\totelShutdown = nil\n\t\t}\n\t}()\n\n\tif err := c.Execute(); err != nil {\n\t\tif otelShutdown != nil {\n\t\t\t_ = otelShutdown(context.Background())\n\t\t\totelShutdown = nil\n\t\t}\n\n\t\t_, _ = os.Stderr.WriteString(err.Error() + \"\\n\")\n\t\t// nolint: gocritic // false positive\n\t\tos.Exit(1)\n\t}\n}\n" }, { "path": "cmd/scan/curl.go", "content": "package scan\n\nimport (\n\t\"io\"\n\t\"log\"\n\n\t\"github.com/cerberauth/cobracurl\"\n\tinternalCmd \"github.com/cerberauth/vulnapi/internal/cmd\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\t\"github.com/schollz/progressbar/v3\"\n\t\"github.com/spf13/cobra\"\n\t\"go.opentelemetry.io/otel/attribute\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\nvar (\n\tmethodAttributeKey = attribute.Key(\"method\")\n)\n\nfunc NewCURLScanCmd() (scanCmd *cobra.Command) {\n\tvar (\n\t\tincludeScans []string\n\t\texcludeScans []string\n\t\treportFormat string\n\t\treportTransport string\n\t\treportFile string\n\t\treportURL string\n\t\tnoProgress bool\n\t\tseverityThreshold float64\n\t)\n\n\tscanCmd = &cobra.Command{\n\t\tUse: \"curl [URL]\",\n\t\tShort: \"CURL style Scan\",\n\t\tArgs: cobra.ExactArgs(1),\n\t\tRun: func(cmd *cobra.Command, args []string) {\n\t\t\treq, err := cobracurl.BuildRequest(cmd, args)\n\t\t\tif err != nil {\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\totelMethodAttribute := methodAttributeKey.String(req.Method)\n\t\t\totelIncludeScansAttribute := includeScansAttributeKey.StringSlice(internalCmd.FilterScans(includeScans))\n\t\t\totelExcludeScansAttribute := excludeScansAttributeKey.StringSlice(internalCmd.FilterScans(excludeScans))\n\t\t\totelAttributes := []attribute.KeyValue{\n\t\t\t\totelMethodAttribute,\n\t\t\t\totelIncludeScansAttribute,\n\t\t\t\totelExcludeScansAttribute,\n\t\t\t}\n\n\t\t\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\t\t\ttelemetryScanCurlSuccessCounter, _ := telemetryMeter.Int64Counter(\"scan.curl.success.counter\")\n\t\t\ttelemetryScanCurlErrorCounter, _ := telemetryMeter.Int64Counter(\"scan.curl.error.counter\")\n\t\t\tctx := cmd.Context()\n\n\t\t\t// Extract body from the request for NewURLScan\n\t\t\tvar curlData string\n\t\t\tif req.Body != nil {\n\t\t\t\tbodyBytes, readErr := io.ReadAll(req.Body)\n\t\t\t\tif readErr != nil {\n\t\t\t\t\ttelemetryScanCurlErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"error reading body\"))...))\n\t\t\t\t\tlog.Fatal(readErr)\n\t\t\t\t}\n\t\t\t\tcurlData = string(bodyBytes)\n\t\t\t}\n\n\t\t\tclient, err := internalCmd.NewHTTPClientFromCmd(cmd)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanCurlErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"invalid client\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t\t// Transfer headers and cookies from the built request onto the vulnapi client\n\t\t\tclient = client.WithHeader(req.Header).WithCookies(req.Cookies())\n\t\t\trequest.SetDefaultClient(client)\n\n\t\t\t// Set package-level report vars used by PrintOrExportReport\n\t\t\tinternalCmd.SetReportFile(reportFile)\n\t\t\tinternalCmd.SetReportURL(reportURL)\n\t\t\tinternalCmd.SetSeverityThreshold(severityThreshold)\n\n\t\t\ts, err := scenario.NewURLScan(req.Method, req.URL, curlData, client, &scan.ScanOptions{\n\t\t\t\tIncludeScans: internalCmd.FilterScans(includeScans),\n\t\t\t\tExcludeScans: internalCmd.FilterScans(excludeScans),\n\t\t\t})\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanCurlErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"invalid scenario\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tvar bar *progressbar.ProgressBar\n\t\t\tif !noProgress {\n\t\t\t\tbar = internalCmd.NewProgressBar(len(s.GetOperationsScans()))\n\t\t\t\t// nolint:errcheck\n\t\t\t\tdefer bar.Finish()\n\t\t\t}\n\t\t\treporter, _, err := s.Execute(ctx, func(operationScan *scan.OperationScan) {\n\t\t\t\tif bar != nil {\n\t\t\t\t\t// nolint:errcheck\n\t\t\t\t\tbar.Add(1)\n\t\t\t\t}\n\t\t\t})\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanCurlErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"error executing scenario\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\terr = internalCmd.PrintOrExportReport(reportFormat, reportTransport, reporter)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanCurlErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"error printing report\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\ttelemetryScanCurlSuccessCounter.Add(ctx, 1, metric.WithAttributes(otelAttributes...))\n\t\t},\n\t}\n\n\tcobracurl.RegisterFlags(scanCmd.Flags())\n\n\t// vulnapi-specific flags (no conflicting shorthands with cobracurl)\n\tscanCmd.Flags().StringArrayVar(&includeScans, \"scans\", nil, \"Include specific scans\")\n\tscanCmd.Flags().StringArrayVar(&excludeScans, \"exclude-scans\", nil, \"Exclude specific scans\")\n\tscanCmd.Flags().StringVar(&reportFormat, \"report-format\", \"table\", \"Report format (table, json, yaml)\")\n\tscanCmd.Flags().StringVar(&reportTransport, \"report-transport\", \"file\", \"The transport to use for report (e.g. file, http)\")\n\tscanCmd.Flags().StringVar(&reportFile, \"report-file\", \"\", \"The file to write the report to\")\n\tscanCmd.Flags().StringVar(&reportURL, \"report-url\", \"\", \"The URL to send the report to\")\n\tscanCmd.Flags().BoolVar(&noProgress, \"no-progress\", false, \"Disable progress output\")\n\tscanCmd.Flags().Float64Var(&severityThreshold, \"severity-threshold\", 1, \"Threshold to trigger stderr output if at least one vulnerability CVSS is higher\")\n\n\treturn scanCmd\n}\n" }, { "path": "cmd/scan/graphql.go", "content": "package scan\n\nimport (\n\t\"log\"\n\n\t\"github.com/cerberauth/cobracurl\"\n\tinternalCmd \"github.com/cerberauth/vulnapi/internal/cmd\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\t\"github.com/schollz/progressbar/v3\"\n\t\"github.com/spf13/cobra\"\n\t\"go.opentelemetry.io/otel/attribute\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\nfunc NewGraphQLScanCmd() (scanCmd *cobra.Command) {\n\tvar (\n\t\tincludeScans []string\n\t\texcludeScans []string\n\t\treportFormat string\n\t\treportTransport string\n\t\treportFile string\n\t\treportURL string\n\t\tnoProgress bool\n\t\tseverityThreshold float64\n\t)\n\n\tscanCmd = &cobra.Command{\n\t\tUse: \"graphql [endpoint]\",\n\t\tShort: \"GraphQL scan\",\n\t\tArgs: cobra.ExactArgs(1),\n\t\tRun: func(cmd *cobra.Command, args []string) {\n\t\t\treq, err := cobracurl.BuildRequest(cmd, args)\n\t\t\tif err != nil {\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\totelIncludeScansAttribute := includeScansAttributeKey.StringSlice(internalCmd.FilterScans(includeScans))\n\t\t\totelExcludeScansAttribute := excludeScansAttributeKey.StringSlice(internalCmd.FilterScans(excludeScans))\n\t\t\totelAttributes := []attribute.KeyValue{\n\t\t\t\totelIncludeScansAttribute,\n\t\t\t\totelExcludeScansAttribute,\n\t\t\t}\n\n\t\t\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\t\t\ttelemetryScanGraphQLSuccessCounter, _ := telemetryMeter.Int64Counter(\"scan.graphql.success.counter\")\n\t\t\ttelemetryScanGraphQLErrorCounter, _ := telemetryMeter.Int64Counter(\"scan.graphql.error.counter\")\n\t\t\tctx := cmd.Context()\n\n\t\t\tclient, err := internalCmd.NewHTTPClientFromCmd(cmd)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanGraphQLErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"invalid client\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t\t// Transfer headers and cookies from the built request onto the vulnapi client\n\t\t\tclient = client.WithHeader(req.Header).WithCookies(req.Cookies())\n\t\t\trequest.SetDefaultClient(client)\n\n\t\t\t// Set package-level report vars used by PrintOrExportReport\n\t\t\tinternalCmd.SetReportFile(reportFile)\n\t\t\tinternalCmd.SetReportURL(reportURL)\n\t\t\tinternalCmd.SetSeverityThreshold(severityThreshold)\n\n\t\t\ts, err := scenario.NewGraphQLScan(req.URL, client, &scan.ScanOptions{\n\t\t\t\tIncludeScans: internalCmd.FilterScans(includeScans),\n\t\t\t\tExcludeScans: internalCmd.FilterScans(excludeScans),\n\t\t\t})\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanGraphQLErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"invalid scenario\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tvar bar *progressbar.ProgressBar\n\t\t\tif !noProgress {\n\t\t\t\tbar = internalCmd.NewProgressBar(len(s.GetOperationsScans()))\n\t\t\t\t// nolint:errcheck\n\t\t\t\tdefer bar.Finish()\n\t\t\t}\n\t\t\treporter, _, err := s.Execute(ctx, func(operationScan *scan.OperationScan) {\n\t\t\t\tif bar != nil {\n\t\t\t\t\t// nolint:errcheck\n\t\t\t\t\tbar.Add(1)\n\t\t\t\t}\n\t\t\t})\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanGraphQLErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"error executing scenario\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\terr = internalCmd.PrintOrExportReport(reportFormat, reportTransport, reporter)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanGraphQLErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"error printing report\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\ttelemetryScanGraphQLSuccessCounter.Add(ctx, 1, metric.WithAttributes(otelAttributes...))\n\t\t},\n\t}\n\n\tcobracurl.RegisterFlags(scanCmd.Flags())\n\n\t// vulnapi-specific flags (no conflicting shorthands with cobracurl)\n\tscanCmd.Flags().StringArrayVar(&includeScans, \"scans\", nil, \"Include specific scans\")\n\tscanCmd.Flags().StringArrayVar(&excludeScans, \"exclude-scans\", nil, \"Exclude specific scans\")\n\tscanCmd.Flags().StringVar(&reportFormat, \"report-format\", \"table\", \"Report format (table, json, yaml)\")\n\tscanCmd.Flags().StringVar(&reportTransport, \"report-transport\", \"file\", \"The transport to use for report (e.g. file, http)\")\n\tscanCmd.Flags().StringVar(&reportFile, \"report-file\", \"\", \"The file to write the report to\")\n\tscanCmd.Flags().StringVar(&reportURL, \"report-url\", \"\", \"The URL to send the report to\")\n\tscanCmd.Flags().BoolVar(&noProgress, \"no-progress\", false, \"Disable progress output\")\n\tscanCmd.Flags().Float64Var(&severityThreshold, \"severity-threshold\", 1, \"Threshold to trigger stderr output if at least one vulnerability CVSS is higher\")\n\n\treturn scanCmd\n}\n" }, { "path": "cmd/scan/openapi.go", "content": "package scan\n\nimport (\n\t\"bufio\"\n\t\"log\"\n\t\"os\"\n\n\t\"github.com/cerberauth/cobracurl\"\n\tinternalCmd \"github.com/cerberauth/vulnapi/internal/cmd\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\t\"github.com/schollz/progressbar/v3\"\n\t\"github.com/spf13/cobra\"\n\t\"go.opentelemetry.io/otel/attribute\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\nfunc isStdinOpen() bool {\n\tstat, _ := os.Stdin.Stat()\n\treturn (stat.Mode() & os.ModeCharDevice) == 0\n}\n\nfunc readStdin() *string {\n\tscanner := bufio.NewScanner(os.Stdin)\n\tif scanner.Scan() {\n\t\tt := scanner.Text()\n\t\treturn &t\n\t}\n\n\treturn nil\n}\n\nfunc NewOpenAPIScanCmd() (scanCmd *cobra.Command) {\n\tvar (\n\t\tsecuritySchemesValueArg map[string]string\n\t)\n\n\tscanCmd = &cobra.Command{\n\t\tUse: \"openapi [OpenAPIPAth]\",\n\t\tShort: \"OpenAPI Operations Scan\",\n\t\tArgs: cobra.ExactArgs(1),\n\t\tRun: func(cmd *cobra.Command, args []string) {\n\t\t\totelIncludeScansAttribute := includeScansAttributeKey.StringSlice(internalCmd.GetIncludeScans())\n\t\t\totelExcludeScansAttribute := excludeScansAttributeKey.StringSlice(internalCmd.GetExcludeScans())\n\t\t\totelAttributes := []attribute.KeyValue{\n\t\t\t\totelIncludeScansAttribute,\n\t\t\t\totelExcludeScansAttribute,\n\t\t\t}\n\n\t\t\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\t\t\ttelemetryScanOpenAPISuccessCounter, _ := telemetryMeter.Int64Counter(\"scan.openapi.success.counter\")\n\t\t\ttelemetryScanOpenAPIErrorCounter, _ := telemetryMeter.Int64Counter(\"scan.openapi.error.counter\")\n\t\t\tctx := cmd.Context()\n\n\t\t\topenapiUrlOrPath := args[0]\n\t\t\tif openapiUrlOrPath == \"\" {\n\t\t\t\ttelemetryScanOpenAPIErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"openapi path is required\"))...))\n\t\t\t\tlog.Fatal(\"OpenAPI path is required\")\n\t\t\t}\n\n\t\t\tdoc, err := openapi.LoadOpenAPI(ctx, openapiUrlOrPath)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanOpenAPIErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"error loading openapi\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tif err := doc.Validate(ctx); err != nil {\n\t\t\t\ttelemetryScanOpenAPIErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"invalid openapi\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tvar validToken *string\n\t\t\tif isStdinOpen() {\n\t\t\t\tvalidToken = readStdin()\n\t\t\t}\n\n\t\t\tvalues := make(map[string]interface{}, len(securitySchemesValueArg))\n\t\t\tfor key, value := range securitySchemesValueArg {\n\t\t\t\tvalues[key] = &value\n\t\t\t}\n\t\t\tsecuritySchemesValues := openapi.NewSecuritySchemeValues(values).WithDefault(validToken)\n\n\t\t\tclient, err := internalCmd.NewHTTPClientFromCmd(cmd)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanOpenAPIErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"error creating http client\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t\theaders, cookies, err := cobracurl.BuildRequestHeaders(cmd)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanOpenAPIErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"error building request headers\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t\tclient = client.WithHeader(headers).WithCookies(cookies)\n\t\t\trequest.SetDefaultClient(client)\n\n\t\t\ts, err := scenario.NewOpenAPIScan(ctx, doc, securitySchemesValues, client, &scan.ScanOptions{\n\t\t\t\tIncludeScans: internalCmd.GetIncludeScans(),\n\t\t\t\tExcludeScans: internalCmd.GetExcludeScans(),\n\t\t\t})\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanOpenAPIErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"invalid scenario\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tvar bar *progressbar.ProgressBar\n\t\t\tif !internalCmd.GetNoProgress() {\n\t\t\t\tbar = internalCmd.NewProgressBar(len(s.GetOperationsScans()))\n\t\t\t\t// nolint:errcheck\n\t\t\t\tdefer bar.Finish()\n\t\t\t}\n\t\t\treporter, _, err := s.Execute(ctx, func(operationScan *scan.OperationScan) {\n\t\t\t\tif bar != nil {\n\t\t\t\t\t// nolint:errcheck\n\t\t\t\t\tbar.Add(1)\n\t\t\t\t}\n\t\t\t})\n\t\t\tif err != nil {\n\t\t\t\ttelemetryScanOpenAPIErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"error executing scan\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\tif err = internalCmd.PrintOrExportReport(internalCmd.GetReportFormat(), internalCmd.GetReportTransport(), reporter); err != nil {\n\t\t\t\ttelemetryScanOpenAPIErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"error printing report\"))...))\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\n\t\t\ttelemetryScanOpenAPISuccessCounter.Add(ctx, 1, metric.WithAttributes(otelAttributes...))\n\t\t},\n\t}\n\n\tinternalCmd.AddCommonArgs(scanCmd)\n\tscanCmd.Flags().StringToStringVarP(&securitySchemesValueArg, \"security-schemes\", \"\", nil, \"Example value for each security scheme\")\n\treturn scanCmd\n}\n" }, { "path": "cmd/scan/root.go", "content": "package scan\n\nimport (\n\t\"github.com/spf13/cobra\"\n\t\"go.opentelemetry.io/otel/attribute\"\n)\n\nconst (\n\totelName = \"github.com/cerberauth/vulnapi/cmd/scan\"\n\n\totelErrorReasonAttributeKey = attribute.Key(\"error_reason\")\n\tincludeScansAttributeKey = attribute.Key(\"include_scans\")\n\texcludeScansAttributeKey = attribute.Key(\"exclude_scans\")\n)\n\nfunc NewScanCmd() (scanCmd *cobra.Command) {\n\tscanCmd = &cobra.Command{\n\t\tUse: \"scan [type]\",\n\t\tShort: \"API Scan\",\n\t}\n\n\tscanCmd.AddCommand(NewCURLScanCmd())\n\tscanCmd.AddCommand(NewOpenAPIScanCmd())\n\tscanCmd.AddCommand(NewGraphQLScanCmd())\n\n\treturn scanCmd\n}\n" }, { "path": "cmd/scan/root_test.go", "content": "package scan_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/cmd/scan\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewScanCmd(t *testing.T) {\n\tscanCmd := scan.NewScanCmd()\n\n\tassert.NotNil(t, scanCmd)\n\n\t// Assert that NewCURLScanCmd and NewOpenAPIScanCmd commands are added\n\tassert.NotNil(t, scanCmd.Commands())\n}\n" }, { "path": "cmd/serve/root.go", "content": "package serve\n\nimport (\n\t\"log\"\n\n\t\"github.com/cerberauth/vulnapi/api\"\n\t\"github.com/gin-contrib/requestid\"\n\t\"github.com/gin-gonic/gin\"\n\t\"github.com/spf13/cobra\"\n)\n\nvar (\n\tport string\n)\n\nfunc NewServeCmd() (serveCmd *cobra.Command) {\n\tserveCmd = &cobra.Command{\n\t\tUse: \"serve\",\n\t\tShort: \"Start the server\",\n\t\tRun: func(cmd *cobra.Command, args []string) {\n\t\t\tr := gin.New()\n\t\t\tr.Use(gin.Recovery())\n\t\t\tr.Use(requestid.New())\n\n\t\t\thandler := api.NewHandler()\n\t\t\tapi.Routes(r, handler)\n\n\t\t\tif err := r.Run(\":\" + port); err != nil {\n\t\t\t\tlog.Fatal(err)\n\t\t\t}\n\t\t},\n\t}\n\n\tserveCmd.Flags().StringVarP(&port, \"port\", \"p\", \"8080\", \"Port to listen to\")\n\n\treturn serveCmd\n}\n" }, { "path": "demo.cast", "content": "{\"version\": 2, \"width\": 190, \"height\": 46, \"timestamp\": 1729172921, \"env\": {\"SHELL\": \"/usr/bin/zsh\", \"TERM\": \"xterm-256color\"}}\n[0.549615, \"o\", \"\\u001b[1m\\u001b[7m%\\u001b[27m\\u001b[1m\\u001b[0m \\r \\r\\u001b]2;manu@manu-pc:~\\u0007\\u001b]1;~\\u0007\"]\n[0.5607, \"o\", \"\\r\\u001b[0m\\u001b[27m\\u001b[24m\\u001b[J\\u001b[39m\\u001b[0m\\u001b[49m\\u001b[40m\\u001b[39m manu@manu-pc \\u001b[44m\\u001b[30m\\u001b[30m ~ \\u001b[49m\\u001b[34m\\u001b[39m \\u001b[K\"]\n[0.560786, \"o\", \"\\u001b[?1h\\u001b=\\u001b[?2004h\"]\n[0.872746, \"o\", \"c\"]\n[0.92654, \"o\", \"\\bcu\"]\n[1.030414, \"o\", \"r\"]\n[1.094325, \"o\", \"l\"]\n[1.166719, \"o\", \" \"]\n[1.351184, \"o\", \"http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[K\"]\n[1.582737, \"o\", \"\\u001b[?1l\\u001b>\"]\n[1.582788, \"o\", \"\\u001b[?2004l\\r\\r\\n\"]\n[1.583479, \"o\", \"\\u001b]2;curl http://127.0.0.1:8080 -I -H \\u0007\\u001b]1;curl\\u0007\"]\n[1.59193, \"o\", \"HTTP/1.1 401 Unauthorized\\r\\r\\n\\u001b[1mDate\\u001b[0m: Thu, 17 Oct 2024 13:48:43 GMT\\r\\r\\n\\r\\r\\n\"]\n[1.592547, \"o\", \"\\u001b[1m\\u001b[7m%\\u001b[27m\\u001b[1m\\u001b[0m \\r \\r\"]\n[1.592617, \"o\", \"\\u001b]2;manu@manu-pc:~\\u0007\\u001b]1;~\\u0007\"]\n[1.600249, \"o\", \"\\r\\u001b[0m\\u001b[27m\\u001b[24m\\u001b[J\\u001b[39m\\u001b[0m\\u001b[49m\\u001b[40m\\u001b[39m manu@manu-pc \\u001b[44m\\u001b[30m\\u001b[30m ~ \\u001b[49m\\u001b[34m\\u001b[39m \\u001b[K\"]\n[1.600281, \"o\", \"\\u001b[?1h\\u001b=\"]\n[1.600308, \"o\", \"\\u001b[?2004h\"]\n[2.991362, \"o\", \"curl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[K\"]\n[3.366271, \"o\", \"\\u001b[A\\u001b[79D\"]\n[4.007501, \"o\", \"vcurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[4.062914, \"o\", \"\\bvucurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[4.110254, \"o\", \"lcurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[4.278522, \"o\", \"ncurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[4.278632, \"o\", \"acurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[5.070958, \"o\", \"pcurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[5.118741, \"o\", \"icurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[5.198965, \"o\", \" curl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[5.623227, \"o\", \"scurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[5.646896, \"o\", \"\\u001b[1Ccurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[5.815085, \"o\", \"acurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[5.910902, \"o\", \"ncurl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[5.942392, \"o\", \" curl http://127.0.0.1:8080 -I -H \\\"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTczMzYsImlhdCI6MTcyOTE1MzczNiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.dqaX_Jsabyqz-fJyF9tfQdpOL6ft2SfZKkRdQr0qhDY\\\"\\u001b[A\\u001b[79D\"]\n[6.143006, \"o\", \"\\u001b[?1l\\u001b>\"]\n[6.143066, \"o\", \"\\u001b[?2004l\\u001b[1B\\r\\r\\n\"]\n[6.143722, \"o\", \"\\u001b]2;vulnapi scan curl http://127.0.0.1:8080 -I -H \\u0007\\u001b]1;vulnapi\\u0007\"]\n[6.298097, \"o\", \"\\r 7% |████████████ | (1/14) \"]\n[6.308194, \"o\", \"\\r \\r\\r 14% |████████████████████████ | (2/14) \"]\n[6.549512, \"o\", \"\\r \\r\\r 21% |████████████████████████████████████ | (3/14) \\r \\r\\r 28% |████████████████████████████████████████████████ | (4/14) \"]\n[6.549898, \"o\", \"\\r \\r\"]\n[6.549944, \"o\", \"\\r 35% |████████████████████████████████████████████████████████████ | (5/14) \"]\n[6.550186, \"o\", \"\\r \\r\"]\n[6.550226, \"o\", \"\\r 42% |████████████████████████████████████████████████████████████████████████ | (6/14) \"]\n[6.550378, \"o\", \"\\r \\r\"]\n[6.550415, \"o\", \"\\r 50% |██████████████████████████████████████████████████████████████████████████████████████ | (7/14) \"]\n[6.550701, \"o\", \"\\r \\r\"]\n[6.550769, \"o\", \"\\r 57% |██████████████████████████████████████████████████████████████████████████████████████████████████ | (8/14) \"]\n[6.550866, \"o\", \"\\r \\r\"]\n[6.550902, \"o\", \"\\r 64% |██████████████████████████████████████████████████████████████████████████████████████████████████████████████ | (9/14) \"]\n[8.327448, \"o\", \"\\r \\r\\r 71% |██████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████ | (10/14) \"]\n[8.327905, \"o\", \"\\r \\r\\r 78% |██████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████ | (11/14) \"]\n[8.328168, \"o\", \"\\r \\r\"]\n[8.328314, \"o\", \"\\r 85% |██████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████ | (12/14) \"]\n[8.328485, \"o\", \"\\r \\r\\r 92% |██████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████ | (13/14) \"]\n[8.328776, \"o\", \"\\r \\r\\r 100% |████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████| (14/14) \"]\n[8.367945, \"o\", \"\\r\\nError: There are some high-risk issues. It's advised to take immediate action.\\r\\n\\r\\n\"]\n[8.368049, \"o\", \"| STATUS | SCANS NUMBER |\\r\\n|---------|\"]\n[8.368084, \"o\", \"--------------|\\r\\n| \\u001b[1mPassed\\u001b[0m | \\u001b[1m11\\u001b[0m |\\r\\n| \\u001b[1mFailed\\u001b[0m | \\u001b[1m2\\u001b[0m |\\r\\n| \\u001b[1mSkipped\\u001b[0m | \\u001b[1m2\\u001b[0m |\\r\\n\"]\n[8.368178, \"o\", \"| \\u001b[1mNone\\u001b[0m | \\u001b[1m0\\u001b[0m |\\r\\n\\r\\n\"]\n[8.368697, \"o\", \"| OPERATION | RISK LEVEL | CVSS 4.0 SCORE | OWASP | ISSUE |\\r\\n\"]\n[8.368738, \"o\", \"|-----------|------------|----------------|--------------------------------|--------------------------------|\\r\\n\"]\n[8.368787, \"o\", \"| GET | \\u001b[1;101mCritical\\u001b[0m | 9.3 | API2:2023 Broken | JWT Algorithm None is accepted |\\r\\n| | | | Authentication | |\\r\\n\"]\n[8.36884, \"o\", \"| | \\u001b[1;43mMedium\\u001b[0m | 5.1 | API8:2023 Security | CSP frame-ancestors policy is |\\r\\n| | | | Misconfiguration | not set |\\r\\n\"]\n[8.368882, \"o\", \"| | \\u001b[1;43mMedium\\u001b[0m | 5.1 | API8:2023 Security | CORS Headers are missing |\\r\\n| | | | Misconfiguration | |\\r\\n\"]\n[8.368933, \"o\", \"| | \\u001b[1;43mMedium\\u001b[0m | 5.1 | API8:2023 Security | X-Frame-Options Header is |\\r\\n| | | | Misconfiguration | missing |\\r\\n\"]\n[8.368969, \"o\", \"| | \\u001b[1;44mInfo\\u001b[0m | 0.0 | API8:2023 Security | CSP Header is not set |\\r\\n| | | | Misconfiguration | |\\r\\n\"]\n[8.369268, \"o\", \"| | \\u001b[1;44mInfo\\u001b[0m | 0.0 | API8:2023 Security | HSTS Header is missing |\\r\\n| | | | Misconfiguration | |\\r\\n| | \\u001b[1;44mInfo\\u001b[0m | 0.0 | API8:2023 Security | X-Content-Type-Options Header |\\r\\n| | | | Misconfiguration | is missing |\\r\\n\\r\\n\"]\n[8.373265, \"o\", \"\\u001b[1m\\u001b[7m%\\u001b[27m\\u001b[1m\\u001b[0m \\r \\r\"]\n[8.373387, \"o\", \"\\u001b]2;manu@manu-pc:~\\u0007\\u001b]1;~\\u0007\"]\n[8.381705, \"o\", \"\\r\\u001b[0m\\u001b[27m\\u001b[24m\\u001b[J\\u001b[39m\\u001b[0m\\u001b[49m\\u001b[40m\\u001b[39m manu@manu-pc \\u001b[44m\\u001b[30m\\u001b[30m ~ \\u001b[49m\\u001b[34m\\u001b[39m \\u001b[K\"]\n[8.381772, \"o\", \"\\u001b[?1h\\u001b=\\u001b[?2004h\"]\n[8.90217, \"o\", \"\\u001b[?2004l\\r\\r\\n\"]\n" }, { "path": "docs/best-practices/_meta.yml", "content": "label: Best Practices\n" }, { "path": "docs/best-practices/jwt.mdx", "content": "---\ntitle: JWT Security Best Practices\ndescription: Best practices for securely implementing JSON Web Tokens (JWTs) in your APIs.\n---\n\nJSON Web Tokens (JWTs) are widely used for authentication and authorization in APIs. When implemented incorrectly they become a high-severity attack surface. This guide covers the most important best practices and links each point to the relevant VulnAPI scan.\n\n## Use Strong Signing Algorithms\n\nPrefer asymmetric algorithms (RS256, ES256) for distributed systems where multiple services verify tokens but only one issues them. This ensures the private key never leaves the issuer.\n\n- **Recommended**: RS256, RS384, RS512, ES256, ES384\n- **Acceptable for single-service systems**: HS256, HS384, HS512 (with a strong secret — see below)\n- **Never use**: `alg: none` in production\n\nUsing `alg: none` removes all cryptographic protection, making tokens trivially forgeable. VulnAPI detects this with the [`jwt.alg_none`](../vulnerabilities/broken-authentication/jwt-alg-none) scan.\n\n## Use a Minimum 256-bit Random Secret for HMAC\n\nWhen using HMAC algorithms (HS256/HS384/HS512), the secret key must be:\n\n- At least 256 bits (32 bytes) of cryptographically random data\n- Not a dictionary word, well-known default, or guessable string\n- Not an empty string\n\nTokens signed with empty or weak secrets are detected by the [`jwt.blank_secret`](../vulnerabilities/broken-authentication/jwt-blank-secret) and [`jwt.weak_secret`](../vulnerabilities/broken-authentication/jwt-weak-secret) scans.\n\n```bash\n# Generate a secure 256-bit secret (Linux/macOS)\nopenssl rand -base64 32\n```\n\n## Always Verify Signatures Server-Side\n\nNever trust a JWT without verifying its signature using the correct key. Skipping signature verification is one of the most dangerous implementation mistakes.\n\nVulnAPI detects this with the [`jwt.not_verified`](../vulnerabilities/broken-authentication/jwt-not-verified) scan (CVSS 9.3).\n\n```python\n# Python example using PyJWT — always pass algorithms explicitly\nimport jwt\npayload = jwt.decode(token, public_key, algorithms=[\"RS256\"])\n```\n\n## Reject Tokens With a Stripped Signature\n\nSome JWT libraries accept tokens whose signature segment is empty (null signature). Always configure your library to require a valid, non-empty signature.\n\nVulnAPI detects this with the [`jwt.null_signature`](../vulnerabilities/broken-authentication/jwt-null-signature) scan.\n\n## Validate Standard Claims\n\nAfter verifying the signature, validate these claims before trusting any payload data:\n\n| Claim | Description | Action |\n|-------|-------------|--------|\n| `iss` | Issuer — who created the token | Reject if not from a trusted issuer |\n| `aud` | Audience — who the token is intended for | Reject if your service is not the intended audience |\n| `exp` | Expiration time | Reject if current time is past `exp` |\n| `nbf` | Not-before time | Reject if current time is before `nbf` |\n| `sub` | Subject — who the token represents | Verify the user still exists / is active |\n\nFailure to validate `iss` and `aud` enables [cross-service relay attacks](../vulnerabilities/broken-authentication/jwt-cross-service-relay-attack).\n\n## Use Short Token Lifetimes With Refresh Token Rotation\n\nShort-lived access tokens limit the damage from a stolen token:\n\n- **Access tokens**: 5–15 minutes\n- **Refresh tokens**: hours to days, single-use only (rotate on each use)\n\nRotate refresh tokens on every use to detect token theft (if an already-used refresh token is presented, revoke the entire session).\n\n## Never Use `alg: none` in Production\n\nThe JWT specification allows `alg: none` for unsecured tokens (e.g., locally exchanged messages). This must never be accepted by any production API endpoint.\n\nHarden your JWT library to reject `none` explicitly:\n\n```go\n// Go example using golang-jwt\ntoken, err := jwt.Parse(tokenString, keyFunc, jwt.WithValidMethods([]string{\"RS256\", \"ES256\"}))\n```\n\n## Store Tokens Securely on the Client\n\n| Storage | XSS risk | CSRF risk | Recommendation |\n|---------|----------|-----------|----------------|\n| `localStorage` | High (JS readable) | None | Avoid for sensitive tokens |\n| `sessionStorage` | High (JS readable) | None | Avoid for sensitive tokens |\n| `HttpOnly` cookie | None (not JS readable) | Medium (mitigate with SameSite) | **Preferred** |\n| Memory (JS variable) | Low | None | Acceptable for SPAs |\n\nPrefer `HttpOnly; Secure; SameSite=Strict` cookies for web applications. See [HTTP Cookies Misconfiguration](../vulnerabilities/security-misconfiguration/http-cookies) for related checks.\n\n## References\n\n- [OWASP JWT Security Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/JSON_Web_Token_for_Java_Cheat_Sheet.html)\n- [RFC 7519 — JSON Web Token](https://datatracker.ietf.org/doc/html/rfc7519)\n- [Auth0 — JWT Best Practices](https://auth0.com/docs/secure/tokens/json-web-tokens/json-web-token-best-practices)\n" }, { "path": "docs/best-practices/security-headers.mdx", "content": "---\ntitle: API Security HTTP Headers\ndescription: Learn about the importance of HTTP security headers for API security and how to test them using VulnAPI.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\nIt's crucial to understand the importance of HTTP security headers, especially when it comes to API security. These headers provide important security features and protections for both the server and the client.\n\n## How to test?\n\nIf you want to test only that the API is sending the correct security headers, you can use the following command:\n\n\n \n```bash\nvulnapi scan curl [url] --scans misconfiguration.http_headers\n```\n \n \n```bash\nvulnapi scan openapi [OpenAPI_Path_Or_URL] --scans misconfiguration.http_headers\n```\n \n \n```bash\nvulnapi scan graphql --scans misconfiguration.http_headers [url]\n```\n \n\n\n## API Content Security Policies (CSP)\n\nContent Security Policy (CSP) headers are essential for mitigating various security risks in the context of APIs. CSP helps to prevent a range of attacks, including:\n\n- **Data Injection Attacks:** CSP can restrict the types of content that can be loaded, reducing the risk of attackers injecting malicious data into the API responses.\n- **Clickjacking:** Although primarily a concern for web pages, CSP can also help mitigate clickjacking by controlling the framing of content.\n\n### Example of Secure CSP Header for APIs\n\n```http\nContent-Security-Policy: default-src 'none'; frame-ancestors 'none';\n```\n\n`frame-ancestors 'none';` ensures that the API response cannot be embedded in iframes, preventing clickjacking attacks as your API should probably not be embedded in iframes.\n\n### Risks Mitigated by CSP\n\n1. **Cross-Site Scripting (XSS):** By restricting the sources from which scripts can be loaded, CSP helps to prevent attackers from injecting and executing malicious scripts.\n2. **Data Injection:** By controlling the sources of content, CSP reduces the risk of attackers injecting malicious data into the API responses.\n3. **Clickjacking:** By specifying frame-ancestors, CSP can prevent the API responses from being embedded in iframes, mitigating clickjacking attacks.\n\nImplementing CSP headers in your API responses is a proactive measure to enhance the security posture of your API, protecting both the server and the clients from various types of attacks.\n\n## API Cross-Origin Resource Sharing (CORS)\n\nCORS headers control access to resources from different origins. For APIs, proper CORS configuration ensures that only trusted domains can access the API resources, preventing unauthorized access from potentially malicious websites.\n\n### Example of Secure CORS Header for APIs\n\n```http\nAccess-Control-Allow-Origin: https://trusted-domain.com\n```\n\n## HTTP Strict Transport Security (HSTS)\n\nHSTS headers instruct the browser to always use HTTPS when communicating with the server, even if the user types \"http\" in the address bar. This prevents man-in-the-middle attacks and ensures that all data exchanged between the client and the server is encrypted.\n\n### Example of Secure HSTS Header for APIs\n\n```http\nStrict-Transport-Security: max-age=31536000; includeSubDomains\n```\n\n## X-Content-Type-Options\n\nThis header prevents browsers from **MIME-sniffing** a response away from the declared content type, which can help prevent certain types of attacks, such as content type confusion attacks.\n\n### Example of Secure X-Content-Type-Options Header for APIs\n\n```http\nX-Content-Type-Options: nosniff\n```\n\n## X-Frame-Options\n\nX-Frame-Options header protects against clickjacking attacks by preventing the API response from being embedded within a frame or iframe on another domain.\n\n### Example of Secure X-Frame-Options Header for APIs\n\n```http\nX-Frame-Options: DENY\n```\n\n## X-Permitted-Cross-Domain-Policies (deprecated)\n\nThis header specifies the policy file that governs how Flash and Adobe AIR applications can interact with the API resources across different domains. However, this header is deprecated and should not be used in modern applications.\n\n## References\n\n- [OWASP REST Security Headers](https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html#security-headers)\n- [MDN CSP](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP)\n" }, { "path": "docs/first-scan.mdx", "content": "---\ntitle: Your First Scan\ndescription: Run your first API security scan in under a minute using vulnapi scan curl.\nsidebar:\n order: 4\n---\n\nimport { Steps, Aside, CardGrid, LinkCard } from '@/components/docs'\n\nThe fastest way to try VulnAPI is with `vulnapi scan curl`. It works like curl — point it at any HTTP endpoint and it immediately starts testing for vulnerabilities.\n\n## Basic scan\n\n```bash\nvulnapi scan curl https://api.example.com/endpoint\n```\n\nThat's it. VulnAPI sends a series of crafted requests to the endpoint and prints a report.\n\n## Scanning an authenticated endpoint\n\nMost real APIs require authentication. Pass an `Authorization` header the same way you would with curl:\n\n```bash\nvulnapi scan curl https://api.example.com/endpoint \\\n -H \"Authorization: Bearer eyJhbGciOiJIUzI1NiJ9...\"\n```\n\nYou can repeat `-H` for additional headers (API keys, custom headers, etc.):\n\n```bash\nvulnapi scan curl https://api.example.com/endpoint \\\n -H \"Authorization: Bearer \" \\\n -H \"X-API-Key: \"\n```\n\n## Scanning a non-GET endpoint\n\nUse `-X` to set the HTTP method and `-d` to send a request body:\n\n```bash\nvulnapi scan curl https://api.example.com/login \\\n -X POST \\\n -d '{\"username\":\"alice\",\"password\":\"secret\"}' \\\n -H \"Content-Type: application/json\"\n```\n\n## Reading the report\n\nAfter the scan completes, VulnAPI prints a table like this:\n\n```\n| OPERATION | RISK LEVEL | CVSS 4.0 SCORE | OWASP | VULNERABILITY |\n|-----------------------------|------------|----------------|--------------------------|-----------------------------|\n| GET /endpoint | High | 9.3 | API2:2023 Broken Auth | JWT Token is not verified |\n| GET /endpoint | Medium | 5.1 | API8:2023 Security Misc | X-Frame-Options is missing |\n| GET /endpoint | Info | 0.0 | API8:2023 Security Misc | HSTS Header is missing |\n```\n\n| Column | What it means |\n|--------|---------------|\n| **OPERATION** | The HTTP method and path that was tested |\n| **RISK LEVEL** | Severity: Info / Low / Medium / High / Critical |\n| **CVSS 4.0 SCORE** | Numeric score from 0.0 to 10.0 |\n| **OWASP** | The OWASP API Security Top 10 category |\n| **VULNERABILITY** | A short description of the finding |\n\n\n\n## No findings?\n\nA scan with no rows in the vulnerability table means VulnAPI found nothing with a CVSS score above the default threshold of `1.0`. This is a good sign, but not a guarantee — VulnAPI tests for a specific set of [known vulnerabilities](./vulnerabilities).\n\n## Next steps\n\n\n \n \n \n \n\n" }, { "path": "docs/getting-started.mdx", "content": "---\ntitle: Getting Started\ndescription: Get your first API security scan running in under five minutes.\nsidebar:\n order: 2\n---\n\nimport { CardGrid, LinkCard, Steps } from '@/components/docs'\n\nGet your first API security scan running in under five minutes.\n\n\n\n1. **[Install VulnAPI](./installation)** — Download a pre-built binary for Linux, macOS, Windows, or run via Docker.\n\n2. **[Run your first scan](./first-scan)** — Use `vulnapi scan curl` or point VulnAPI at your OpenAPI spec.\n\n3. **Read the report** — Understand the OPERATION / RISK LEVEL / CVSS / OWASP / VULNERABILITY columns and what each finding means.\n\n4. **[Automate in CI/CD](./github-action)** — Add the VulnAPI GitHub Action to your workflow so every PR is scanned automatically.\n\n\n\n\n \n \n \n \n\n" }, { "path": "docs/github-action.mdx", "content": "---\ntitle: GitHub Action\ndescription: VulnAPI can be integrated into your CI/CD pipeline using GitHub Actions. This allows you to automate security testing and vulnerability scanning of your APIs as part of your development workflow.\n---\n\nVulnAPI can be integrated into your CI/CD pipeline using [GitHub Actions](https://github.com/marketplace/actions/vulnapi-action). Integrating VulnAPI with GitHub Actions enables you to scan your APIs for vulnerabilities and security risks as part of your CI/CD pipeline. \n\nThis allows you to automate security testing and vulnerability scanning of your APIs as part of your development workflow, ensuring that your APIs are **secure** and free from vulnerabilities **before they are deployed to production**.\n\n## Example Workflow\n\nHere's an example of a GitHub Actions workflow that uses VulnAPI to scan your API for vulnerabilities:\n\n```yaml\nname: VulnAPI\n\non: [push]\n\npermissions:\n contents: read\n\njobs:\n build:\n runs-on: ubuntu-latest\n\n steps:\n - name: Checkout\n uses: actions/checkout@v6\n\n - name: VulnAPI\n uses: cerberauth/vulnapi-action@v2\n env:\n GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}\n with:\n curl: 'curl http://localhost:8080 -H \"Authorization: Bearer eyJhbGci...\"'\n```\n\n## Documentation\n\nFor more information on how to use VulnAPI with GitHub Actions, please refer to the [VulnAPI GitHub Action](https://github.com/marketplace/actions/vulnapi-action) on GitHub Marketplace.\n" }, { "path": "docs/index.mdx", "content": "---\ntitle: Introduction\ndescription: VulnAPI is an Open Source DAST that scans APIs for vulnerabilities and security risks.\nsidebar:\n order: 1\n---\n\nimport { Aside } from '@/components/docs'\n\nWelcome to VulnAPI Documentation!\n\n![Demo](../demo.gif)\n\n---\n\n## What is VulnAPI?\n\nVulnAPI is an Open Source DAST that scans APIs for vulnerabilities and security risks. It provides reports on any vulnerabilities detected during the scan, including the risk level, vulnerability, description, and operation performed when the vulnerability has been found.\n\nVulnAPI offers three methods for scanning APIs:\n* **Using Curl-like CLI**: Directly invoke the CLI with parameters resembling curl commands.\n* **Using OpenAPI Contracts**: Use an OpenAPI spec to enumerate all endpoints for scanning.\n* **Using GraphQL**: Point VulnAPI at a GraphQL endpoint to scan it for vulnerabilities.\n\n## Installation\n\nBefore making your first scan with VulnAPI, you have to download and install it. Please follow the instructions on the [Installation](./installation) page.\n\n\n\n## Documentation\n\nBefore scanning, you can discover target API useful information by using the `discover` command.\n\n### Discover Command\n\nTo discover target API useful information, execute the following command:\n\n```bash\nvulnapi discover api [API_URL]\n```\n\nExample output:\n\n```bash\n| WELL-KNOWN PATHS | URL |\n|------------------|------------------------------------|\n| OpenAPI | http://localhost:5000/openapi.json |\n| GraphQL | N/A |\n\n\n| TECHNOLOGIE/SERVICE | VALUE |\n|---------------------|---------------|\n| Framework | Flask:2.2.3 |\n| Language | Python:3.7.17 |\n| Server | Flask:2.2.3 |\n```\n\n### Using Curl-like CLI\n\nTo perform a scan using the Curl-like CLI, execute the following command:\n\n```bash\nvulnapi scan curl [API_URL] [CURL_OPTIONS]\n```\n\nReplace `[API_URL]` with the URL of the API to scan, and `[CURL_OPTIONS]` with any additional curl options you wish to include.\n\nExample:\n\n```bash\nvulnapi scan curl -X POST https://vulnapi.cerberauth.com/vulnerable/api -H \"Authorization: Bearer eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiIxMjM0NTY3ODkwIiwiaWF0IjoxNTE2MjM5MDIyfQ.\"\n```\n\n### Using OpenAPI Contracts\n\nTo perform a scan using OpenAPI contracts, execute the following command:\n\n```bash\necho \"[JWT_TOKEN]\" | vulnapi scan openapi [PATH_OR_URL_TO_OPENAPI_FILE]\n```\n\nReplace `[PATH_OR_URL_TO_OPENAPI_FILE]` with the path or the URL to the OpenAPI contract JSON file and `[JWT_TOKEN]` with the JWT token to use for authentication.\n\n### Using GraphQL\n\nTo perform a scan against a GraphQL endpoint, execute the following command:\n\n```bash\nvulnapi scan graphql [GRAPHQL_ENDPOINT] -H \"Authorization: Bearer [JWT_TOKEN]\"\n```\n\n## Output\n\nThe CLI provides detailed reports on any vulnerabilities detected during the scan. Below is a condensed example:\n\n| OPERATION | RISK LEVEL | CVSS 4.0 SCORE | OWASP | VULNERABILITY |\n|------------------------------|------------|----------------|--------------------------------|--------------------------------|\n| GET / | Medium | 5.1 | API8:2023 Security | X-Frame-Options Header is |\n| | | | Misconfiguration | missing |\n| | High | 9.3 | API2:2023 Broken | JWT Token is not verified |\n| | | | Authentication | |\n| | Info | 0.0 | API8:2023 Security | HSTS Header is missing |\n| | | | Misconfiguration | |\n\nSee the [Output Formats](./reference/output-formats) reference for full details on table columns, JSON/YAML formats, and CI/CD integration.\n\n## Vulnerabilities Detected\n\nAll the vulnerabilities detected by the project are listed at this URL: [API Vulnerabilities Detected](./vulnerabilities).\n\n> More vulnerabilities and best practices will be added in future releases. If you have any suggestions or requests for additional vulnerabilities or best practices to be included, please feel free to open an issue or submit a pull request.\n\n## Proxy Support\n\nThe scanner supports proxy configurations for scanning APIs behind a proxy server. To use a proxy, set the `HTTP_PROXY` or `HTTPS_PROXY` environment variables with the proxy URL.\n\nA command arg `--proxy` is also available to specify the proxy URL.\n\n## Additional Options\n\nSee the [CLI Reference](./reference/cli) for complete command documentation.\n\n## Telemetry\n\nThe scanner collects anonymous usage data to help improve the tool. This data includes the number of scans performed, number of detected vulnerabilities, and the severity of vulnerabilities. No sensitive information is collected. You can opt-out of telemetry by passing the `--sqa-opt-out` flag.\n\n## Disclaimer\n\nThis scanner is provided for educational and informational purposes only. It should not be used for malicious purposes or to attack any system without proper authorization. Always respect the security and privacy of others.\n" }, { "path": "docs/installation.mdx", "content": "---\ntitle: Installation\ndescription: Learn how to install VulnAPI.\nsidebar:\n order: 3\n---\n\nYou can installed pre-built binaries of VulnAPI on Linux, Windows, and MacOS.\n\nBelow are the instructions to install VulnAPI on Linux, Windows, MacOS, and Docker. You can choose the installation method that best suits your needs and environment.\n\n## Linux\n\n### Snap\n\nYou can install VulnAPI on Linux using [Snap](https://snapcraft.io/vulnapi).\n\n```bash\nsudo snap install vulnapi\n```\n\nVerify:\n\n```bash\nvulnapi --version\n```\n\n### APT\n\nDownload the latest [VulnAPI release](https://github.com/cerberauth/vulnapi/releases?ref=deb) and install it using `dpkg`.\n\n```bash\nsudo dpkg -i vulnapi.deb\n```\n\nVerify:\n\n```bash\nvulnapi --version\n```\n\n### RPM\n\nDownload the latest [VulnAPI release](https://github.com/cerberauth/vulnapi/releases?ref=rpm) and install it using `rpm -i`.\n\n```bash\nsudo rpm -i vulnapi.rpm\n```\n\nVerify:\n\n```bash\nvulnapi --version\n```\n\n### Other\n\nYou can install VulnAPI on Linux by downloading the latest [VulnAPI release](https://github.com/cerberauth/vulnapi/releases?ref=other) and extracting the contents of the ZIP file. After extracting the contents, run the `vulnapi` binary from the command line.\n\nVerify:\n\n```bash\nvulnapi --version\n```\n\n## Windows\n\n### Chocolatey\n\nYou can install VulnAPI on Windows using [Chocolatey](https://chocolatey.org/packages/vulnapi).\n\n```bash\nchoco install vulnapi\n```\n\nYou can also install VulnAPI on Windows by downloading the latest [VulnAPI release](https://github.com/cerberauth/vulnapi/releases?ref=windows) and extracting the contents of the ZIP file. After extracting the contents, you can run the `vulnapi.exe` binary from the command line.\n\nVerify:\n\n```bash\nvulnapi --version\n```\n\n## MacOS (Homebrew)\n\nYou can install VulnAPI on MacOS using Homebrew. To do so, run the following command:\n\n```bash\nbrew tap cerberauth/vulnapi https://github.com/cerberauth/vulnapi\nbrew install $(brew --repository cerberauth/vulnapi)/vulnapi.rb\n```\n\nVerify:\n\n```bash\nvulnapi --version\n```\n\n## Docker\n\nYou can also use VulnAPI as a Docker container with [VulnaAPI Docker Image](https://hub.docker.com/r/cerberauth/vulnapi). To do so, run the following command:\n\n```bash\ndocker run --rm cerberauth/vulnapi scan curl [API_URL] [CURL_OPTIONS]\n```\n\n## GitHub Action\n\nVulnAPI can be integrated into your CI/CD pipeline using [GitHub Actions](./github-action). Integrating VulnAPI with GitHub Actions enables you to scan your APIs for vulnerabilities and security risks as part of your CI/CD pipeline. This allows you to automate security testing and vulnerability scanning of your APIs as part of your development workflow, ensuring that your APIs are **secure** and free from vulnerabilities **before they are deployed to production**.\n\n## Upgrading\n\nKeep VulnAPI up to date to get the latest vulnerability checks and bug fixes.\n\n| Platform | Command |\n|----------|---------|\n| Snap | `sudo snap refresh vulnapi` |\n| Chocolatey | `choco upgrade vulnapi` |\n| Homebrew | `brew upgrade vulnapi` |\n| Docker | `docker pull cerberauth/vulnapi` |\n\nFor APT/RPM installations, download the latest release package and reinstall using the same commands as above.\n" }, { "path": "docs/labs.mdx", "content": "---\ntitle: API Vulnerabilities Labs\ndescription: Open Source vulnerability labs for practicing API security testing with VulnAPI.\nsidebar:\n order: 100\n---\n\nThe following list of Open Source vulnerability labs offers resources for both beginners and experienced cybersecurity experts. These labs tends to cover a wide variety of API vulnerabilities, from the most basic to the most complex, allowing you to gain hands-on experience in identifying, exploiting, and mitigating security flaws. For now, this list is not so large but do not hesitate to contribute.\n\nTo enhance your API cybersecurity knowledge and skill set, we invite you to explore and contribute to this list of vulnerabilities labs:\n\n| Lab | Vulnerability Documentation |\n| ------------------------------------------------------------------------------------------------------------------------ | --------------------------- |\n| [Authentication Not Verified](https://github.com/cerberauth/api-vulns-challenges/tree/main/challenges/auth-not-verified) | |\n| [JWT Alg None Lab](https://github.com/cerberauth/api-vulns-challenges/tree/main/challenges/jwt-alg-none-bypass) | [JWT Alg None Documentation](./vulnerabilities/broken-authentication/jwt-alg-none) |\n| [JWT Blank Secret Lab](https://github.com/cerberauth/api-vulns-challenges/tree/main/challenges/jwt-blank-secret) | [JWT Blank Secret Documentation](./vulnerabilities/broken-authentication/jwt-blank-secret) |\n| [JWT Not Verified Lab](https://github.com/cerberauth/api-vulns-challenges/tree/main/challenges/jwt-not-verified) | |\n| [JWT Null Signature Lab](https://github.com/cerberauth/api-vulns-challenges/tree/main/challenges/jwt-null-signature) | [JWT Null Signature Documentation](./vulnerabilities/broken-authentication/jwt-null-signature) |\n| [JWT Weak HMAC Secret Lab](https://github.com/cerberauth/api-vulns-challenges/tree/main/challenges/jwt-weak-hmac-secret) | [JWT Weak HMAC Secret Documentation](./vulnerabilities/broken-authentication/jwt-weak-secret) |\n| [JWT Weak RSA Key Lab](https://github.com/cerberauth/api-vulns-challenges/tree/main/challenges/jwt-weak-rsa-key) | |\n" }, { "path": "docs/reference/_meta.yml", "content": "label: Reference\n" }, { "path": "docs/reference/cli/_meta.yml", "content": "label: CLI\n" }, { "path": "docs/reference/cli/discover-api.mdx", "content": "---\ntitle: discover api\ndescription: Discover well-known paths and technology fingerprints for an API.\n---\n\nProbe a base URL for common API paths (e.g. `/openapi.json`, `/graphql`, `/.well-known/`) and read response headers to fingerprint the server framework and language.\n\n## Usage\n\n```sh\nvulnapi discover api [flags]\n```\n\nAccepts all [common flags](./#common-flags).\n\n## Output\n\nThe command prints two tables:\n\n- **Well-known paths** — paths that returned a non-404 response, with their HTTP status codes.\n- **Fingerprints** — detected technologies inferred from response headers (server, framework, language, etc.).\n\n## Examples\n\n**Discover well-known paths and fingerprints**\n```sh\nvulnapi discover api https://api.example.com\n```\n\n**Pass an Authorization header**\n```sh\nvulnapi discover api https://api.example.com \\\n -H \"Authorization: Bearer \"\n```\n\n## Exit codes\n\n| Code | Meaning |\n|---|---|\n| `0` | Discovery completed successfully |\n| `1` | Fatal error (invalid URL, network failure, etc.) |\n" }, { "path": "docs/reference/cli/discover-domain.mdx", "content": "---\ntitle: discover domain\ndescription: Discover API endpoints across common subdomains of a domain.\n---\n\nEnumerate common subdomains of a domain, perform reverse DNS lookups, and run the [discover api](./discover-api) checks against each discovered host.\n\n## Usage\n\n```sh\nvulnapi discover domain [flags]\n```\n\nAccepts all [common flags](./#common-flags).\n\n## Examples\n\n**Discover APIs across all subdomains**\n```sh\nvulnapi discover domain example.com\n```\n\n**Limit the request rate**\n```sh\nvulnapi discover domain example.com --rate 5/s\n```\n\n## Exit codes\n\n| Code | Meaning |\n|---|---|\n| `0` | Discovery completed successfully |\n| `1` | Fatal error (invalid domain, network failure, etc.) |\n" }, { "path": "docs/reference/cli/index.mdx", "content": "---\ntitle: CLI reference\ndescription: Overview of all VulnAPI CLI commands.\nsidebar:\n order: 1\n---\n\nimport { LinkCard, CardGrid } from '@/components/docs';\n\nThe `vulnapi` CLI covers API security scanning, discovery, and JWT utilities.\n\n\n \n \n \n \n \n \n \n\n\n## Global usage\n\n```sh\nvulnapi [flags]\nvulnapi --help\nvulnapi version\n```\n\nAll commands exit `0` on success and non-zero on error.\n\n## Global flags\n\n| Flag | Description |\n|---|---|\n| `--sqa-opt-out` | Opt out of anonymous usage statistics and crash reporting |\n| `-h, --help` | Show help for any command |\n\n## Common flags\n\nAll `scan` and `discover` commands share these flags. HTTP client flags follow the same conventions as `curl`.\n\n| Flag | Default | Description |\n|---|---|---|\n| `--rate ` | `` | Request rate limit (e.g. `10/s`, `1/m`) |\n| `-x, --proxy ` | `` | Proxy URL for all requests |\n| `-H, --header
` | `` | Header to include in requests (repeatable) |\n| `-b, --cookie ` | `` | Cookie to include in requests (repeatable) |\n| `-u, --user ` | `` | Username and password for HTTP Basic authentication |\n| `--basic` | `` | Use HTTP Basic Auth (use with `-u`) |\n| `--digest` | `` | Use HTTP Digest Auth (use with `-u`) |\n| `--scans ` | `` | Run only specific scans (repeatable; supports wildcards like `jwt.*`) |\n| `--exclude-scans ` | `` | Exclude specific scans (repeatable) |\n| `--report-format ` | `table` | Output format: `table`, `json`, `yaml` |\n| `--report-transport ` | `file` | Report transport: `file`, `http` |\n| `--report-file ` | `` | File path to write the report to |\n| `--report-url ` | `` | URL to send the report to (when `--report-transport http`) |\n| `--no-progress` | `false` | Disable the progress bar |\n| `--severity-threshold ` | `1.0` | CVSS threshold above which output is also written to stderr |\n\n> **Deprecated:** `--rate-limit` (`-r`) was replaced by `--rate`. The old flag is still accepted as an alias.\n\n## Exit behaviour\n\nWhen at least one finding has a CVSS score above `--severity-threshold`, VulnAPI writes output to **stderr** in addition to stdout. This causes `|| exit 1` patterns and CI/CD failure checks to trigger automatically. The default threshold is `1.0`, meaning any finding with CVSS > 1.0 triggers stderr output.\n" }, { "path": "docs/reference/cli/jwt-generate.mdx", "content": "---\ntitle: jwt generate\ndescription: Generate a new JWT from an existing token, re-signed with a different algorithm or key.\n---\n\nParse an existing JWT and re-sign it with a new algorithm and key. The original claims are preserved. Useful for manually crafting tokens to test JWT vulnerability mitigations.\n\n## Usage\n\n```sh\nvulnapi jwt generate --alg --secret \n```\n\n## Flags\n\n| Flag | Description |\n|---|---|\n| `--alg ` | Signing algorithm **(required)**: `HS256`, `HS384`, `HS512`, `RS256`, `RS384`, `RS512`, `ES256`, `ES384`, `NONE` |\n| `--secret ` | Secret key to sign the token (required for HMAC algorithms) |\n| `--aud ` | Audience claim (`aud`) to set in the token |\n\n## Examples\n\n**Re-sign with a different HMAC secret**\n```sh\nvulnapi jwt generate eyJhbGciOiJIUzI1NiI... --alg HS256 --secret newsecret\n```\n\n**Strip the signature (alg=none)**\n```sh\nvulnapi jwt generate eyJhbGciOiJIUzI1NiI... --alg NONE\n```\n\n**Re-sign with a custom audience**\n```sh\nvulnapi jwt generate eyJhbGciOiJIUzI1NiI... --alg HS256 --secret mysecret --aud myservice\n```\n\n## Output\n\nThe signed token string is printed to stdout.\n\n## Exit codes\n\n| Code | Meaning |\n|---|---|\n| `0` | Token generated successfully |\n| `1` | Invalid input token, unknown algorithm, or missing required flags |\n" }, { "path": "docs/reference/cli/scan-curl.mdx", "content": "---\ntitle: scan curl\ndescription: Scan a single API endpoint using curl-style options.\n---\n\nScan a single API endpoint by specifying a URL and optional HTTP method and body. Accepts the same flags as `curl` for familiarity when pasting commands from documentation or browser DevTools.\n\n## Usage\n\n```sh\nvulnapi scan curl [flags]\n```\n\n## Flags\n\n| Flag | Default | Description |\n|---|---|---|\n| `-X, --request ` | `GET` | HTTP method to use |\n| `-d, --data ` | `` | HTTP request body |\n\nAlso accepts all [common flags](./#common-flags).\n\n## Examples\n\n**Simple GET request**\n```sh\nvulnapi scan curl https://api.example.com/endpoint\n```\n\n**POST with a JSON body and an Authorization header**\n```sh\nvulnapi scan curl https://api.example.com/endpoint \\\n -X POST \\\n -d '{\"key\":\"value\"}' \\\n -H \"Authorization: Bearer \"\n```\n\n**Run only JWT-related scans**\n```sh\nvulnapi scan curl https://api.example.com/endpoint \\\n -H \"Authorization: Bearer \" \\\n --scans \"jwt.*\"\n```\n\n**Write the report as JSON to a file**\n```sh\nvulnapi scan curl https://api.example.com/endpoint \\\n --report-format json \\\n --report-file report.json\n```\n\n## Exit codes\n\n| Code | Meaning |\n|---|---|\n| `0` | Scan completed successfully |\n| `1` | Fatal error (invalid URL, network failure, etc.) |\n\nWhen a finding exceeds `--severity-threshold`, additional output is written to stderr. See [exit behaviour](./#exit-behaviour).\n" }, { "path": "docs/reference/cli/scan-graphql.mdx", "content": "---\ntitle: scan graphql\ndescription: Scan a GraphQL endpoint for security vulnerabilities.\n---\n\nRun security scans against a GraphQL endpoint, including checks for introspection exposure and other GraphQL-specific vulnerabilities.\n\n## Usage\n\n```sh\nvulnapi scan graphql [flags]\n```\n\nAccepts all [common flags](./#common-flags).\n\n## Examples\n\n**Scan a GraphQL endpoint with a bearer token**\n```sh\nvulnapi scan graphql https://api.example.com/graphql \\\n -H \"Authorization: Bearer \"\n```\n\n**Scan through a proxy**\n```sh\nvulnapi scan graphql https://api.example.com/graphql \\\n -H \"Authorization: Bearer \" \\\n --proxy http://localhost:8080\n```\n\n**Output results as JSON**\n```sh\nvulnapi scan graphql https://api.example.com/graphql \\\n --report-format json \\\n --report-file report.json\n```\n\n## Exit codes\n\n| Code | Meaning |\n|---|---|\n| `0` | Scan completed successfully |\n| `1` | Fatal error (invalid URL, network failure, etc.) |\n\nWhen a finding exceeds `--severity-threshold`, additional output is written to stderr. See [exit behaviour](./#exit-behaviour).\n" }, { "path": "docs/reference/cli/scan-openapi.mdx", "content": "---\ntitle: scan openapi\ndescription: Scan all endpoints defined in an OpenAPI specification.\n---\n\nLoad an OpenAPI specification (local file or remote URL) and run security scans against every operation it defines.\n\n## Usage\n\n```sh\nvulnapi scan openapi [flags]\n```\n\n## Flags\n\n| Flag | Default | Description |\n|---|---|---|\n| `--security-schemes ` | `` | Override the token value for a named security scheme (repeatable) |\n\nAlso accepts all [common flags](./#common-flags).\n\n## Token via stdin\n\nA token piped via stdin is used as the default value for all security schemes that accept a bearer token. Named overrides from `--security-schemes` take precedence.\n\n```sh\necho \"\" | vulnapi scan openapi ./openapi.json\n```\n\n## Examples\n\n**Local spec with a token piped via stdin**\n```sh\necho \"\" | vulnapi scan openapi ./openapi.json\n```\n\n**Remote spec with a token piped via stdin**\n```sh\necho \"\" | vulnapi scan openapi https://api.example.com/.well-known/openapi.json\n```\n\n**Named security scheme override**\n```sh\nvulnapi scan openapi ./openapi.json --security-schemes bearerAuth=\n```\n\n**Multiple scheme overrides**\n```sh\nvulnapi scan openapi ./openapi.json \\\n --security-schemes bearerAuth= \\\n --security-schemes apiKey=\n```\n\n## Exit codes\n\n| Code | Meaning |\n|---|---|\n| `0` | Scan completed successfully |\n| `1` | Fatal error (invalid spec, network failure, etc.) |\n\nWhen a finding exceeds `--severity-threshold`, additional output is written to stderr. See [exit behaviour](./#exit-behaviour).\n" }, { "path": "docs/reference/cli/serve.mdx", "content": "---\ntitle: serve\ndescription: Start the VulnAPI HTTP server in REST API mode.\n---\n\nStart VulnAPI as an HTTP server that exposes a REST API, allowing scans to be triggered programmatically rather than through the CLI.\n\n## Usage\n\n```sh\nvulnapi serve [flags]\n```\n\n## Flags\n\n| Flag | Default | Description |\n|---|---|---|\n| `-p, --port ` | `8080` | Port to listen on |\n\n## Examples\n\n**Start on the default port**\n```sh\nvulnapi serve\n```\n\n**Start on a custom port**\n```sh\nvulnapi serve --port 9090\n```\n\n## Exit codes\n\n| Code | Meaning |\n|---|---|\n| `0` | Server exited cleanly |\n| `1` | Fatal error (port already in use, etc.) |\n" }, { "path": "docs/reference/output-formats.mdx", "content": "---\ntitle: Output Formats\ndescription: Reference for VulnAPI's table, JSON, and YAML output formats and CI/CD severity threshold integration.\n---\n\nVulnAPI supports three output formats: `table` (default), `json`, and `yaml`. Use `--report-format` to select the format and `--report-transport` + `--report-file` / `--report-url` to control where the output goes.\n\n## Table (Default)\n\nThe table format prints human-readable ASCII tables to the terminal. It consists of up to three sub-tables:\n\n**Well-Known Paths** — discovered API spec and GraphQL endpoints:\n\n```\n| WELL-KNOWN PATHS | URL |\n|------------------|------------------------------------|\n| OpenAPI | http://localhost:5000/openapi.json |\n| GraphQL | N/A |\n```\n\n**Technology Fingerprint** — framework, language, and server detected from response headers:\n\n```\n| TECHNOLOGIE/SERVICE | VALUE |\n|---------------------|---------------|\n| Framework | Flask:2.2.3 |\n| Language | Python:3.11.9 |\n| Server | Flask:2.2.3 |\n```\n\n**Vulnerability List** — each finding on its own row:\n\n| Column | Description |\n|--------|-------------|\n| **OPERATION** | HTTP method + path tested (e.g. `GET /api/users`) |\n| **RISK LEVEL** | Human-readable severity: Info / Low / Medium / High / Critical |\n| **CVSS 4.0 SCORE** | Numeric score 0.0–10.0 |\n| **OWASP** | Relevant OWASP API Security Top 10 category |\n| **VULNERABILITY** | Short description of the finding |\n\nAn advice line above the table summarises the overall risk level.\n\n## JSON\n\nExport a structured JSON report to a file:\n\n```bash\nvulnapi scan curl https://api.example.com/endpoint \\\n -H \"Authorization: Bearer \" \\\n --report-format json \\\n --report-transport file \\\n --report-file report.json\n```\n\nThe JSON output contains an array of scan results, each with operation details, issue metadata, CVSS score, OWASP classification, and scan attempt responses. Use this format for automated processing, dashboards, or storing artifacts in CI/CD.\n\n## YAML\n\n```bash\nvulnapi scan curl https://api.example.com/endpoint \\\n --report-format yaml \\\n --report-transport file \\\n --report-file report.yaml\n```\n\nThe YAML format contains the same data as the JSON format in YAML syntax.\n\n## Severity Threshold and CI/CD Integration\n\nThe `--severity-threshold` flag (default `1.0`) controls when VulnAPI writes findings to **stderr**. If any finding has a CVSS score strictly above the threshold, the output is also written to stderr.\n\nThis enables CI/CD pipeline failure detection without a wrapper script:\n\n```bash\n# Fail the pipeline if any finding has CVSS > 5.0\nvulnapi scan curl https://api.example.com/endpoint \\\n -H \"Authorization: Bearer \" \\\n --severity-threshold 5.0 \\\n 2>/dev/null || exit 1\n```\n\n```yaml\n# GitHub Actions example\n- name: VulnAPI Scan\n run: |\n vulnapi scan openapi ./openapi.json \\\n --severity-threshold 7.0 \\\n --report-format json \\\n --report-file vulnapi-report.json\n # The step will fail automatically if CVSS > 7.0 is found (stderr output)\n```\n\nSet `--severity-threshold 0` to always write to stderr regardless of CVSS score.\n" }, { "path": "docs/reference/scan-ids.mdx", "content": "---\ntitle: Scan IDs Reference\ndescription: Complete reference table of all VulnAPI scan IDs, categories, and severity scores.\n---\n\nUse scan IDs with `--scans` and `--exclude-scans` flags to filter which checks VulnAPI runs.\n\n```bash\n# Run only JWT checks\nvulnapi scan curl https://api.example.com -H \"Authorization: Bearer \" --scans jwt.alg_none\n\n# Run all JWT checks using a wildcard\nvulnapi scan curl ... --scans \"jwt.*\"\n\n# Exclude all discovery checks\nvulnapi scan curl ... --exclude-scans \"discover.*\"\n```\n\n## Broken Authentication\n\n| Scan ID | Name | OWASP | CVSS |\n|---------|------|-------|------|\n| `jwt.alg_none` | JWT Accepts `alg: none` | API2:2023 | High |\n| `jwt.blank_secret` | JWT Signed With Blank Secret | API2:2023 | High |\n| `jwt.weak_secret` | JWT Signed With Weak Secret | API2:2023 | High |\n| `jwt.kid_injection` | JWT KID Header Injection (SQL injection & path traversal) | API2:2023 | 9.3 |\n| `jwt.not_verified` | JWT Signature Not Verified | API2:2023 | 9.3 |\n| `jwt.null_signature` | JWT Null Signature | API2:2023 | High |\n| `generic.accept_unauthenticated_operation` | Endpoint Accepts Unauthenticated Requests | API2:2023 | 9.3 |\n\n## Security Misconfiguration\n\n| Scan ID | Name | OWASP | CVSS |\n|---------|------|-------|------|\n| `misconfiguration.http_headers` | Security Response Headers Missing | API8:2023 | Info–Medium |\n| `misconfiguration.http_cookies` | Cookie Security Flags Misconfigured | API8:2023 | 0.0 |\n| `misconfiguration.http_trace` | HTTP TRACE Method Enabled | API8:2023 | Info |\n| `misconfiguration.http_track` | HTTP TRACK Method Enabled | API8:2023 | Info |\n| `misconfiguration.http_method_override` | HTTP Method Override Headers Accepted | API8:2023 | Info–High |\n\n## GraphQL\n\n| Scan ID | Name | OWASP | CVSS |\n|---------|------|-------|------|\n| `graphql.introspection_enabled` | GraphQL Introspection Enabled | API8:2023 | Low |\n\n## Discovery\n\nDiscovery scans run automatically with `vulnapi discover` commands. They can also be included/excluded on scan commands.\n\n| Scan ID | Name | Description |\n|---------|------|-------------|\n| `discover.api` | API Fingerprint | Detects framework, language, and server from response headers |\n| `discover.well_known_paths` | Well-Known Path Discovery | Checks for OpenAPI, GraphQL, and other common paths |\n| `discover.domain` | Domain Discovery | Common subdomain patterns and reverse DNS lookup |\n\n## HTTP Security Headers (sub-checks of `misconfiguration.http_headers`)\n\nThe `misconfiguration.http_headers` scan covers multiple individual header checks. You can exclude the parent scan ID to skip all of them.\n\n| Header | Risk |\n|--------|------|\n| `Content-Security-Policy` | Medium |\n| `X-Frame-Options` | Medium |\n| `X-Content-Type-Options` | Info |\n| `Strict-Transport-Security` | Info |\n| `Access-Control-Allow-Origin` (CORS) | Medium |\n| Server signature leak | Info |\n\n## Cookie Security (sub-checks of `misconfiguration.http_cookies`)\n\nThe `misconfiguration.http_cookies` scan covers five individual cookie flag checks:\n\n| Check ID | Description | CWE |\n|----------|-------------|-----|\n| `security_misconfiguration.http_cookies_not_http_only` | Cookie accessible via JavaScript (XSS risk) | CWE-1004 |\n| `security_misconfiguration.http_cookies_not_secure` | Cookie transmitted over HTTP | CWE-614 |\n| `security_misconfiguration.http_cookies_same_site_none` | `SameSite=None` allows cross-site requests | CWE-1275 |\n| `security_misconfiguration.http_cookies_without_same_site` | `SameSite` attribute not set | CWE-1275 |\n| `security_misconfiguration.http_cookies_without_expires` | Session cookie never expires | CWE-613 |\n" }, { "path": "docs/vampi.mdx", "content": "---\ntitle: VulnAPI Training on VAmPI (Vulnerable REST API)\ndescription: Train yourself on how to use VulnAPI to scan REST APIs for vulnerabilities and security risks.\nsidebar:\n order: 5\n---\n\nVulnAPI is a powerful tool that allows you to scan REST APIs for vulnerabilities and security risks. This training module will guide you through the process of using VulnAPI to scan your APIs for vulnerabilities and security risks.\n\nVAmPI is a vulnerable REST API with OWASP Top 10 vulnerabilities. You can use VAmPI to practice scanning REST APIs for vulnerabilities and security risks using VulnAPI.\n\n## Prerequisites\n\nBefore you begin this training module, you need to have the following prerequisites:\n\n- [VulnAPI](./installation) installed on your machine.\n- [VAmPI](https://github.com/erev0s/VAmPI) installed on your machine.\n\n## Training Objectives\n\nBy the end of this training module, you will be able to:\n\n- Scan a REST API for vulnerabilities and security risks using VulnAPI.\n- Identify and remediate vulnerabilities and security risks in a REST API.\n\n## Training Steps\n\nFollow the steps below to complete this training module:\n\n1. Start the VAmPI server by running the following command:\n\n ```bash\n docker run -e vulnerable=1 -p 5000:5000 erev0s/vampi\n ```\n\n2. Open a new terminal window and run the following command to make a discovery scan of the VAmPI API using VulnAPI:\n\n ```bash\n vulnapi scan discover http://localhost:5000\n ```\n\n3. Review the scan results to identify OpenAPI Contract and additionnal service informations.\n4. Download the OpenAPI Contract and save it to a file named `vampi-openapi.json`. Edit the file, add a base url to the server and security scheme.\n\n The security should be added for the endpoint `PUT /users/v1/{username}/email`, `PUT /users/v1/{username}/password` and `DELETE /users/v1/{username}` with the `bearerAuth` security scheme.\n\n ```json\n {\n \"components\": {\n \"securitySchemes\": {\n \"bearerAuth\": {\n \"bearerFormat\": \"JWT\",\n \"scheme\": \"bearer\",\n \"type\": \"http\"\n }\n }\n },\n \"info\": {\n \"description\": \"OpenAPI v3 specs for VAmPI\",\n \"title\": \"VAmPI\",\n \"version\": \"0.1\"\n },\n \"openapi\": \"3.0.1\",\n \"paths\": {\n \"/users/v1/{username}/email\": {\n \"put\": {\n \"description\": \"Update a single users email\",\n \"operationId\": \"api_views.users.update_email\",\n \"security\": [\n {\n \"bearerAuth\": []\n }\n ],\n ...\n \"servers\": [\n {\n \"url\": \"http://localhost:5000\"\n }\n ]\n }\n ```\n\n5. Run the following command to scan the VAmPI API using the OpenAPI Contract:\n\n ```bash\n vulnapi scan openapi vampi-openapi.json\n ```\n\n6. Review the scan results to identify vulnerabilities and security risks in the VAmPI API.\n" }, { "path": "docs/vulnerabilities/_meta.yml", "content": "label: Vulnerabilities\n" }, { "path": "docs/vulnerabilities/broken-authentication/_meta.yml", "content": "label: Broken Authentication\n" }, { "path": "docs/vulnerabilities/broken-authentication/authentication-bypass.mdx", "content": "---\ntitle: Authentication Bypass\ndescription: A vulnerability where an endpoint that requires authentication accepts requests with no credentials, allowing unauthenticated access.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
Scan IDgeneric.accept_unauthenticated_operation
SeverityHigh
CVSS 4.09.3 — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
OWASP Category\n OWASP API2:2023 Broken Authentication\n
\n\nThe \"Authentication Bypass\" vulnerability occurs when an endpoint that is expected to require authentication returns a success response (2xx) when the request contains no credentials at all. VulnAPI detects this by sending a request to the endpoint without any `Authorization` header, cookies, or other credentials and checking if the response indicates success rather than returning a `401 Unauthorized` or `403 Forbidden`.\n\n## Example\n\n**Normal authenticated request** (should succeed):\n```http\nGET /api/users/profile HTTP/1.1\nAuthorization: Bearer eyJhbGciOiJSUzI1NiI...\n\nHTTP/1.1 200 OK\n```\n\n**Unauthenticated request** (should be rejected — but is vulnerable if it returns 200):\n```http\nGET /api/users/profile HTTP/1.1\n\nHTTP/1.1 200 OK ← vulnerable!\n```\n\n## How to test?\n\n\n \n```bash\nvulnapi scan curl [url] -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans generic.accept_unauthenticated_operation\n```\n \n \n```bash\necho \"eyJhbGciOiJSUzUxMiI...\" | vulnapi scan openapi [OpenAPI_Path_Or_URL] --scans generic.accept_unauthenticated_operation\n```\n \n \n```bash\nvulnapi scan graphql -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans generic.accept_unauthenticated_operation [url]\n```\n \n\n\nVulnAPI supports scanning against various types of other [vulnerabilities](../) as well.\n\n## What is the impact?\n\nIf an attacker can access a protected endpoint without any credentials, they can:\n\n- **Access sensitive data**: read user profiles, financial records, private messages, or any other data the endpoint returns\n- **Perform privileged operations**: create, modify, or delete resources without being logged in\n- **Bypass the entire authentication layer**: any security controls that depend on authentication become ineffective\n- **Enumerate users or data**: scrape all data from the API without needing an account\n\nCVSS 9.3 reflects that this is network-exploitable with no prior authentication required and provides full read/write access.\n\n## How to remediate?\n\n1. **Enforce authentication at every protected endpoint**: every route that serves or modifies user data must validate credentials before processing the request.\n\n2. **Return 401 for unauthenticated requests**: always return `401 Unauthorized` (not `200`, `404`, or `500`) when no valid credentials are provided. A `403 Forbidden` is appropriate when the user is authenticated but lacks the required permissions.\n\n3. **Apply authentication middleware globally**: use a gateway-level or framework-level middleware that intercepts all requests and enforces authentication, rather than adding auth checks endpoint by endpoint.\n\n4. **Test unauthenticated access for every new endpoint**: add an automated test that verifies each protected endpoint returns 401 when no credentials are provided.\n\n```python\n# FastAPI example — require authentication globally\nfrom fastapi import Depends, HTTPException, Security\nfrom fastapi.security import HTTPBearer\n\nsecurity = HTTPBearer()\n\n@app.get(\"/api/users/profile\")\nasync def get_profile(credentials = Security(security)):\n # credentials.credentials is the Bearer token\n user = verify_token(credentials.credentials)\n return user\n```\n" }, { "path": "docs/vulnerabilities/broken-authentication/brute-force-attack.mdx", "content": "---\ntitle: API Authentication Brute Force Attack\ndescription: A brute force attack, in the context of API authentication, is a trial-and-error method used by attackers to guess the correct credentials (username and password) or access tokens. Attackers use automated tools to make multiple requests to the authentication endpoint, trying different combinations of credentials until they find the correct one. This attack can lead to unauthorized access to the API and sensitive data.\n---\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
SeverityHigh
CVEs\n \n
Classifications\n \n
OWASP Category\n OWASP API2:2023 Broken Authentication\n
\n\nA brute force attack, in the context of API authentication, is a trial-and-error method used by attackers to guess the correct credentials (username and password) or access tokens. Attackers use automated tools to make multiple requests to the authentication endpoint, trying different combinations of credentials until they find the correct one. This attack can lead to unauthorized access to the API and sensitive data.\n\n## Example\n\nTODO: Add an example of a brute force attack on an API authentication endpoint.\n\n## How to test?\n\nTODO: Add steps to test for the API authentication brute force attack vulnerability.\n\n## What is the impact?\n\nWhen an API authentication endpoint is vulnerable to brute force attacks, attackers can gain unauthorized access to the API and sensitive data. This can lead to data breaches, data manipulation, and other security incidents.\n\n## How to remediate?\n\nTo prevent brute force attacks on API authentication endpoints, consider implementing the following security measures. If it is an user authentication, you can:\n* Implement account lockout mechanisms after a certain number of failed login attempts for user authentication.\n* Implement CAPTCHA or reCAPTCHA challenges to prevent automated brute force attacks.\n\nIn any case, you can:\n* Implement rate limiting on authentication requests to prevent multiple failed login attempts.\n* Monitor authentication logs for suspicious activities and anomalies.\n" }, { "path": "docs/vulnerabilities/broken-authentication/jwt-alg-none.mdx", "content": "---\ntitle: JWT None Algorithm\ndescription: Accepting the \"none\" algorithm in a JSON Web Token (JWT) occurs when a JWT is signed with the \"none\" algorithm, it means there is no signature, making it easy for attackers to tamper with the token's content without detection.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
SeverityHigh
CVEs\n \n
Classifications\n \n
OWASP Category\n OWASP API2:2023 Broken Authentication\n
\n\nAccepting the \"none\" algorithm in a JSON Web Token (JWT) occurs when a JWT is signed with the \"none\" algorithm, it means there is no signature, making it easy for attackers to tamper with the token's content without detection. This can lead to unauthorized access and data manipulation.\n\n## Example\n\nHere is a valid JWT signed with RS512 algorithm:\n\n```bash\neyJhbGciOiJSUzUxMiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwiaWF0IjoxNTE2MjM5MDIyfQ.MnECRBSUQEi8GjiAyWHPhPhhpzCiMLldkq-N_VS-iwI08c4xEVUhT1Xrx9kNGuwusiQuLI3AOBTPwtbdaasQDCOpF0nxxQNKkufJYFds61ooFZfXCuRyXe1yGnXPRzTfgr5YVe9-T8_JDccx5JP70d9hoO4DU4GNYQMvrOQl4xu8DEyyDT2hsjyTbrodVhrV9znMfEBCsYPPLI-Q-HYLquGThPdJe2kBNA-CiLRV6Mwzji67cTd_4P_oUHKXsAxMqVpo-xC2xiVpO2P9X1__uXrRrfiNFUur4B71UMgGYJ2z_cQqwFfSXz9glBIf_-BJU10Rkmyo2ew862d7WsHx8g\n```\n\nThis decoded JWT contains, this parts:\n\n```json\n{\n \"alg\": \"RS512\",\n \"typ\": \"JWT\"\n}\n```\n\n```json\n{\n \"sub\": \"1234567890\",\n \"iat\": 1516239022\n}\n```\n\nThe following JWT is invalid but is wrongly authorized when the implementation is vulnerable to this attack.\n\n```bash\neyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiIxMjM0NTY3ODkwIiwiaWF0IjoxNTE2MjM5MDIyfQ.\n```\n\nInvalid JWT has this header with algorithm set to none.\n\n```json\n{\n \"alg\": \"none\",\n \"typ\": \"JWT\"\n}\n```\n\n## How to test?\n\nIf you want to test only the \"JWT Alg None\" vulnerability, you can use the following command:\n\n\n \n```bash\nvulnapi scan curl [url] -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans jwt.alg_none\n```\n \n \n```bash\necho \"eyJhbGciOiJSUzUxMiI...\" | vulnapi scan openapi [OpenAPI_Path_Or_URL] --scans jwt.alg_none\n```\n \n \n```bash\nvulnapi scan graphql -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans jwt.alg_none [url]\n```\n \n\n\nVulnAPI supports scanning against various types of other [vulnerabilities](../) as well.\n\n## What is the impact?\n\nThe potential security impacts of the JWT \"alg none\" vulnerability are significant and can include:\n\n- **Unauthorized Access**: Attackers can tamper with the JWT payload to modify user roles, permissions, or identifiers, granting them unauthorized access to resources or functionalities within the system.\n- **Data Tampering**: Without the signature to ensure integrity, attackers can modify the data within the JWT payload, potentially altering sensitive information such as user details, session parameters, or application state.\n- **Impersonation**: Attackers can forge JWTs by crafting their own payloads and presenting them as valid tokens, leading to impersonation attacks where they assume the identity of legitimate users or systems.\n- **Privilege Escalation**: Manipulating the JWT payload, attackers may elevate their privileges within the system by granting themselves higher roles or permissions than originally assigned.\n- **Replay Attacks**: Attackers can capture and replay valid JWTs since there's no signature validation, allowing them to reuse the tokens to gain unauthorized access or perform malicious actions.\n- **Denial of Service (DDoS)**: In some cases, attackers may exploit the vulnerability to craft JWTs with payloads that cause unexpected behavior or errors within the application, potentially leading to service disruptions or system crashes.\n- **Bypassing Security Controls**: In systems where JWTs are used for access control (authorization) or authentication, the \"alg none\" vulnerability can bypass security controls altogether, rendering any security mechanisms relying on JWTs ineffective.\n\n## How to remediate?\n\nRemediating the JWT \"alg none\" vulnerability is to ensure that the JWT library or implementation being used is not vulnerable to this issue and is correctly configured.\n\n- **Updating the Library**: Ensure that your JWT library is updated to a version that addresses the \"alg none\" vulnerability. Check regularly for security updates and patches provided by the library maintainers.\n- **Configuration for Algorithm Check**: Configure the JWT library or implementation to enforce checking the algorithm used in the JWT header. Specifically, configure it to reject tokens that are signed using the \"none\" algorithm. This ensures that only tokens signed with secure algorithms (e.g., HMAC, RSA) are accepted.\n" }, { "path": "docs/vulnerabilities/broken-authentication/jwt-blank-secret.mdx", "content": "---\ntitle: JWT Blank Secret\ndescription: A vulnerability occurs when a JSON Web Token (JWT) is signed with an empty secret. In this scenario, the token lacks proper cryptographic protection, making it susceptible to manipulation.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
SeverityHigh
CVEs\n \n
Classifications\n CWE-287: Improper Authentication\n
OWASP Category\n OWASP API2:2023 Broken Authentication\n
\n\nA vulnerability occurs when a JSON Web Token (JWT) is signed with an empty secret. In this scenario, the token lacks proper cryptographic protection, making it susceptible to manipulation. Attackers can modify the token's claims and content without detection, potentially leading to unauthorized access and data tampering.\n\n## Example\n\nHere is a valid JWT signed with HS256 algorithm:\n\n```bash\neyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE1MTYyNDI2MjIsImlhdCI6MTUxNjIzOTAyMiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.SCC35SSgMSMr0kV1i_TuPAhiSGtsC1cFGCfvaus5GyU\n```\n\nThis decoded JWT contains, this parts:\n\n```json\n{\n \"alg\": \"HS256\",\n \"typ\": \"JWT\"\n}\n```\n\n```json\n{\n \"iat\": 1516239022,\n \"exp\": 1516242622,\n \"name\": \"John Doe\",\n \"sub\": \"2cb307ba-bb46-4194-854f-4774046d9c9b\"\n}\n```\n\nThe following JWT is signed with an empty secret (blank key — same header and payload, different signature):\n\n```bash\neyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE1MTYyNDI2MjIsImlhdCI6MTUxNjIzOTAyMiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.rpOjSoJBjzZifWAc-MBQ4UVS9tOY7gJV8cN0j6bN1oA\n```\n\n## How to test?\n\nIf you want to test only the \"JWT Blank Secret\" vulnerability, you can use the following command:\n\n\n \n```bash\nvulnapi scan curl [url] -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans jwt.blank_secret\n```\n \n \n```bash\necho \"eyJhbGciOiJSUzUxMiI...\" | vulnapi scan openapi [OpenAPI_Path_Or_URL] --scans jwt.blank_secret\n```\n \n \n```bash\nvulnapi scan graphql -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans jwt.blank_secret [url]\n```\n \n\n\nVulnAPI supports scanning against various types of other [vulnerabilities](../) as well.\n\n## What is the impact?\n\nSigning a JWT with a blank secret has a significant impact on the security of the token. A blank secret means that there is no secret key used to sign the token, making it vulnerable to tampering and unauthorized access.\n\nBy signing a JWT with a blank secret, anyone with access to the token can modify its contents without detection. This can lead to various security risks, such as impersonation, data tampering, and unauthorized access to protected resources.\n\n## How to remediate?\n\nTo remediate the JWT blank secret vulnerability, ensure that all JWTs are signed with a secure secret key. Use strong cryptographic algorithms and keep the secret key confidential to prevent unauthorized access and tampering of the tokens.\n" }, { "path": "docs/vulnerabilities/broken-authentication/jwt-cross-service-relay-attack.excalidraw", "content": "{\n \"type\": \"excalidraw\",\n \"version\": 2,\n \"source\": \"https://excalidraw.com\",\n \"elements\": [\n {\n \"type\": \"text\",\n \"version\": 2035,\n \"versionNonce\": 1818462084,\n \"index\": \"b6H\",\n \"isDeleted\": false,\n \"id\": \"ltyIvJkLl-pTJBLTGiDvt\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 1,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": -505.87472326456395,\n \"y\": 2309.5011349340184,\n \"strokeColor\": \"#000000\",\n \"backgroundColor\": \"white\",\n \"width\": 103.51054382324219,\n \"height\": 28.8310711010254,\n \"seed\": 1804201402,\n \"groupIds\": [\n \"TafrumkQql6FUeTFdBMm-\"\n ],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152817116,\n \"link\": null,\n \"locked\": false,\n \"fontSize\": 23.064856880820322,\n \"fontFamily\": 1,\n \"text\": \"End User\",\n \"textAlign\": \"center\",\n \"verticalAlign\": \"top\",\n \"containerId\": null,\n \"originalText\": \"End User\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"line\",\n \"version\": 2123,\n \"versionNonce\": 1628436228,\n \"index\": \"b6I\",\n \"isDeleted\": false,\n \"id\": \"pijBT8vPR7p7LIf6w_dcC\",\n \"fillStyle\": \"cross-hatch\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 0,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": -476.24781473924645,\n \"y\": 2292.555987811961,\n \"strokeColor\": \"#000000\",\n \"backgroundColor\": \"#ced4da\",\n \"width\": 56.819606873238214,\n \"height\": 50.596228152466416,\n \"seed\": 104343162,\n \"groupIds\": [\n \"XJCcWbsBNKnnIezwbpXsC\",\n \"TafrumkQql6FUeTFdBMm-\"\n ],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 2\n },\n \"boundElements\": [],\n \"updated\": 1730152817116,\n \"link\": null,\n \"locked\": false,\n \"startBinding\": null,\n \"endBinding\": null,\n \"lastCommittedPoint\": null,\n \"startArrowhead\": null,\n \"endArrowhead\": null,\n \"points\": [\n [\n 0,\n 0\n ],\n [\n 6.363795969802675,\n -33.527621064887384\n ],\n [\n 27.273411299154343,\n -50.596228152466416\n ],\n [\n 48.183026628506006,\n -37.185179726511414\n ],\n [\n 56.819606873238214,\n -3.481418584602479\n ],\n [\n 0,\n 0\n ]\n ]\n },\n {\n \"type\": \"ellipse\",\n \"version\": 1860,\n \"versionNonce\": 1971484292,\n \"index\": \"b6J\",\n \"isDeleted\": false,\n \"id\": \"pcQc9n9kEAl-OVAUytn-b\",\n \"fillStyle\": \"cross-hatch\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 0,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": -461.88547731665426,\n \"y\": 2215.6450141913247,\n \"strokeColor\": \"#000000\",\n \"backgroundColor\": \"#ced4da\",\n \"width\": 29.091638719097993,\n \"height\": 25.455183879210832,\n \"seed\": 1210140474,\n \"groupIds\": [\n \"XJCcWbsBNKnnIezwbpXsC\",\n \"TafrumkQql6FUeTFdBMm-\"\n ],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152817116,\n \"link\": null,\n \"locked\": false\n },\n {\n \"type\": \"rectangle\",\n \"version\": 2228,\n \"versionNonce\": 171340604,\n \"index\": \"b8p\",\n \"isDeleted\": false,\n \"id\": \"IDPR-T_GInZ_SYrUKdyiV\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 232.9885694829697,\n \"y\": 1901.165608184967,\n \"strokeColor\": \"#1e1e1e\",\n \"backgroundColor\": \"transparent\",\n \"width\": 215.2445549281264,\n \"height\": 191.3848126773838,\n \"seed\": 553856166,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 3\n },\n \"boundElements\": [\n {\n \"id\": \"NIxHFrLYNc4GZ_eaCUNEX\",\n \"type\": \"text\"\n },\n {\n \"id\": \"QM3OeE-gZsJtTqpVyK6WY\",\n \"type\": \"arrow\"\n },\n {\n \"id\": \"L746tARKZ5EBHf_R0vgrz\",\n \"type\": \"arrow\"\n },\n {\n \"id\": \"KNsMX2SBrRRRZSGEwUC8b\",\n \"type\": \"arrow\"\n },\n {\n \"id\": \"1DW6jYie7TBBMPB2Tb6PL\",\n \"type\": \"arrow\"\n }\n ],\n \"updated\": 1730152887733,\n \"link\": null,\n \"locked\": false\n },\n {\n \"type\": \"text\",\n \"version\": 2546,\n \"versionNonce\": 234662844,\n \"index\": \"b8q\",\n \"isDeleted\": false,\n \"id\": \"NIxHFrLYNc4GZ_eaCUNEX\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 283.41664833863445,\n \"y\": 1961.8580145236588,\n \"strokeColor\": \"#1e1e1e\",\n \"backgroundColor\": \"transparent\",\n \"width\": 114.38839721679688,\n \"height\": 70,\n \"seed\": 2122491878,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152887733,\n \"link\": null,\n \"locked\": false,\n \"fontSize\": 28,\n \"fontFamily\": 5,\n \"text\": \"Token\\nProvider\",\n \"textAlign\": \"center\",\n \"verticalAlign\": \"middle\",\n \"containerId\": \"IDPR-T_GInZ_SYrUKdyiV\",\n \"originalText\": \"Token Provider\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"rectangle\",\n \"version\": 2186,\n \"versionNonce\": 741797636,\n \"index\": \"b91\",\n \"isDeleted\": false,\n \"id\": \"0pKo0FuXTqVcAnFHg3eHW\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": -205.52933980495288,\n \"y\": 2178.953941971566,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"transparent\",\n \"width\": 215.2445549281264,\n \"height\": 191.3848126773838,\n \"seed\": 236441020,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 3\n },\n \"boundElements\": [\n {\n \"id\": \"L9qPfblCPCj76bIqH4zPF\",\n \"type\": \"text\"\n },\n {\n \"id\": \"5zc8kBUOyFDyV3r5cJ5u1\",\n \"type\": \"arrow\"\n },\n {\n \"id\": \"GMVGnrJnqaFoheEbd232T\",\n \"type\": \"arrow\"\n },\n {\n \"id\": \"1DW6jYie7TBBMPB2Tb6PL\",\n \"type\": \"arrow\"\n }\n ],\n \"updated\": 1730152887733,\n \"link\": null,\n \"locked\": false\n },\n {\n \"type\": \"text\",\n \"version\": 2442,\n \"versionNonce\": 493343804,\n \"index\": \"b92\",\n \"isDeleted\": false,\n \"id\": \"L9qPfblCPCj76bIqH4zPF\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": -187.50743465534282,\n \"y\": 2257.146348310258,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"transparent\",\n \"width\": 179.20074462890625,\n \"height\": 35,\n \"seed\": 1909372476,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152887733,\n \"link\": null,\n \"locked\": false,\n \"fontSize\": 28,\n \"fontFamily\": 5,\n \"text\": \"Malicious App\",\n \"textAlign\": \"center\",\n \"verticalAlign\": \"middle\",\n \"containerId\": \"0pKo0FuXTqVcAnFHg3eHW\",\n \"originalText\": \"Malicious App\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"text\",\n \"version\": 2141,\n \"versionNonce\": 1555780868,\n \"index\": \"b93\",\n \"isDeleted\": false,\n \"id\": \"T3PyqevJ-r5aTrOqjBFmC\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 1,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 682.0542956691074,\n \"y\": 1874.6210808258843,\n \"strokeColor\": \"#000000\",\n \"backgroundColor\": \"white\",\n \"width\": 120.95199584960938,\n \"height\": 28.8310711010254,\n \"seed\": 824973372,\n \"groupIds\": [\n \"B6zTjTN5MAfYoqaWmyIpC\"\n ],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152736532,\n \"link\": null,\n \"locked\": false,\n \"fontSize\": 23.064856880820322,\n \"fontFamily\": 1,\n \"text\": \"Developers\",\n \"textAlign\": \"center\",\n \"verticalAlign\": \"top\",\n \"containerId\": null,\n \"originalText\": \"Developers\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"line\",\n \"version\": 2219,\n \"versionNonce\": 1611797636,\n \"index\": \"b94\",\n \"isDeleted\": false,\n \"id\": \"l7ybVNV2OMm-nKOKuikqR\",\n \"fillStyle\": \"cross-hatch\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 0,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 720.4019302076085,\n \"y\": 1857.6759337038266,\n \"strokeColor\": \"#000000\",\n \"backgroundColor\": \"#ced4da\",\n \"width\": 56.819606873238214,\n \"height\": 50.596228152466416,\n \"seed\": 1895149756,\n \"groupIds\": [\n \"aNKxm8YeKZVFgjEt1CgRW\",\n \"B6zTjTN5MAfYoqaWmyIpC\"\n ],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 2\n },\n \"boundElements\": [],\n \"updated\": 1730152736532,\n \"link\": null,\n \"locked\": false,\n \"startBinding\": null,\n \"endBinding\": null,\n \"lastCommittedPoint\": null,\n \"startArrowhead\": null,\n \"endArrowhead\": null,\n \"points\": [\n [\n 0,\n 0\n ],\n [\n 6.363795969802675,\n -33.527621064887384\n ],\n [\n 27.273411299154343,\n -50.596228152466416\n ],\n [\n 48.183026628506006,\n -37.185179726511414\n ],\n [\n 56.819606873238214,\n -3.481418584602479\n ],\n [\n 0,\n 0\n ]\n ]\n },\n {\n \"type\": \"ellipse\",\n \"version\": 1956,\n \"versionNonce\": 1499784196,\n \"index\": \"b95\",\n \"isDeleted\": false,\n \"id\": \"K8bdPFGmyuaYudSU_OE_3\",\n \"fillStyle\": \"cross-hatch\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 0,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 734.7642676302007,\n \"y\": 1780.7649600831905,\n \"strokeColor\": \"#000000\",\n \"backgroundColor\": \"#ced4da\",\n \"width\": 29.091638719097993,\n \"height\": 25.455183879210832,\n \"seed\": 620247356,\n \"groupIds\": [\n \"aNKxm8YeKZVFgjEt1CgRW\",\n \"B6zTjTN5MAfYoqaWmyIpC\"\n ],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152736532,\n \"link\": null,\n \"locked\": false\n },\n {\n \"type\": \"text\",\n \"version\": 2229,\n \"versionNonce\": 1766236476,\n \"index\": \"b96\",\n \"isDeleted\": false,\n \"id\": \"drKxgai7tWhbRkPAkFoaW\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 1,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 706.11979529216,\n \"y\": 2290.73338734735,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"white\",\n \"width\": 102.93438720703125,\n \"height\": 28.8310711010254,\n \"seed\": 373772420,\n \"groupIds\": [\n \"6MwyX96Lf9eym84D59YgW\"\n ],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152840065,\n \"link\": null,\n \"locked\": false,\n \"fontSize\": 23.064856880820322,\n \"fontFamily\": 1,\n \"text\": \"Attacker\",\n \"textAlign\": \"center\",\n \"verticalAlign\": \"top\",\n \"containerId\": null,\n \"originalText\": \"Attacker\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"line\",\n \"version\": 2273,\n \"versionNonce\": 920066492,\n \"index\": \"b97\",\n \"isDeleted\": false,\n \"id\": \"ANLjDXSBmq2lDuXiHhPKE\",\n \"fillStyle\": \"cross-hatch\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 0,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 735.458625509372,\n \"y\": 2273.7882402252926,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"#ced4da\",\n \"width\": 56.819606873238214,\n \"height\": 50.596228152466416,\n \"seed\": 227713028,\n \"groupIds\": [\n \"kFpzVapCBJpFzZjwFXhER\",\n \"6MwyX96Lf9eym84D59YgW\"\n ],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 2\n },\n \"boundElements\": [],\n \"updated\": 1730152840065,\n \"link\": null,\n \"locked\": false,\n \"startBinding\": null,\n \"endBinding\": null,\n \"lastCommittedPoint\": null,\n \"startArrowhead\": null,\n \"endArrowhead\": null,\n \"points\": [\n [\n 0,\n 0\n ],\n [\n 6.363795969802675,\n -33.527621064887384\n ],\n [\n 27.273411299154343,\n -50.596228152466416\n ],\n [\n 48.183026628506006,\n -37.185179726511414\n ],\n [\n 56.819606873238214,\n -3.481418584602479\n ],\n [\n 0,\n 0\n ]\n ]\n },\n {\n \"type\": \"ellipse\",\n \"version\": 2010,\n \"versionNonce\": 1556382268,\n \"index\": \"b98\",\n \"isDeleted\": false,\n \"id\": \"wS4NSv0k6ivd-min90xVs\",\n \"fillStyle\": \"cross-hatch\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 0,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 749.8209629319642,\n \"y\": 2196.877266604656,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"#ced4da\",\n \"width\": 29.091638719097993,\n \"height\": 25.455183879210832,\n \"seed\": 768081796,\n \"groupIds\": [\n \"kFpzVapCBJpFzZjwFXhER\",\n \"6MwyX96Lf9eym84D59YgW\"\n ],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152840065,\n \"link\": null,\n \"locked\": false\n },\n {\n \"type\": \"arrow\",\n \"version\": 3307,\n \"versionNonce\": 752590212,\n \"index\": \"b99\",\n \"isDeleted\": false,\n \"id\": \"QM3OeE-gZsJtTqpVyK6WY\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 701.9411573717334,\n \"y\": 1844.8912709167275,\n \"strokeColor\": \"#1e1e1e\",\n \"backgroundColor\": \"transparent\",\n \"width\": 244.26981175285607,\n \"height\": 120.72995808263295,\n \"seed\": 306836540,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 2\n },\n \"boundElements\": [\n {\n \"type\": \"text\",\n \"id\": \"R_kzZWp-mTJGBEknO4BDX\"\n }\n ],\n \"updated\": 1730152887734,\n \"link\": null,\n \"locked\": false,\n \"startBinding\": null,\n \"endBinding\": {\n \"elementId\": \"IDPR-T_GInZ_SYrUKdyiV\",\n \"focus\": 0.17879744648147,\n \"gap\": 9.438221207781197,\n \"fixedPoint\": null\n },\n \"lastCommittedPoint\": null,\n \"startArrowhead\": null,\n \"endArrowhead\": \"arrow\",\n \"points\": [\n [\n 0,\n 0\n ],\n [\n -244.26981175285607,\n 120.72995808263295\n ]\n ]\n },\n {\n \"id\": \"R_kzZWp-mTJGBEknO4BDX\",\n \"type\": \"text\",\n \"x\": 121.65945464057293,\n \"y\": 1853.7601556245634,\n \"width\": 144.31985473632812,\n \"height\": 25,\n \"angle\": 0,\n \"strokeColor\": \"#1e1e1e\",\n \"backgroundColor\": \"transparent\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"dotted\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"groupIds\": [],\n \"frameId\": null,\n \"index\": \"b9A\",\n \"roundness\": null,\n \"seed\": 235483396,\n \"version\": 19,\n \"versionNonce\": 1684440708,\n \"isDeleted\": false,\n \"boundElements\": null,\n \"updated\": 1730152612311,\n \"link\": null,\n \"locked\": false,\n \"text\": \"Create Project\",\n \"fontSize\": 20,\n \"fontFamily\": 5,\n \"textAlign\": \"center\",\n \"verticalAlign\": \"middle\",\n \"containerId\": \"QM3OeE-gZsJtTqpVyK6WY\",\n \"originalText\": \"Create Project\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"arrow\",\n \"version\": 3418,\n \"versionNonce\": 147191356,\n \"index\": \"b9B\",\n \"isDeleted\": false,\n \"id\": \"L746tARKZ5EBHf_R0vgrz\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 716.5736657298296,\n \"y\": 2249.302134297232,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"transparent\",\n \"width\": 256.56483322792286,\n \"height\": 232.4291067895324,\n \"seed\": 1422419204,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 2\n },\n \"boundElements\": [\n {\n \"type\": \"text\",\n \"id\": \"siYG6VKVSb_LJCZ4mZhGR\"\n }\n ],\n \"updated\": 1730152923070,\n \"link\": null,\n \"locked\": false,\n \"startBinding\": null,\n \"endBinding\": {\n \"elementId\": \"IDPR-T_GInZ_SYrUKdyiV\",\n \"focus\": -0.4562902862666964,\n \"gap\": 11.775708090810582,\n \"fixedPoint\": null\n },\n \"lastCommittedPoint\": null,\n \"startArrowhead\": null,\n \"endArrowhead\": \"arrow\",\n \"points\": [\n [\n 0,\n 0\n ],\n [\n -256.56483322792286,\n -232.4291067895324\n ]\n ]\n },\n {\n \"type\": \"text\",\n \"version\": 61,\n \"versionNonce\": 69135492,\n \"index\": \"b9C\",\n \"isDeleted\": false,\n \"id\": \"siYG6VKVSb_LJCZ4mZhGR\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"dotted\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 516.1313217477041,\n \"y\": 2120.5875809024656,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"transparent\",\n \"width\": 144.31985473632812,\n \"height\": 25,\n \"seed\": 1945969796,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152921956,\n \"link\": null,\n \"locked\": false,\n \"fontSize\": 20,\n \"fontFamily\": 5,\n \"text\": \"Create Project\",\n \"textAlign\": \"center\",\n \"verticalAlign\": \"middle\",\n \"containerId\": \"L746tARKZ5EBHf_R0vgrz\",\n \"originalText\": \"Create Project\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"arrow\",\n \"version\": 3257,\n \"versionNonce\": 493737532,\n \"index\": \"b9D\",\n \"isDeleted\": false,\n \"id\": \"5zc8kBUOyFDyV3r5cJ5u1\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": -389.669252006124,\n \"y\": 2282.7876018612146,\n \"strokeColor\": \"#1e1e1e\",\n \"backgroundColor\": \"transparent\",\n \"width\": 169.1290066673917,\n \"height\": 5.596252304153495,\n \"seed\": 1553075644,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 2\n },\n \"boundElements\": [\n {\n \"type\": \"text\",\n \"id\": \"7RKMXj2cxBpP35OoP6w88\"\n }\n ],\n \"updated\": 1730152887734,\n \"link\": null,\n \"locked\": false,\n \"startBinding\": null,\n \"endBinding\": {\n \"elementId\": \"0pKo0FuXTqVcAnFHg3eHW\",\n \"focus\": 0.015241445198305226,\n \"gap\": 15.010905533779408,\n \"fixedPoint\": null\n },\n \"lastCommittedPoint\": null,\n \"startArrowhead\": null,\n \"endArrowhead\": \"arrow\",\n \"points\": [\n [\n 0,\n 0\n ],\n [\n 169.1290066673917,\n -5.596252304153495\n ]\n ]\n },\n {\n \"id\": \"7RKMXj2cxBpP35OoP6w88\",\n \"type\": \"text\",\n \"x\": -349.63218044871417,\n \"y\": 2182.1009987335074,\n \"width\": 49.35993957519531,\n \"height\": 25,\n \"angle\": 0,\n \"strokeColor\": \"#1e1e1e\",\n \"backgroundColor\": \"transparent\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"dotted\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"groupIds\": [],\n \"frameId\": null,\n \"index\": \"b9E\",\n \"roundness\": null,\n \"seed\": 1020353412,\n \"version\": 7,\n \"versionNonce\": 286799876,\n \"isDeleted\": false,\n \"boundElements\": null,\n \"updated\": 1730152666495,\n \"link\": null,\n \"locked\": false,\n \"text\": \"Login\",\n \"fontSize\": 20,\n \"fontFamily\": 5,\n \"textAlign\": \"center\",\n \"verticalAlign\": \"middle\",\n \"containerId\": \"5zc8kBUOyFDyV3r5cJ5u1\",\n \"originalText\": \"Login\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"rectangle\",\n \"version\": 2219,\n \"versionNonce\": 1519381636,\n \"index\": \"b9F\",\n \"isDeleted\": false,\n \"id\": \"BVL6kArEACCUWcQSWHFae\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": -197.31659691308204,\n \"y\": 1891.50794075608,\n \"strokeColor\": \"#1e1e1e\",\n \"backgroundColor\": \"transparent\",\n \"width\": 215.2445549281264,\n \"height\": 191.3848126773838,\n \"seed\": 1674875964,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 3\n },\n \"boundElements\": [\n {\n \"id\": \"L40neTwxvfRhgN0RNPCjk\",\n \"type\": \"text\"\n },\n {\n \"id\": \"KNsMX2SBrRRRZSGEwUC8b\",\n \"type\": \"arrow\"\n },\n {\n \"id\": \"GMVGnrJnqaFoheEbd232T\",\n \"type\": \"arrow\"\n }\n ],\n \"updated\": 1730152771829,\n \"link\": null,\n \"locked\": false\n },\n {\n \"type\": \"text\",\n \"version\": 2484,\n \"versionNonce\": 1616512188,\n \"index\": \"b9G\",\n \"isDeleted\": false,\n \"id\": \"L40neTwxvfRhgN0RNPCjk\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": -158.99460478837432,\n \"y\": 1969.7003470947718,\n \"strokeColor\": \"#1e1e1e\",\n \"backgroundColor\": \"transparent\",\n \"width\": 138.60057067871094,\n \"height\": 35,\n \"seed\": 825142460,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152713281,\n \"link\": null,\n \"locked\": false,\n \"fontSize\": 28,\n \"fontFamily\": 5,\n \"text\": \"Victim App\",\n \"textAlign\": \"center\",\n \"verticalAlign\": \"middle\",\n \"containerId\": \"BVL6kArEACCUWcQSWHFae\",\n \"originalText\": \"Victim App\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"arrow\",\n \"version\": 3243,\n \"versionNonce\": 1053846276,\n \"index\": \"b9H\",\n \"isDeleted\": false,\n \"id\": \"KNsMX2SBrRRRZSGEwUC8b\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 20.480215068902226,\n \"y\": 1988.10732399155,\n \"strokeColor\": \"#1e1e1e\",\n \"backgroundColor\": \"transparent\",\n \"width\": 203.34876871685455,\n \"height\": 2.0759069603368516,\n \"seed\": 1956413316,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 2\n },\n \"boundElements\": [\n {\n \"type\": \"text\",\n \"id\": \"qohNI9nUisxSE0t98F5c6\"\n }\n ],\n \"updated\": 1730152960724,\n \"link\": null,\n \"locked\": false,\n \"startBinding\": {\n \"elementId\": \"BVL6kArEACCUWcQSWHFae\",\n \"focus\": -0.020951095762841803,\n \"gap\": 2.5522570538578577,\n \"fixedPoint\": null\n },\n \"endBinding\": {\n \"elementId\": \"IDPR-T_GInZ_SYrUKdyiV\",\n \"focus\": 0.12417236481001943,\n \"gap\": 9.159585697212947,\n \"fixedPoint\": null\n },\n \"lastCommittedPoint\": null,\n \"startArrowhead\": null,\n \"endArrowhead\": \"arrow\",\n \"points\": [\n [\n 0,\n 0\n ],\n [\n 203.34876871685455,\n -2.0759069603368516\n ]\n ]\n },\n {\n \"type\": \"text\",\n \"version\": 53,\n \"versionNonce\": 1016397884,\n \"index\": \"b9I\",\n \"isDeleted\": false,\n \"id\": \"qohNI9nUisxSE0t98F5c6\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"dotted\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 52.16467022811075,\n \"y\": 1937.0693705113815,\n \"strokeColor\": \"#1e1e1e\",\n \"backgroundColor\": \"transparent\",\n \"width\": 139.9798583984375,\n \"height\": 100,\n \"seed\": 1734995716,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152933693,\n \"link\": null,\n \"locked\": false,\n \"fontSize\": 20,\n \"fontFamily\": 5,\n \"text\": \"Login &\\nVerify\\nToken\\n(not audience)\",\n \"textAlign\": \"center\",\n \"verticalAlign\": \"middle\",\n \"containerId\": \"KNsMX2SBrRRRZSGEwUC8b\",\n \"originalText\": \"Login &\\nVerify\\nToken\\n(not audience)\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"arrow\",\n \"version\": 3326,\n \"versionNonce\": 709865148,\n \"index\": \"b9J\",\n \"isDeleted\": false,\n \"id\": \"GMVGnrJnqaFoheEbd232T\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": -85.78012969943508,\n \"y\": 2175.762596605995,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"transparent\",\n \"width\": 7.444965507835249,\n \"height\": 93.7848692528969,\n \"seed\": 244411196,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 2\n },\n \"boundElements\": [\n {\n \"type\": \"text\",\n \"id\": \"BK1Fa_XotI7vFgkPy2dbx\"\n }\n ],\n \"updated\": 1730152887734,\n \"link\": null,\n \"locked\": false,\n \"startBinding\": {\n \"elementId\": \"0pKo0FuXTqVcAnFHg3eHW\",\n \"focus\": 0.1733804513331944,\n \"gap\": 3.1913453655711237,\n \"fixedPoint\": null\n },\n \"endBinding\": {\n \"elementId\": \"BVL6kArEACCUWcQSWHFae\",\n \"focus\": 0.09594391447305084,\n \"gap\": 1,\n \"fixedPoint\": null\n },\n \"lastCommittedPoint\": null,\n \"startArrowhead\": null,\n \"endArrowhead\": \"arrow\",\n \"points\": [\n [\n 0,\n 0\n ],\n [\n -7.444965507835249,\n -93.7848692528969\n ]\n ]\n },\n {\n \"type\": \"text\",\n \"version\": 52,\n \"versionNonce\": 107945148,\n \"index\": \"b9K\",\n \"isDeleted\": false,\n \"id\": \"BK1Fa_XotI7vFgkPy2dbx\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"dotted\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": -178.43252883518863,\n \"y\": 2116.3701619795465,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"transparent\",\n \"width\": 177.85983276367188,\n \"height\": 25,\n \"seed\": 1010344892,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": null,\n \"boundElements\": [],\n \"updated\": 1730152787158,\n \"link\": null,\n \"locked\": false,\n \"fontSize\": 20,\n \"fontFamily\": 5,\n \"text\": \"Use stolen tokens\",\n \"textAlign\": \"center\",\n \"verticalAlign\": \"middle\",\n \"containerId\": \"GMVGnrJnqaFoheEbd232T\",\n \"originalText\": \"Use stolen tokens\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n },\n {\n \"type\": \"arrow\",\n \"version\": 3432,\n \"versionNonce\": 1305529476,\n \"index\": \"b9L\",\n \"isDeleted\": false,\n \"id\": \"1DW6jYie7TBBMPB2Tb6PL\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"solid\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"angle\": 0,\n \"x\": 26.268982827136426,\n \"y\": 2288.1972340648817,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"transparent\",\n \"width\": 288.2137785995216,\n \"height\": 181.38746009952138,\n \"seed\": 647081148,\n \"groupIds\": [],\n \"frameId\": null,\n \"roundness\": {\n \"type\": 2\n },\n \"boundElements\": [\n {\n \"type\": \"text\",\n \"id\": \"7jSYHzSnihK5XvjTuh4_z\"\n }\n ],\n \"updated\": 1730152951210,\n \"link\": null,\n \"locked\": false,\n \"startBinding\": {\n \"elementId\": \"0pKo0FuXTqVcAnFHg3eHW\",\n \"focus\": 0.5611221909850164,\n \"gap\": 16.553767703962905,\n \"fixedPoint\": null\n },\n \"endBinding\": {\n \"elementId\": \"IDPR-T_GInZ_SYrUKdyiV\",\n \"focus\": -0.5721787148148761,\n \"gap\": 14.259353103009744,\n \"fixedPoint\": null\n },\n \"lastCommittedPoint\": null,\n \"startArrowhead\": null,\n \"endArrowhead\": \"arrow\",\n \"points\": [\n [\n 0,\n 0\n ],\n [\n 288.2137785995216,\n -181.38746009952138\n ]\n ]\n },\n {\n \"id\": \"7jSYHzSnihK5XvjTuh4_z\",\n \"type\": \"text\",\n \"x\": 88.62596367963161,\n \"y\": 2172.503504015121,\n \"width\": 163.49981689453125,\n \"height\": 50,\n \"angle\": 0,\n \"strokeColor\": \"#e03131\",\n \"backgroundColor\": \"transparent\",\n \"fillStyle\": \"solid\",\n \"strokeWidth\": 2,\n \"strokeStyle\": \"dotted\",\n \"roughness\": 1,\n \"opacity\": 100,\n \"groupIds\": [],\n \"frameId\": null,\n \"index\": \"b9LV\",\n \"roundness\": null,\n \"seed\": 1300461060,\n \"version\": 64,\n \"versionNonce\": 1109535932,\n \"isDeleted\": false,\n \"boundElements\": null,\n \"updated\": 1730152950133,\n \"link\": null,\n \"locked\": false,\n \"text\": \"Login with\\nAttacker project\",\n \"fontSize\": 20,\n \"fontFamily\": 5,\n \"textAlign\": \"center\",\n \"verticalAlign\": \"middle\",\n \"containerId\": \"1DW6jYie7TBBMPB2Tb6PL\",\n \"originalText\": \"Login with\\nAttacker project\",\n \"autoResize\": true,\n \"lineHeight\": 1.25\n }\n ],\n \"appState\": {\n \"gridSize\": 20,\n \"gridStep\": 5,\n \"gridModeEnabled\": false,\n \"viewBackgroundColor\": \"#ffffff\"\n },\n \"files\": {}\n}" }, { "path": "docs/vulnerabilities/broken-authentication/jwt-cross-service-relay-attack.mdx", "content": "---\ntitle: Token Cross Service Relay Attack\ndescription: A vulnerability arises when a Token is forged by the same service but doesn't verify the issuer. This can lead to security risks, as it means an attacker could create a forged Token and manipulate the fields or impersonate an user.\n---\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n
SeverityHigh
Classifications\n \n
OWASP Category\n OWASP API2:2023 Broken Authentication\n
\n\nA vulnerability arises when a JSON Web Token (JWT) is signed by the same service but doesn't verify the issuer (the source of the token) and/or the audience (the intended recipient). This can lead to security risks, as it means an attacker could create a forged JWT with the same service signature and manipulate the issuer and audience fields. Without proper verification, the service may accept the forged token, potentially granting unauthorized access or compromising the system's security.\n\n![JWT Cross Service Relay Attack](./jwt-cross-service-relay-attack.png)\n\n## Services impacted\n\n### Social Identity Providers\n\nMost of the social identity providers generate ID tokens using the same key pair. In addition of JWT integrity verifications, the `issuer` and `audience` must be verified to ensure the token has been generated from the expected client.\n\nHere are some social identity providers that are impacted with this vulnerability:\n\n| Service | Description | Documentation |\n| ------- | ----------- | ------------- |\n| **Google** | Google provides ID tokens generated from the same key pair. The `audience` must be verified to ensure the token has been generated from the expected Google Project's `Client Id`. | [Validate Google Id Token](https://developers.google.com/identity/openid-connect/openid-connect#validatinganidtoken) |\n| **Facebook** | Facebook provides ID tokens generated from the same key pair. The `audience` must be verified to ensure the token has been generated from the expected `Facebook App Id`. | [Validate Facebook Token](https://developers.facebook.com/docs/facebook-login/limited-login/token/validating/) |\n| **Microsoft** | Microsoft provides ID tokens generated from the same key pair. The `audience` must be verified to ensure the token has been generated from the expected `Microsoft App Id`. | [Validate Microsoft Id Tokens](https://learn.microsoft.com/en-us/entra/identity-platform/id-tokens#validate-tokens) |\n| **Apple** | Apple provides ID tokens generated from the same key pair. The `audience` must be verified to ensure the token has been generated from the expected Apple App `client_id`. | [Validate Apple Id Tokens](https://developer.apple.com/documentation/sign_in_with_apple/sign_in_with_apple_rest_api/authenticating_users_with_sign_in_with_apple#3383773) |\n\n### IAM / Authorization Services\n\nSome IAM Services generate JWT tokens using the same key pair. In addition of JWT integrity verifications, some additional checks must be performed to ensure the token has been generated from the expected client / tenant.\n\nHere are some of the services that are impacted:\n\n| Service | Description | Documentation |\n| ------------------------------------------- | ----------- | ------------- |\n| **Firebase** / **Google Identity Platform** | Firebase provides ID tokens generated from the same key pair. The issuer and audience must be verified to ensure the token has been generated from the expected Firebase Project. | [Firebase Verify Id Token](https://firebase.google.com/docs/auth/admin/verify-id-tokens) |\n\n## Example\n\nHere is an example of JWT (ID Token) issued by Google:\n\n```json\n{\n \"iss\": \"https://accounts.google.com\",\n \"azp\": \"1234987819200.apps.googleusercontent.com\",\n \"aud\": \"1234987819200.apps.googleusercontent.com\",\n \"sub\": \"10769150350006150715113082367\",\n \"at_hash\": \"HK6E_P6Dh8Y93mRNtsDB1Q\",\n \"hd\": \"example.com\",\n \"email\": \"jsmith@example.com\",\n \"email_verified\": \"true\",\n \"iat\": 1353601026,\n \"exp\": 1353604926,\n \"nonce\": \"0394852-3190485-2490358\"\n}\n```\n\nIn this example, the `aud` claim represents the audience, which is the client ID of the Google Project. The service must verify the `aud` claim to ensure the token has been generated from the expected Google Project's `Client Id`.\n\nLet's say an attacker creates a new project with the same service and generates a token. The attacker can relay the token to the victim's project and impersonate the user making the victim's project believe that the user is authenticated.\n\nHere is an example of a forged token:\n\n```json\n{\n \"iss\": \"https://accounts.google.com\",\n \"azp\": \"1234987819201.apps.googleusercontent.com\",\n \"aud\": \"1234987819201.apps.googleusercontent.com\",\n \"sub\": \"10769150350006150715113082367\",\n \"at_hash\": \"HK6E_P6Dh8Y93mRNtsDB1Q\",\n \"hd\": \"example.com\",\n \"email\": \"jsmith@example.com\",\n \"email_verified\": \"true\",\n \"iat\": 1353601026,\n \"exp\": 1353604926,\n \"nonce\": \"0394852-3190485-2490358\"\n}\n```\n\nNotice that the `aud` claim has been changed to the attacker's project `Client Id`. If the service doesn't verify the `aud` claim, it will accept the forged token and believe that the user is authenticated.\n\n## How to test?\n\nCreate a new project with the same service and generate a token (through a legitimate authentication process). Then, try to relay the token to your original project and see if the service accepts the token or not. If the service accepts the token, then the service is vulnerable to this attack.\n\nThis test requires manual steps. VulnAPI does not currently automate this scan. Create a second project with the same identity provider, obtain a valid token for that project, then send it to your original project's API. If the API accepts the request, it is vulnerable.\n\n## What is the impact?\n\nThe impact of this vulnerability is that an attacker could create another project with the same service. When user will authenticate with the malicious project, the attacker can relay the token to the victim's project and impersonate the user making the victim's project believe that the user is authenticated.\n\n## How to remediate?\n\nTo remediate this vulnerability, the service must follow tokens provider's guidelines. Most of the time, the `issuer` and `audience` must be verified to ensure the token has been generated from the expected client. The service must keep verifying token integrity and other claims to ensure the token is not tampered with.\n" }, { "path": "docs/vulnerabilities/broken-authentication/jwt-kid-injection.mdx", "content": "---\ntitle: JWT KID Header Injection\ndescription: JWT KID Header Injection occurs when the `kid` (Key ID) header parameter is passed unsanitized to a database query or file system lookup, allowing attackers to forge trusted tokens.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n
SeverityHigh
Classifications\n CWE-345: Insufficient Verification of Data Authenticity\n
OWASP Category\n OWASP API2:2023 Broken Authentication\n
\n\nThe `kid` (Key ID) JWT header field is intended to tell the server which key to use for signature verification. When this value is passed unsanitized to a database query or a file system lookup, attackers can inject a payload that causes the server to use an attacker-controlled key, effectively allowing them to forge arbitrary tokens.\n\nVulnAPI tests two variants of this attack:\n\n- **SQL Injection** — injects a SQL payload into `kid` (e.g. `' UNION SELECT 'secret' ...`) so that the database returns a known value as the key.\n- **Path Traversal** — sets `kid` to a filesystem path such as `/dev/null` so the server reads an empty file as the key, which can be matched with an empty HMAC secret.\n\n## Example\n\nHere is a valid JWT signed with HS256:\n\n```\neyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\n```\n\n### SQL Injection variant\n\nThe attacker crafts a token with a `kid` header that injects into the key-lookup query and re-signs it with the value the query is made to return (`secret`):\n\n```json\n{\n \"alg\": \"HS256\",\n \"typ\": \"JWT\",\n \"kid\": \"' UNION SELECT 'secret' FROM tokens WHERE '1'='1\"\n}\n```\n\n### Path Traversal variant\n\nThe attacker sets `kid` to `/dev/null` and re-signs the token with an empty HMAC secret. If the server reads the signing key from the path named by `kid`, it receives zero bytes:\n\n```json\n{\n \"alg\": \"HS256\",\n \"typ\": \"JWT\",\n \"kid\": \"/dev/null\"\n}\n```\n\n## How to test?\n\n\n \n```bash\nvulnapi scan curl [url] -H \"Authorization: Bearer eyJhbGciOiJIUzI1NiI...\" --scans jwt.kid_injection\n```\n \n \n```bash\necho \"eyJhbGciOiJIUzI1NiI...\" | vulnapi scan openapi [OpenAPI_Path_Or_URL] --scans jwt.kid_injection\n```\n \n \n```bash\nvulnapi scan graphql -H \"Authorization: Bearer eyJhbGciOiJIUzI1NiI...\" --scans jwt.kid_injection [url]\n```\n \n\n\nVulnAPI supports scanning against various types of other [vulnerabilities](../) as well.\n\n## What is the impact?\n\nA successful KID injection attack allows an attacker to forge a JWT that the server accepts as legitimate. This can lead to full authentication bypass, privilege escalation, or impersonation of any user in the system.\n\n## How to remediate?\n\n- **Validate the `kid` value** before using it — reject values containing SQL metacharacters, path separators, or characters outside a safe allowlist (e.g. alphanumeric and hyphens only).\n- **Use parameterised queries** when looking up keys by `kid` in a database to prevent SQL injection.\n- **Never read key material from user-controlled file paths** — store keys in a secure key store and use `kid` only as an opaque identifier mapped server-side to a known key.\n- **Hard-code or allowlist permitted `kid` values** where possible.\n" }, { "path": "docs/vulnerabilities/broken-authentication/jwt-not-verified.mdx", "content": "---\ntitle: JWT Signature Not Verified\ndescription: A vulnerability where the server accepts JWTs without verifying their cryptographic signature, allowing attackers to forge arbitrary tokens.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
Scan IDjwt.not_verified
SeverityHigh
CVSS 4.09.3 — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Classifications\n CWE-345: Insufficient Verification of Data Authenticity\n
OWASP Category\n OWASP API2:2023 Broken Authentication\n
\n\nThe \"JWT Signature Not Verified\" vulnerability occurs when a server accepts a JWT whose signature was created with a completely different (random) key. If the server returns the same successful response as it does for a legitimately signed token, it is not verifying the signature at all — meaning an attacker can craft any payload they want and the server will accept it.\n\n## Example\n\nVulnAPI takes your valid token, extracts its algorithm and claims, then re-signs it using a randomly generated key:\n\n**Original valid token** (signed with the real private key):\n```\neyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyMTIzIiwicm9sZSI6InVzZXIifQ.\n```\n\n**Attack token** (same claims, signed with a random key):\n```\neyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyMTIzIiwicm9sZSI6InVzZXIifQ.\n```\n\nIf both requests return the same HTTP status code (e.g. 200 OK), the server is not verifying the signature.\n\n## How to test?\n\n\n \n```bash\nvulnapi scan curl [url] -H \"Authorization: Bearer eyJhbGciOiJSUzI1NiI...\" --scans jwt.not_verified\n```\n \n \n```bash\necho \"eyJhbGciOiJSUzI1NiI...\" | vulnapi scan openapi [OpenAPI_Path_Or_URL] --scans jwt.not_verified\n```\n \n \n```bash\nvulnapi scan graphql -H \"Authorization: Bearer eyJhbGciOiJSUzI1NiI...\" --scans jwt.not_verified [url]\n```\n \n\n\nVulnAPI supports scanning against various types of other [vulnerabilities](../) as well.\n\n## What is the impact?\n\nIf an attacker can forge arbitrary JWTs without needing the signing key, they can:\n\n- **Escalate privileges**: modify the `role` or `permissions` claim to gain admin access\n- **Impersonate any user**: change the `sub` or `user_id` claim to any value\n- **Bypass all JWT-based access controls**: the entire authentication system is effectively disabled\n- **Access any resource**: the attacker can claim to be any user, including users they do not have credentials for\n\nCVSS 9.3 reflects that this is network-exploitable with no prior authentication required and provides full read/write access to all user data.\n\n## How to remediate?\n\n1. **Always verify signatures**: use a trusted, well-maintained JWT library and call the verification function — never decode-only.\n\n2. **Provide the correct key**: pass the expected public key (for RS/ES) or secret (for HS) explicitly; never allow the library to auto-detect the key from the token header.\n\n3. **Pin allowed algorithms**: configure your library to only accept a specific set of algorithms (e.g. `[\"RS256\"]`). This prevents algorithm-confusion attacks alongside signature bypass.\n\n4. **Use asymmetric algorithms for distributed systems**: RS256 and ES256 allow any service to verify tokens using the public key, while only the issuer holds the private key.\n\n```go\n// Go example — always pass allowed algorithms\ntoken, err := jwt.Parse(tokenString, keyFunc,\n jwt.WithValidMethods([]string{\"RS256\"}),\n)\n```\n\n```python\n# Python example — always pass algorithms and verify=True (default)\npayload = jwt.decode(token, public_key, algorithms=[\"RS256\"], audience=\"my-service\")\n```\n" }, { "path": "docs/vulnerabilities/broken-authentication/jwt-null-signature.mdx", "content": "---\ntitle: JWT Null Signature\ndescription: JWT Null Signature vulnerability occurs when a JSON Web Token (JWT) lacks a signature part, allowing attackers to manipulate the token's content.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
SeverityHigh
CVEs\n CVE-2020-28042\n
Classifications\n CWE-327: Use of a Broken or Risky Cryptographic Algorithm\n
OWASP Category\n OWASP API2:2023 Broken Authentication\n
\n\nThe \"JWT Null Signature\" vulnerability occurs when a JSON Web Token (JWT) lacks a signature part, allowing attackers to manipulate the token's content potentially leading to unauthorized access and data tampering.\n\nThis vulnerability is similar to the \"JWT Blank Secret\" vulnerability, but in this case, the token lacks a signature part, making it easier for attackers to manipulate the token's content.\n\n## Example\n\nHere is a valid JWT signed with RS512 algorithm:\n\n```bash\neyJhbGciOiJSUzUxMiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwiaWF0IjoxNTE2MjM5MDIyfQ.MnECRBSUQEi8GjiAyWHPhPhhpzCiMLldkq-N_VS-iwI08c4xEVUhT1Xrx9kNGuwusiQuLI3AOBTPwtbdaasQDCOpF0nxxQNKkufJYFds61ooFZfXCuRyXe1yGnXPRzTfgr5YVe9-T8_JDccx5JP70d9hoO4DU4GNYQMvrOQl4xu8DEyyDT2hsjyTbrodVhrV9znMfEBCsYPPLI-Q-HYLquGThPdJe2kBNA-CiLRV6Mwzji67cTd_4P_oUHKXsAxMqVpo-xC2xiVpO2P9X1__uXrRrfiNFUur4B71UMgGYJ2z_cQqwFfSXz9glBIf_-BJU10Rkmyo2ew862d7WsHx8g\n```\n\nThis decoded JWT contains, this parts:\n\n```json\n{\n \"alg\": \"RS512\",\n \"typ\": \"JWT\"\n}\n```\n\n```json\n{\n \"sub\": \"1234567890\",\n \"iat\": 1516239022\n}\n```\n\nThe following JWT has its signature stripped (null signature attack):\n\n```bash\neyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MjkxNTU4MDksImlhdCI6MTcyOTE1MjIwOSwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.\n```\n\n## How to test?\n\nIf you want to test only the \"JWT Null Signature\" vulnerability, you can use the following command:\n\n\n \n```bash\nvulnapi scan curl [url] -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans jwt.null_signature\n```\n \n \n```bash\necho \"eyJhbGciOiJSUzUxMiI...\" | vulnapi scan openapi [OpenAPI_Path_Or_URL] --scans jwt.null_signature\n```\n \n \n```bash\nvulnapi scan graphql -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans jwt.null_signature [url]\n```\n \n\n\nVulnAPI supports scanning against various types of other [vulnerabilities](../) as well.\n\n## What is the impact?\n\nSigning a JWT with a null signature has a significant impact on the security of the token. A null signature means that there is no signature part used to sign the token, making it vulnerable to tampering and unauthorized access.\n\nBy manipulating the token's content, attackers can gain unauthorized access to sensitive data, impersonate users, and perform other malicious activities.\n\n## How to remediate?\n\nTo remediate the \"JWT Null Signature\" vulnerability, you should ensure that all JWTs are verified with a valid signature before processing them.\n\nHere are some best practices to follow:\n- Always use a strong cryptographic algorithm like HS512, RS512, or EdDSA to sign JWTs.\n- Ensure that the secret key used to sign JWTs is kept secure and not exposed to unauthorized users.\n- Implement proper input validation and sanitization to prevent attackers from injecting malicious content into JWTs.\n- Regularly monitor and audit JWTs to detect any unauthorized access or tampering attempts.\n" }, { "path": "docs/vulnerabilities/broken-authentication/jwt-weak-secret.mdx", "content": "---\ntitle: JWT Weak Secret\ndescription: A vulnerability occurs when a JSON Web Token (JWT) is signed with a common, a well-known, or a weak secret. In this scenario, the token lacks proper cryptographic protection, making it susceptible to manipulation.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
SeverityHigh
CVEs\n * [CVE-2023-27172](https://nvd.nist.gov/vuln/detail/CVE-2023-27172)\n * [CVE-2023-46943](https://nvd.nist.gov/vuln/detail/CVE-2023-46943)\n
Classifications\n * [CWE-287: Improper Authentication](https://cwe.mitre.org/data/definitions/287.html)\n * [CWE-307: Improper Restriction of Excessive Authentication Attempts](https://cwe.mitre.org/data/definitions/307.html)\n * [CWE-798: Use of Hard-coded Credentials](https://cwe.mitre.org/data/definitions/798.html)\n
OWASP Category\n [OWASP API2:2023 Broken Authentication](https://owasp.org/API-Security/editions/2023/en/0xa2-broken-authentication/)\n
\n\nA vulnerability occurs when a JSON Web Token (JWT) is signed with a common, a well-known, or a weak secret. In this scenario, the token lacks proper cryptographic protection, making it susceptible to manipulation. Attackers can find the secret then modify the token's claims and content without detection, potentially leading to unauthorized access and data tampering.\n\n## What are the different scenarios?\n\n- **Common Secret**: The secret key used to sign the JWT is a common value, such as `secret`, `password`, or `123456`. Attackers can easily guess (brute-force) the secret key.\n- **Well-Known Secret**: The secret key used to sign the JWT is a well-known value or a default value This can happen when you use a default secret key provided by a product, library or framework.. Attackers can find the secret key in public repositories, forums, or documentation.\n- **Weak Secret**: The secret key used to sign the JWT is a weak value, such as a short guessable string such as `security2024`. Attackers can use dictionary attacks, rainbow tables, or other brute-force techniques to find the secret key.\n\n## Example\n\nHere is a valid JWT signed with HS256 algorithm and a robust secret key:\n\n```bash\neyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE1MTYyNDI2MjIsImlhdCI6MTUxNjIzOTAyMiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.ZuwZrXpLRj17vDjOLoOOJ7pr1CN5DnE8Clgn4y-fjNs\n```\n\nThis decoded JWT contains, this parts:\n\n```json\n{\n \"alg\": \"HS256\",\n \"typ\": \"JWT\"\n}\n```\n\n```json\n{\n \"iat\": 1516239022,\n \"exp\": 1516242622,\n \"name\": \"John Doe\",\n \"sub\": \"2cb307ba-bb46-4194-854f-4774046d9c9b\"\n}\n```\n\nThe following JWT is signed with `secret` secret:\n\n```bash\neyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE1MTYyNDI2MjIsImlhdCI6MTUxNjIzOTAyMiwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.gTgBr6lotpAxs4M46PgUXrjhIN5-gYG4HffKSEIB6Ys\n```\n\n## How to test?\n\nIf you want to test only the \"JWT Weak Secret\" vulnerability, you can use the following command:\n\n\n \n```bash\nvulnapi scan curl [url] -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans jwt.weak_secret\n```\n \n \n```bash\necho \"eyJhbGciOiJSUzUxMiI...\" | vulnapi scan openapi [OpenAPI_Path_Or_URL] --scans jwt.weak_secret\n```\n \n \n```bash\nvulnapi scan graphql -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans jwt.weak_secret [url]\n```\n \n\n\nVulnAPI supports scanning against various types of other JWT vulnerabilities as well.\n\n## What is the impact?\n\nThe impact of using a weak secret key to sign a JWT is significant. Attackers can easily find the secret key and modify the token's claims and content without detection. This can lead to unauthorized access, data tampering, and other security risks.\n\n## How to remediate?\n\nEnsure to change the secret key to a strong and unique value. Use a secure random generator to create the secret key and store it securely. Rotate the secret key periodically to mitigate the risk of unauthorized access and data tampering.\n" }, { "path": "docs/vulnerabilities/security-misconfiguration/_meta.yml", "content": "label: Security Misconfiguration\n" }, { "path": "docs/vulnerabilities/security-misconfiguration/graphql-introspection.mdx", "content": "---\ntitle: GraphQL Introspection Enabled\ndescription: GraphQL introspection is a feature that allows clients to query the schema of the server. It can be used to discover the schema and types, but it can also be used by attackers to learn about the server's implementation details and find potential vulnerabilities.\n---\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
SeverityLow
CVEs
Classifications\n CWE-200: Information Exposure\n
OWASP Category\n OWASP API8:2023 Security Misconfiguration\n
\n\nGraphQL introspection is a feature that allows clients to query the schema of the server. It can be used to discover the schema and types, but it can also be used by attackers to learn about the server's implementation details and find potential vulnerabilities.\n\n## What is the impact?\n\nThe potential security impacts of GraphQL introspection are significant and can include:\n* **Information Disclosure**: Attackers can use introspection to learn about the server's implementation details, such as the types, fields, and arguments, which can lead to information disclosure and potential security vulnerabilities.\n* **Schema Enumeration**: Introspection can be used to enumerate the schema and discover hidden or deprecated fields, which can be leveraged to craft targeted attacks or exploit vulnerabilities.\n* **Security Misconfiguration**: Improperly configured introspection can expose sensitive information or internal implementation details, leading to security misconfigurations and potential security risks.\n* **Data Exposure**: Introspection can reveal sensitive data structures, such as database tables, fields, or relationships, which can be exploited to access or manipulate data in unauthorized ways.\n\n## How to test?\n\nIf you want to test only the \"GraphQL Introspection Enabled\" vulnerability, you can use the following command:\n\n```bash\nvulnapi scan graphql [url] --scans graphql.introspection_enabled\n```\n\n## How to remediate?\n\nTo remediate GraphQL introspection vulnerabilities, you can take the following steps:\n* **Disable Introspection**: Disable introspection in production environments to prevent attackers from querying the schema and discovering sensitive information or potential security vulnerabilities.\n* **Limit Access**: Restrict access to introspection queries to authorized users or applications, and ensure that only trusted entities can query the schema and access internal implementation details.\n\n## References\n\n- [GraphQL Introspection](https://graphql.org/learn/introspection/)\n- [PortSwigger - GraphQL Introspection enabled](https://portswigger.net/kb/issues/00200512_graphql-introspection-enabled)\n" }, { "path": "docs/vulnerabilities/security-misconfiguration/http-cookies.mdx", "content": "---\ntitle: HTTP Cookies Misconfiguration\ndescription: Missing or misconfigured cookie security flags expose session tokens to theft via XSS, network interception, and cross-site request forgery.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
Scan IDmisconfiguration.http_cookies
SeverityInfo
CVSS 4.00.0
OWASP Category\n OWASP API8:2023 Security Misconfiguration\n
\n\nCookie security flags protect session tokens and authentication cookies from theft and misuse. Missing or misconfigured flags are individually low-severity, but in combination they significantly increase the risk of session hijacking, XSS-based token theft, and cross-site attacks.\n\n## Checks Performed\n\nVulnAPI's `misconfiguration.http_cookies` scan checks for five issues on every `Set-Cookie` response header:\n\n### `HttpOnly` flag missing (CWE-1004)\n\nWithout `HttpOnly`, JavaScript running on the page (including injected scripts from XSS) can read the cookie value via `document.cookie`.\n\n```\nSet-Cookie: session=abc123 ← vulnerable\nSet-Cookie: session=abc123; HttpOnly ← correct\n```\n\n### `Secure` flag missing (CWE-614)\n\nWithout `Secure`, the cookie is sent over unencrypted HTTP connections, exposing it to network interception (man-in-the-middle attacks).\n\n```\nSet-Cookie: session=abc123 ← vulnerable\nSet-Cookie: session=abc123; Secure ← correct\n```\n\n### `SameSite=None` without restrictions (CWE-1275)\n\n`SameSite=None` allows the cookie to be sent in all cross-site contexts, which can enable CSRF attacks if `Secure` is not also set. Use `SameSite=Strict` or `SameSite=Lax` instead.\n\n```\nSet-Cookie: session=abc123; SameSite=None ← vulnerable\nSet-Cookie: session=abc123; SameSite=Strict; Secure ← correct\n```\n\n### `SameSite` attribute not set (CWE-1275)\n\nWithout a `SameSite` attribute, browsers apply the default policy (Lax in modern browsers, but None in older ones). Explicitly set `SameSite` to avoid relying on browser defaults.\n\n### No expiration (`Expires` / `Max-Age` missing) (CWE-613)\n\nWithout an expiration, the cookie is a session cookie — it expires only when the browser tab closes. Users who do not close their browser may retain session access indefinitely.\n\n```\nSet-Cookie: session=abc123 ← no expiry\nSet-Cookie: session=abc123; Max-Age=3600 ← expires after 1 hour\n```\n\n## How to test?\n\n\n \n```bash\nvulnapi scan curl [url] -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans misconfiguration.http_cookies\n```\n \n \n```bash\necho \"eyJhbGciOiJSUzUxMiI...\" | vulnapi scan openapi [OpenAPI_Path_Or_URL] --scans misconfiguration.http_cookies\n```\n \n \n```bash\nvulnapi scan graphql -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans misconfiguration.http_cookies [url]\n```\n \n\n\nVulnAPI supports scanning against various types of other [vulnerabilities](../) as well.\n\n## What is the impact?\n\nMissing cookie flags individually represent low-severity findings, but in combination they create meaningful attack surface:\n\n- **XSS + missing HttpOnly** → attacker can steal the session token via `document.cookie`\n- **Missing Secure** → token exposed on HTTP (e.g. mixed-content pages, captive portals)\n- **Missing SameSite** → CSRF attacks can use the session cookie cross-origin\n- **No expiration** → long-lived sessions increase the window of opportunity for abuse\n\n## How to remediate?\n\nSet all security flags on cookies that carry session tokens or authentication data:\n\n```http\nSet-Cookie: session=abc123; HttpOnly; Secure; SameSite=Strict; Max-Age=3600; Path=/\n```\n\n| Flag | Value | Purpose |\n|------|-------|---------|\n| `HttpOnly` | (flag) | Prevent JavaScript access |\n| `Secure` | (flag) | HTTPS only |\n| `SameSite` | `Strict` or `Lax` | Restrict cross-site sending |\n| `Max-Age` | seconds | Set session lifetime |\n| `Path` | `/` or specific path | Restrict cookie scope |\n\nFor single-page applications that need cross-origin cookies (e.g. separate API and frontend domains), use `SameSite=None; Secure` together with CSRF tokens.\n\n## References\n\n- [OWASP Secure Cookie Attributes](https://owasp.org/www-community/controls/SecureCookieAttribute)\n- [MDN Set-Cookie](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie)\n" }, { "path": "docs/vulnerabilities/security-misconfiguration/http-method-allow-override.mdx", "content": "---\ntitle: HTTP Method Override Enabled\ndescription: HTTP Method Override is a feature that allows clients to override the default HTTP method used in a request. This feature can be exploited by attackers to bypass security controls and perform unauthorized actions on the server.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
SeverityInfo - High
CVEs\n \n
Classifications\n CWE-287: Improper Authentication\n
OWASP Category\n OWASP API8:2023 Security Misconfiguration\n
\n\nHTTP Method Override is a feature that allows clients to override the default HTTP method used in a request. This feature is commonly used to perform actions on the server using HTTP methods other than GET and POST, such as PUT, DELETE, PATCH, etc. The HTTP Method Override feature is typically implemented using custom headers or query parameters that specify the desired HTTP method to be used.\n\nThis feature can be exploited by attackers to bypass security controls and perform unauthorized actions on the server.\n\n## What is the impact?\n\nAttackers can exploit this feature to bypass security controls and perform unauthorized actions on the server. Some of the common attacks that can be performed using HTTP Method Override include:\n- CSRF attacks\n- Bypassing authentication\n- Bypassing access controls\n\n## How to test?\n\nIf you want to test only the \"HTTP Method Allow Override Enabled\" issues, you can use the following command:\n\n\n \n```bash\nvulnapi scan curl [url] --scans misconfiguration.http_method_override\n```\n \n \n```bash\nvulnapi scan openapi [OpenAPI_Path_Or_URL] --scans misconfiguration.http_method_override\n```\n \n \n```bash\nvulnapi scan graphql --scans misconfiguration.http_method_override [url]\n```\n \n\n\n## How to remediate?\n\nTo remediate this issue, you should disable the HTTP Method Override feature on the API or intermediate proxy. You can do this by configuring the server to only accept the expected HTTP methods (GET, POST, PUT, DELETE, etc.) and reject any other methods that are not explicitly allowed.\n\nIf you can not disable the HTTP Method Override behavior, ensure you implement proper access controls and validation checks to prevent unauthorized actions and that controls are not impacted by the method overriden. To do so, the usual way is to perform the checks before the method override is applied.\n\n## References\n\n- [X-HTTP-Method](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-odata/bdbabfa6-8c4a-4741-85a9-8d93ffd66c41)\n- [HTTP Method Override Blog Post](https://www.sidechannel.blog/en/http-method-override-what-it-is-and-how-a-pentester-can-use-it/)\n" }, { "path": "docs/vulnerabilities/security-misconfiguration/http-trace-track.mdx", "content": "---\ntitle: HTTP TRACE and TRACK Methods Enabled\ndescription: HTTP TRACE and TRACK methods echo back the incoming request, potentially exposing authorization headers to attackers.\n---\n\nimport { Tabs, TabItem } from '@/components/docs'\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
Scan IDsmisconfiguration.http_trace, misconfiguration.http_track
SeverityInfo
Classifications\n CWE-489: Active Debug Code\n
OWASP Category\n OWASP API8:2023 Security Misconfiguration\n
\n\nThe HTTP `TRACE` and `TRACK` methods are debugging methods that instruct the web server to echo back the complete incoming request — including all headers — as the response body. This means any `Authorization`, `Cookie`, or custom header sent with the request is returned verbatim in the response.\n\nIn a Cross-Site Tracing (XST) attack, a browser-based script that can issue TRACE requests could use this echo behaviour to steal `HttpOnly` cookies or authorization headers that would otherwise be inaccessible to JavaScript. While modern browser security policies (CSP, CORS, `SameSite`) mitigate many XST paths, leaving TRACE/TRACK enabled violates the principle of least privilege and may expose sensitive headers in logs, proxies, or less-protected environments.\n\n## Example\n\n```http\nTRACE /api/users HTTP/1.1\nHost: api.example.com\nAuthorization: Bearer eyJhbGciOiJSUzI1NiI...\nX-Custom-Internal: secret\n\nHTTP/1.1 200 OK\nContent-Type: message/http\n\nTRACE /api/users HTTP/1.1\nHost: api.example.com\nAuthorization: Bearer eyJhbGciOiJSUzI1NiI...\nX-Custom-Internal: secret\n```\n\nThe full request — including `Authorization` — is reflected back in the response body.\n\n## How to test?\n\n\n \n```bash\nvulnapi scan curl [url] -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans misconfiguration.http_trace --scans misconfiguration.http_track\n```\n \n \n```bash\necho \"eyJhbGciOiJSUzUxMiI...\" | vulnapi scan openapi [OpenAPI_Path_Or_URL] --scans misconfiguration.http_trace --scans misconfiguration.http_track\n```\n \n \n```bash\nvulnapi scan graphql -H \"Authorization: Bearer eyJhbGciOiJSUzUxMiI...\" --scans misconfiguration.http_trace --scans misconfiguration.http_track [url]\n```\n \n\n\nVulnAPI supports scanning against various types of other [vulnerabilities](../) as well.\n\n## What is the impact?\n\n- **Header exposure**: `Authorization`, `Cookie`, and custom internal headers sent with a TRACE request are reflected in the response body, making them readable by any party that can observe the response (intermediate proxies, logs, browser scripts under certain conditions).\n- **Debug information leakage**: internal headers (`X-Internal-User`, `X-Request-ID`, etc.) that would not normally be visible to clients may be exposed.\n- **Cross-Site Tracing (XST)**: in older browser environments or when combined with other vulnerabilities, TRACE can be used to steal credentials from browser-based clients.\n\n## How to remediate?\n\nDisable TRACE and TRACK at the web server level.\n\n**Nginx** — restrict to allowed methods only:\n\n```nginx\nlocation / {\n limit_except GET POST PUT DELETE PATCH OPTIONS {\n deny all;\n }\n}\n```\n\n**Apache** — disable TRACE globally:\n\n```apache\nTraceEnable Off\n```\n\n**Express (Node.js)** — reject TRACE/TRACK in middleware:\n\n```js\napp.use((req, res, next) => {\n if (req.method === 'TRACE' || req.method === 'TRACK') {\n return res.status(405).send('Method Not Allowed');\n }\n next();\n});\n```\n\nVerify the fix by checking that TRACE returns a `405 Method Not Allowed` response:\n\n```bash\ncurl -X TRACE https://api.example.com/ -i\n# Expected: HTTP/1.1 405 Method Not Allowed\n```\n\n## References\n\n- [OWASP Testing for HTTP Methods](https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/06-Test_HTTP_Methods)\n- [CWE-489: Active Debug Code](https://cwe.mitre.org/data/definitions/489.html)\n" }, { "path": "docs/vulnerabilities/security-misconfiguration/tls.mdx", "content": "---\ntitle: TLS Missing or Misconfigured\ndescription: TLS (Transport Layer Security) is a protocol that provides secure communication. Misconfigured or missing TLS for an API can expose sensitive data to attackers.\n---\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n
SeverityInfo
CVEs\n \n
OWASP Category\n OWASP API8:2023 Security Misconfiguration\n
\n\n## What is TLS?\n\nTransport Layer Security (TLS) is a protocol that provides secure communication over a computer network. It is widely used to secure web traffic, email, and other types of communication. TLS encrypts the data transmitted between two parties, ensuring that it cannot be read or tampered with by attackers. In the context of APIs, TLS is used to secure the communication between clients and servers.\n\n## What is the impact?\n\nIf TLS is missing or misconfigured for an API, sensitive data transmitted between clients and servers can be exposed to attackers. This can lead to data breaches, unauthorized access to sensitive information, and other security risks. Attackers can intercept and read the data transmitted over the network, potentially gaining access to sensitive information such as user credentials, personal data, and other confidential information.\n\n## Vulnerabilities\n\n### Missing TLS\n\nThis is the easiest misconfiguration to check for. If an API is not using TLS, you can easily tell by looking at the URL. If the URL starts with `http://` instead of `https://`, then the API is not using TLS.\n\n### POODLE (Padding Oracle On Downgraded Legacy Encryption)\n\nPOODLE is a vulnerability that affects the SSLv3 protocol. If an API supports SSLv3, it is vulnerable to POODLE attacks.\n\n### CRIME (Compression Ratio Info-leak Made Easy)\n\nCRIME is a vulnerability that affects TLS and SPDY that uses data compression. If an API supports data compression and TLS, it is vulnerable to CRIME attacks that can leak cookies.\n\n### Heartbleed\n\nHeartbleed is a vulnerability in the OpenSSL library that allows attackers to read sensitive data from the server's memory. If an API uses a vulnerable version of OpenSSL, it is susceptible to Heartbleed attacks.\n\n## How to test?\n\nUse a tool like [SSL Labs](https://www.ssllabs.com/ssltest/) to test the TLS configuration of an API. The tool will check for common TLS vulnerabilities and provide a grade for the API's TLS configuration.\n\n## How to remediate?\n\nFirst of all, if you don't add TLS yet, you should add it to your API. You can use [Let's Encrypt](https://letsencrypt.org/) to get a free TLS certificate for your API or use your hosting provider or cloud provider to get a certificate.\n\nNow, if you have TLS enabled and you detected one of the vulnerabilities mentioned above, you should update your TLS configuration to mitigate the vulnerability. For example, if your API supports SSLv3, you should disable it and only support TLS 1.2 or higher.\n\n## References\n\n- [Let's Encrypt](https://letsencrypt.org/)\n- [SSL Labs](https://www.ssllabs.com/ssltest/)\n- [Breach Attack](https://www.breachattack.com/)\n" }, { "path": "docs/vulnerabilities.mdx", "content": "---\ntitle: API Vulnerabilities\ndescription: List of all vulnerabilities detected by VulnAPI.\nsidebar:\n order: 100\n---\n\n✅ = automated scan available\n\n| Name | OWASP | Severity | Automated Scan |\n|-------------------------------------------------------------------------------------------------------|---------------------------------------------|:--------:|:--------------:|\n| Broken Object Level Authorization (BOLA) | API1:2023 Broken Object Level Authorization | Medium | |\n| Private Field Access | API1:2023 Broken Object Level Authorization | Medium | |\n| Mass Assignment | API1:2023 Broken Object Level Authorization | Medium | |\n| [Authentication Bypass](./vulnerabilities/broken-authentication/authentication-bypass) | API2:2023 Broken Authentication | High | ✅ |\n| [JWT `none` algorithm](./vulnerabilities/broken-authentication/jwt-alg-none) | API2:2023 Broken Authentication | High | ✅ |\n| [JWT blank secret](./vulnerabilities/broken-authentication/jwt-blank-secret) | API2:2023 Broken Authentication | High | ✅ |\n| [JWT weak secret](./vulnerabilities/broken-authentication/jwt-weak-secret) | API2:2023 Broken Authentication | High | ✅ |\n| [JWT Audience cross service relay attack](./vulnerabilities/broken-authentication/jwt-cross-service-relay-attack) | API2:2023 Broken Authentication | High | |\n| [JWT Null Signature](./vulnerabilities/broken-authentication/jwt-null-signature) | API2:2023 Broken Authentication | High | ✅ |\n| [JWT KID Header Injection](./vulnerabilities/broken-authentication/jwt-kid-injection) | API2:2023 Broken Authentication | High | ✅ |\n| JWT Algorithm Confusion | API2:2023 Broken Authentication | High | ✅ |\n| [JWT Signature not verified](./vulnerabilities/broken-authentication/jwt-not-verified) | API2:2023 Broken Authentication | High | ✅ |\n| JWT Expired | API2:2023 Broken Authentication | High | |\n| Discoverable OpenAPI | API7:2023 Server Side Request Forgery | Info | ✅ |\n| Discoverable GraphQL Endpoint | API7:2023 Server Side Request Forgery | Info | ✅ |\n| [GraphQL Introspection Enabled](./vulnerabilities/security-misconfiguration/graphql-introspection) | API8:2023 Security Misconfiguration | Info | ✅ |\n| Secrets Leak | API8:2023 Security Misconfiguration | High | |\n| Directory Listing | API8:2023 Security Misconfiguration | Medium | |\n| Private IP Disclosure | API8:2023 Security Misconfiguration | Low | |\n| [HTTP Cookies Misconfiguration](./vulnerabilities/security-misconfiguration/http-cookies) | API8:2023 Security Misconfiguration | Info | ✅ |\n| No CORS Headers | API8:2023 Security Misconfiguration | Info | ✅ |\n| Permissive CORS Headers | API8:2023 Security Misconfiguration | Info | ✅ |\n| [HTTP Method Override Enabled](./vulnerabilities/security-misconfiguration/http-method-allow-override) | API8:2023 Security Misconfiguration | Info - High | ✅ |\n| X-Content-Type-Options Header Not Set | API8:2023 Security Misconfiguration | Info | ✅ |\n| X-Frame-Options Header Not Set | API8:2023 Security Misconfiguration | Info | ✅ |\n| CSP Header Not Set | API8:2023 Security Misconfiguration | Info | ✅ |\n| CSP Frame Ancestors Not Set | API8:2023 Security Misconfiguration | Info | ✅ |\n| HSTS Header Not Set | API8:2023 Security Misconfiguration | Info | ✅ |\n| [HTTP TRACE/TRACK Methods Enabled](./vulnerabilities/security-misconfiguration/http-trace-track) | API8:2023 Security Misconfiguration | Info | ✅ |\n| Server Signature Leak | API8:2023 Security Misconfiguration | Info | ✅ |\n| SSL Certificate Not Trusted | API8:2023 Security Misconfiguration | Medium | |\n| SSL Not Enforced | API8:2023 Security Misconfiguration | Medium | |\n| Directory Traversal | API10:2023 Unsafe Consumption of APIs | High | |\n" }, { "path": "go.mod", "content": "module github.com/cerberauth/vulnapi\n\ngo 1.26.0\n\nrequire (\n\tgithub.com/brianvoe/gofakeit/v7 v7.14.1\n\tgithub.com/cerberauth/cobracurl v0.4.1\n\tgithub.com/cerberauth/jwtop v0.3.1\n\tgithub.com/cerberauth/x v0.0.0-20260328225930-85a91f5d7ee2\n\tgithub.com/fatih/color v1.19.0\n\tgithub.com/getkin/kin-openapi v0.135.0\n\tgithub.com/gin-contrib/requestid v1.0.6\n\tgithub.com/gin-gonic/gin v1.12.0\n\tgithub.com/golang-jwt/jwt/v5 v5.3.1\n\tgithub.com/google/uuid v1.6.0\n\tgithub.com/jarcoal/httpmock v1.3.1\n\tgithub.com/olekukonko/tablewriter v1.1.4\n\tgithub.com/projectdiscovery/wappalyzergo v0.2.76\n\tgithub.com/schollz/progressbar/v3 v3.19.0\n\tgithub.com/spf13/cobra v1.10.2\n\tgithub.com/std-uritemplate/std-uritemplate/go/v2 v2.0.8\n\tgithub.com/stretchr/testify v1.11.1\n\tgo.opentelemetry.io/otel v1.43.0\n\tgo.opentelemetry.io/otel/metric v1.43.0\n\tgolang.org/x/text v0.36.0\n\tgolang.org/x/time v0.15.0\n\tgopkg.in/yaml.v3 v3.0.1\n)\n\nrequire (\n\tgithub.com/bytedance/gopkg v0.1.4 // indirect\n\tgithub.com/bytedance/sonic v1.15.0 // indirect\n\tgithub.com/bytedance/sonic/loader v0.5.1 // indirect\n\tgithub.com/cenkalti/backoff/v5 v5.0.3 // indirect\n\tgithub.com/cespare/xxhash/v2 v2.3.0 // indirect\n\tgithub.com/clipperhouse/displaywidth v0.11.0 // indirect\n\tgithub.com/clipperhouse/uax29/v2 v2.7.0 // indirect\n\tgithub.com/cloudwego/base64x v0.1.6 // indirect\n\tgithub.com/davecgh/go-spew v1.1.1 // indirect\n\tgithub.com/gabriel-vasile/mimetype v1.4.13 // indirect\n\tgithub.com/gin-contrib/sse v1.1.1 // indirect\n\tgithub.com/go-logr/logr v1.4.3 // indirect\n\tgithub.com/go-logr/stdr v1.2.2 // indirect\n\tgithub.com/go-openapi/jsonpointer v0.22.5 // indirect\n\tgithub.com/go-openapi/swag/jsonname v0.25.5 // indirect\n\tgithub.com/go-playground/locales v0.14.1 // indirect\n\tgithub.com/go-playground/universal-translator v0.18.1 // indirect\n\tgithub.com/go-playground/validator/v10 v10.30.2 // indirect\n\tgithub.com/goccy/go-json v0.10.6 // indirect\n\tgithub.com/goccy/go-yaml v1.19.2 // indirect\n\tgithub.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 // indirect\n\tgithub.com/iancoleman/orderedmap v0.3.0 // indirect\n\tgithub.com/inconshreveable/mousetrap v1.1.0 // indirect\n\tgithub.com/josharian/intern v1.0.0 // indirect\n\tgithub.com/json-iterator/go v1.1.12 // indirect\n\tgithub.com/klauspost/cpuid/v2 v2.3.0 // indirect\n\tgithub.com/leodido/go-urn v1.4.0 // indirect\n\tgithub.com/mailru/easyjson v0.9.2 // indirect\n\tgithub.com/mattn/go-colorable v0.1.14 // indirect\n\tgithub.com/mattn/go-isatty v0.0.21 // indirect\n\tgithub.com/mattn/go-runewidth v0.0.23 // indirect\n\tgithub.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db // indirect\n\tgithub.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect\n\tgithub.com/modern-go/reflect2 v1.0.2 // indirect\n\tgithub.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 // indirect\n\tgithub.com/oasdiff/yaml v0.0.9 // indirect\n\tgithub.com/oasdiff/yaml3 v0.0.9 // indirect\n\tgithub.com/olekukonko/cat v0.0.0-20250911104152-50322a0618f6 // indirect\n\tgithub.com/olekukonko/errors v1.2.0 // indirect\n\tgithub.com/olekukonko/ll v0.1.8 // indirect\n\tgithub.com/pelletier/go-toml/v2 v2.3.0 // indirect\n\tgithub.com/perimeterx/marshmallow v1.1.5 // indirect\n\tgithub.com/pmezard/go-difflib v1.0.0 // indirect\n\tgithub.com/quic-go/qpack v0.6.0 // indirect\n\tgithub.com/quic-go/quic-go v0.59.0 // indirect\n\tgithub.com/rivo/uniseg v0.4.7 // indirect\n\tgithub.com/spf13/pflag v1.0.10 // indirect\n\tgithub.com/twitchyliquid64/golang-asm v0.15.1 // indirect\n\tgithub.com/ugorji/go/codec v1.3.1 // indirect\n\tgithub.com/woodsbury/decimal128 v1.4.0 // indirect\n\tgo.mongodb.org/mongo-driver/v2 v2.5.0 // indirect\n\tgo.opentelemetry.io/auto/sdk v1.2.1 // indirect\n\tgo.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 // indirect\n\tgo.opentelemetry.io/otel/sdk v1.43.0 // indirect\n\tgo.opentelemetry.io/otel/sdk/metric v1.43.0 // indirect\n\tgo.opentelemetry.io/otel/trace v1.43.0 // indirect\n\tgo.opentelemetry.io/proto/otlp v1.10.0 // indirect\n\tgolang.org/x/arch v0.26.0 // indirect\n\tgolang.org/x/crypto v0.50.0 // indirect\n\tgolang.org/x/net v0.53.0 // indirect\n\tgolang.org/x/sys v0.43.0 // indirect\n\tgolang.org/x/term v0.42.0 // indirect\n\tgoogle.golang.org/genproto/googleapis/api v0.0.0-20260413175733-85fdc51ac911 // indirect\n\tgoogle.golang.org/genproto/googleapis/rpc v0.0.0-20260413175733-85fdc51ac911 // indirect\n\tgoogle.golang.org/grpc v1.80.0 // indirect\n\tgoogle.golang.org/protobuf v1.36.11 // indirect\n)\n" }, { "path": "go.sum", "content": "github.com/brianvoe/gofakeit/v7 v7.14.1 h1:a7fe3fonbj0cW3wgl5VwIKfZtiH9C3cLnwcIXWT7sow=\ngithub.com/brianvoe/gofakeit/v7 v7.14.1/go.mod h1:QXuPeBw164PJCzCUZVmgpgHJ3Llj49jSLVkKPMtxtxA=\ngithub.com/bytedance/gopkg v0.1.4 h1:oZnQwnX82KAIWb7033bEwtxvTqXcYMxDBaQxo5JJHWM=\ngithub.com/bytedance/gopkg v0.1.4/go.mod h1:v1zWfPm21Fb+OsyXN2VAHdL6TBb2L88anLQgdyje6R4=\ngithub.com/bytedance/sonic v1.15.0 h1:/PXeWFaR5ElNcVE84U0dOHjiMHQOwNIx3K4ymzh/uSE=\ngithub.com/bytedance/sonic v1.15.0/go.mod h1:tFkWrPz0/CUCLEF4ri4UkHekCIcdnkqXw9VduqpJh0k=\ngithub.com/bytedance/sonic/loader v0.5.1 h1:Ygpfa9zwRCCKSlrp5bBP/b/Xzc3VxsAW+5NIYXrOOpI=\ngithub.com/bytedance/sonic/loader v0.5.1/go.mod h1:AR4NYCk5DdzZizZ5djGqQ92eEhCCcdf5x77udYiSJRo=\ngithub.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM=\ngithub.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw=\ngithub.com/cerberauth/cobracurl v0.4.0 h1:jNmfycrZNYrqCwvBtJQRpba+qSEQF8/l1mJXVeLZFlc=\ngithub.com/cerberauth/cobracurl v0.4.0/go.mod h1:HcsHr+1cbYf+8Yav+zdsh1whBSn8fvJ6rmqcU0HiaC4=\ngithub.com/cerberauth/cobracurl v0.4.1 h1:1pSMCUcRRv5ZpW+Wy3jomSfwMPeuu71AGeX6PRsBu00=\ngithub.com/cerberauth/cobracurl v0.4.1/go.mod h1:HcsHr+1cbYf+8Yav+zdsh1whBSn8fvJ6rmqcU0HiaC4=\ngithub.com/cerberauth/jwtop v0.3.1 h1:iW710gcgCwY7qP0n1mm42fqRvxCvVpcdmxsd8hvx1i8=\ngithub.com/cerberauth/jwtop v0.3.1/go.mod h1:9nr9q8lqrZD8Y/DXbxE0c8D9tiZDcbpj3FA4LMq9Zcg=\ngithub.com/cerberauth/x v0.0.0-20260328225930-85a91f5d7ee2 h1:VPeyFUqhYx4Uv0S1x4BxRttNJE1B5cMsTN6cwSuY0DU=\ngithub.com/cerberauth/x v0.0.0-20260328225930-85a91f5d7ee2/go.mod h1:OZVZeAmCmWPnXSrX08Y1jp11r7HG+Xn7SnBx5yARrow=\ngithub.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=\ngithub.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=\ngithub.com/chengxilo/virtualterm v1.0.4 h1:Z6IpERbRVlfB8WkOmtbHiDbBANU7cimRIof7mk9/PwM=\ngithub.com/chengxilo/virtualterm v1.0.4/go.mod h1:DyxxBZz/x1iqJjFxTFcr6/x+jSpqN0iwWCOK1q10rlY=\ngithub.com/clipperhouse/displaywidth v0.11.0 h1:lBc6kY44VFw+TDx4I8opi/EtL9m20WSEFgwIwO+UVM8=\ngithub.com/clipperhouse/displaywidth v0.11.0/go.mod h1:bkrFNkf81G8HyVqmKGxsPufD3JhNl3dSqnGhOoSD/o0=\ngithub.com/clipperhouse/uax29/v2 v2.7.0 h1:+gs4oBZ2gPfVrKPthwbMzWZDaAFPGYK72F0NJv2v7Vk=\ngithub.com/clipperhouse/uax29/v2 v2.7.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=\ngithub.com/cloudwego/base64x v0.1.6 h1:t11wG9AECkCDk5fMSoxmufanudBtJ+/HemLstXDLI2M=\ngithub.com/cloudwego/base64x v0.1.6/go.mod h1:OFcloc187FXDaYHvrNIjxSe8ncn0OOM8gEHfghB2IPU=\ngithub.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=\ngithub.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=\ngithub.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=\ngithub.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=\ngithub.com/fatih/color v1.19.0 h1:Zp3PiM21/9Ld6FzSKyL5c/BULoe/ONr9KlbYVOfG8+w=\ngithub.com/fatih/color v1.19.0/go.mod h1:zNk67I0ZUT1bEGsSGyCZYZNrHuTkJJB+r6Q9VuMi0LE=\ngithub.com/gabriel-vasile/mimetype v1.4.13 h1:46nXokslUBsAJE/wMsp5gtO500a4F3Nkz9Ufpk2AcUM=\ngithub.com/gabriel-vasile/mimetype v1.4.13/go.mod h1:d+9Oxyo1wTzWdyVUPMmXFvp4F9tea18J8ufA774AB3s=\ngithub.com/getkin/kin-openapi v0.135.0 h1:751SjYfbiwqukYuVjwYEIKNfrSwS5YpA7DZnKSwQgtg=\ngithub.com/getkin/kin-openapi v0.135.0/go.mod h1:6dd5FJl6RdX4usBtFBaQhk9q62Yb2J0Mk5IhUO/QqFI=\ngithub.com/gin-contrib/requestid v1.0.6 h1:Baq5z+8cOgXIY/4TcYpIp0JLIESO/wzF2+tz3wpGXDA=\ngithub.com/gin-contrib/requestid v1.0.6/go.mod h1:NfbC1T2AI4CGD1IL3tf7KO/rmPurOtmiWPW1xvLF+4U=\ngithub.com/gin-contrib/sse v1.1.1 h1:uGYpNwTacv5R68bSGMapo62iLTRa9l5zxGCps4hK6ko=\ngithub.com/gin-contrib/sse v1.1.1/go.mod h1:QXzuVkA0YO7o/gun03UI1Q+FTI8ZV/n5t03kIQAI89s=\ngithub.com/gin-gonic/gin v1.12.0 h1:b3YAbrZtnf8N//yjKeU2+MQsh2mY5htkZidOM7O0wG8=\ngithub.com/gin-gonic/gin v1.12.0/go.mod h1:VxccKfsSllpKshkBWgVgRniFFAzFb9csfngsqANjnLc=\ngithub.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=\ngithub.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=\ngithub.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=\ngithub.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=\ngithub.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=\ngithub.com/go-openapi/jsonpointer v0.22.5 h1:8on/0Yp4uTb9f4XvTrM2+1CPrV05QPZXu+rvu2o9jcA=\ngithub.com/go-openapi/jsonpointer v0.22.5/go.mod h1:gyUR3sCvGSWchA2sUBJGluYMbe1zazrYWIkWPjjMUY0=\ngithub.com/go-openapi/swag/jsonname v0.25.5 h1:8p150i44rv/Drip4vWI3kGi9+4W9TdI3US3uUYSFhSo=\ngithub.com/go-openapi/swag/jsonname v0.25.5/go.mod h1:jNqqikyiAK56uS7n8sLkdaNY/uq6+D2m2LANat09pKU=\ngithub.com/go-openapi/testify/v2 v2.4.0 h1:8nsPrHVCWkQ4p8h1EsRVymA2XABB4OT40gcvAu+voFM=\ngithub.com/go-openapi/testify/v2 v2.4.0/go.mod h1:HCPmvFFnheKK2BuwSA0TbbdxJ3I16pjwMkYkP4Ywn54=\ngithub.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s=\ngithub.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4=\ngithub.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA=\ngithub.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY=\ngithub.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY=\ngithub.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=\ngithub.com/go-playground/validator/v10 v10.30.2 h1:JiFIMtSSHb2/XBUbWM4i/MpeQm9ZK2xqPNk8vgvu5JQ=\ngithub.com/go-playground/validator/v10 v10.30.2/go.mod h1:mAf2pIOVXjTEBrwUMGKkCWKKPs9NheYGabeB04txQSc=\ngithub.com/go-test/deep v1.0.8 h1:TDsG77qcSprGbC6vTN8OuXp5g+J+b5Pcguhf7Zt61VM=\ngithub.com/go-test/deep v1.0.8/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=\ngithub.com/goccy/go-json v0.10.6 h1:p8HrPJzOakx/mn/bQtjgNjdTcN+/S6FcG2CTtQOrHVU=\ngithub.com/goccy/go-json v0.10.6/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M=\ngithub.com/goccy/go-yaml v1.19.2 h1:PmFC1S6h8ljIz6gMRBopkjP1TVT7xuwrButHID66PoM=\ngithub.com/goccy/go-yaml v1.19.2/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA=\ngithub.com/golang-jwt/jwt/v5 v5.3.1 h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY=\ngithub.com/golang-jwt/jwt/v5 v5.3.1/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=\ngithub.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=\ngithub.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=\ngithub.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=\ngithub.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=\ngithub.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=\ngithub.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=\ngithub.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=\ngithub.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 h1:HWRh5R2+9EifMyIHV7ZV+MIZqgz+PMpZ14Jynv3O2Zs=\ngithub.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0/go.mod h1:JfhWUomR1baixubs02l85lZYYOm7LV6om4ceouMv45c=\ngithub.com/iancoleman/orderedmap v0.3.0 h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=\ngithub.com/iancoleman/orderedmap v0.3.0/go.mod h1:XuLcCUkdL5owUCQeF2Ue9uuw1EptkJDkXXS7VoV7XGE=\ngithub.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=\ngithub.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=\ngithub.com/jarcoal/httpmock v1.3.1 h1:iUx3whfZWVf3jT01hQTO/Eo5sAYtB2/rqaUuOtpInww=\ngithub.com/jarcoal/httpmock v1.3.1/go.mod h1:3yb8rc4BI7TCBhFY8ng0gjuLKJNquuDNiPaZjnENuYg=\ngithub.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=\ngithub.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=\ngithub.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=\ngithub.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=\ngithub.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y=\ngithub.com/klauspost/cpuid/v2 v2.3.0/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0=\ngithub.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=\ngithub.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=\ngithub.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=\ngithub.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=\ngithub.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ=\ngithub.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI=\ngithub.com/mailru/easyjson v0.9.2 h1:dX8U45hQsZpxd80nLvDGihsQ/OxlvTkVUXH2r/8cb2M=\ngithub.com/mailru/easyjson v0.9.2/go.mod h1:1+xMtQp2MRNVL/V1bOzuP3aP8VNwRW55fQUto+XFtTU=\ngithub.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=\ngithub.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=\ngithub.com/mattn/go-isatty v0.0.21 h1:xYae+lCNBP7QuW4PUnNG61ffM4hVIfm+zUzDuSzYLGs=\ngithub.com/mattn/go-isatty v0.0.21/go.mod h1:ZXfXG4SQHsB/w3ZeOYbR0PrPwLy+n6xiMrJlRFqopa4=\ngithub.com/mattn/go-runewidth v0.0.23 h1:7ykA0T0jkPpzSvMS5i9uoNn2Xy3R383f9HDx3RybWcw=\ngithub.com/mattn/go-runewidth v0.0.23/go.mod h1:XBkDxAl56ILZc9knddidhrOlY5R/pDhgLpndooCuJAs=\ngithub.com/maxatome/go-testdeep v1.12.0 h1:Ql7Go8Tg0C1D/uMMX59LAoYK7LffeJQ6X2T04nTH68g=\ngithub.com/maxatome/go-testdeep v1.12.0/go.mod h1:lPZc/HAcJMP92l7yI6TRz1aZN5URwUBUAfUNvrclaNM=\ngithub.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db h1:62I3jR2EmQ4l5rM/4FEfDWcRD+abF5XlKShorW5LRoQ=\ngithub.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db/go.mod h1:l0dey0ia/Uv7NcFFVbCLtqEBQbrT4OCwCSKTEv6enCw=\ngithub.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=\ngithub.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=\ngithub.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=\ngithub.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=\ngithub.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=\ngithub.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 h1:RWengNIwukTxcDr9M+97sNutRR1RKhG96O6jWumTTnw=\ngithub.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826/go.mod h1:TaXosZuwdSHYgviHp1DAtfrULt5eUgsSMsZf+YrPgl8=\ngithub.com/oasdiff/yaml v0.0.9 h1:zQOvd2UKoozsSsAknnWoDJlSK4lC0mpmjfDsfqNwX48=\ngithub.com/oasdiff/yaml v0.0.9/go.mod h1:8lvhgJG4xiKPj3HN5lDow4jZHPlx1i7dIwzkdAo6oAM=\ngithub.com/oasdiff/yaml3 v0.0.9 h1:rWPrKccrdUm8J0F3sGuU+fuh9+1K/RdJlWF7O/9yw2g=\ngithub.com/oasdiff/yaml3 v0.0.9/go.mod h1:y5+oSEHCPT/DGrS++Wc/479ERge0zTFxaF8PbGKcg2o=\ngithub.com/olekukonko/cat v0.0.0-20250911104152-50322a0618f6 h1:zrbMGy9YXpIeTnGj4EljqMiZsIcE09mmF8XsD5AYOJc=\ngithub.com/olekukonko/cat v0.0.0-20250911104152-50322a0618f6/go.mod h1:rEKTHC9roVVicUIfZK7DYrdIoM0EOr8mK1Hj5s3JjH0=\ngithub.com/olekukonko/errors v1.2.0 h1:10Zcn4GeV59t/EGqJc8fUjtFT/FuUh5bTMzZ1XwmCRo=\ngithub.com/olekukonko/errors v1.2.0/go.mod h1:ppzxA5jBKcO1vIpCXQ9ZqgDh8iwODz6OXIGKU8r5m4Y=\ngithub.com/olekukonko/ll v0.1.8 h1:ysHCJRGHYKzmBSdz9w5AySztx7lG8SQY+naTGYUbsz8=\ngithub.com/olekukonko/ll v0.1.8/go.mod h1:RPRC6UcscfFZgjo1nulkfMH5IM0QAYim0LfnMvUuozw=\ngithub.com/olekukonko/tablewriter v1.1.4 h1:ORUMI3dXbMnRlRggJX3+q7OzQFDdvgbN9nVWj1drm6I=\ngithub.com/olekukonko/tablewriter v1.1.4/go.mod h1:+kedxuyTtgoZLwif3P1Em4hARJs+mVnzKxmsCL/C5RY=\ngithub.com/pelletier/go-toml/v2 v2.3.0 h1:k59bC/lIZREW0/iVaQR8nDHxVq8OVlIzYCOJf421CaM=\ngithub.com/pelletier/go-toml/v2 v2.3.0/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY=\ngithub.com/perimeterx/marshmallow v1.1.5 h1:a2LALqQ1BlHM8PZblsDdidgv1mWi1DgC2UmX50IvK2s=\ngithub.com/perimeterx/marshmallow v1.1.5/go.mod h1:dsXbUu8CRzfYP5a87xpp0xq9S3u0Vchtcl8we9tYaXw=\ngithub.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=\ngithub.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=\ngithub.com/projectdiscovery/wappalyzergo v0.2.76 h1:6zQt6Jmi/hIwD8InWswkk1yhJGWaVEAEzshTGiTGbeM=\ngithub.com/projectdiscovery/wappalyzergo v0.2.76/go.mod h1:hRsnKNleH693FFJsBOD5NMUDbxw/Q94f0Oq2OV04Q6M=\ngithub.com/quic-go/qpack v0.6.0 h1:g7W+BMYynC1LbYLSqRt8PBg5Tgwxn214ZZR34VIOjz8=\ngithub.com/quic-go/qpack v0.6.0/go.mod h1:lUpLKChi8njB4ty2bFLX2x4gzDqXwUpaO1DP9qMDZII=\ngithub.com/quic-go/quic-go v0.59.0 h1:OLJkp1Mlm/aS7dpKgTc6cnpynnD2Xg7C1pwL6vy/SAw=\ngithub.com/quic-go/quic-go v0.59.0/go.mod h1:upnsH4Ju1YkqpLXC305eW3yDZ4NfnNbmQRCMWS58IKU=\ngithub.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=\ngithub.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=\ngithub.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=\ngithub.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=\ngithub.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=\ngithub.com/schollz/progressbar/v3 v3.19.0 h1:Ea18xuIRQXLAUidVDox3AbwfUhD0/1IvohyTutOIFoc=\ngithub.com/schollz/progressbar/v3 v3.19.0/go.mod h1:IsO3lpbaGuzh8zIMzgY3+J8l4C8GjO0Y9S69eFvNsec=\ngithub.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU=\ngithub.com/spf13/cobra v1.10.2/go.mod h1:7C1pvHqHw5A4vrJfjNwvOdzYu0Gml16OCs2GRiTUUS4=\ngithub.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=\ngithub.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=\ngithub.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=\ngithub.com/std-uritemplate/std-uritemplate/go/v2 v2.0.8 h1:gMBdYMTHt2mmTdXW8YfvRjRUZ0GhyGV+IqSH9H15bGw=\ngithub.com/std-uritemplate/std-uritemplate/go/v2 v2.0.8/go.mod h1:Z5KcoM0YLC7INlNhEezeIZ0TZNYf7WSNO0Lvah4DSeQ=\ngithub.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=\ngithub.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=\ngithub.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=\ngithub.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=\ngithub.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=\ngithub.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=\ngithub.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=\ngithub.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=\ngithub.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=\ngithub.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=\ngithub.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=\ngithub.com/twitchyliquid64/golang-asm v0.15.1 h1:SU5vSMR7hnwNxj24w34ZyCi/FmDZTkS4MhqMhdFk5YI=\ngithub.com/twitchyliquid64/golang-asm v0.15.1/go.mod h1:a1lVb/DtPvCB8fslRZhAngC2+aY1QWCk3Cedj/Gdt08=\ngithub.com/ugorji/go/codec v1.3.1 h1:waO7eEiFDwidsBN6agj1vJQ4AG7lh2yqXyOXqhgQuyY=\ngithub.com/ugorji/go/codec v1.3.1/go.mod h1:pRBVtBSKl77K30Bv8R2P+cLSGaTtex6fsA2Wjqmfxj4=\ngithub.com/woodsbury/decimal128 v1.4.0 h1:xJATj7lLu4f2oObouMt2tgGiElE5gO6mSWUjQsBgUlc=\ngithub.com/woodsbury/decimal128 v1.4.0/go.mod h1:BP46FUrVjVhdTbKT+XuQh2xfQaGki9LMIRJSFuh6THU=\ngo.mongodb.org/mongo-driver/v2 v2.5.0 h1:yXUhImUjjAInNcpTcAlPHiT7bIXhshCTL3jVBkF3xaE=\ngo.mongodb.org/mongo-driver/v2 v2.5.0/go.mod h1:yOI9kBsufol30iFsl1slpdq1I0eHPzybRWdyYUs8K/0=\ngo.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=\ngo.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=\ngo.opentelemetry.io/otel v1.43.0 h1:mYIM03dnh5zfN7HautFE4ieIig9amkNANT+xcVxAj9I=\ngo.opentelemetry.io/otel v1.43.0/go.mod h1:JuG+u74mvjvcm8vj8pI5XiHy1zDeoCS2LB1spIq7Ay0=\ngo.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 h1:w1K+pCJoPpQifuVpsKamUdn9U0zM3xUziVOqsGksUrY=\ngo.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0/go.mod h1:HBy4BjzgVE8139ieRI75oXm3EcDN+6GhD88JT1Kjvxg=\ngo.opentelemetry.io/otel/metric v1.43.0 h1:d7638QeInOnuwOONPp4JAOGfbCEpYb+K6DVWvdxGzgM=\ngo.opentelemetry.io/otel/metric v1.43.0/go.mod h1:RDnPtIxvqlgO8GRW18W6Z/4P462ldprJtfxHxyKd2PY=\ngo.opentelemetry.io/otel/sdk v1.43.0 h1:pi5mE86i5rTeLXqoF/hhiBtUNcrAGHLKQdhg4h4V9Dg=\ngo.opentelemetry.io/otel/sdk v1.43.0/go.mod h1:P+IkVU3iWukmiit/Yf9AWvpyRDlUeBaRg6Y+C58QHzg=\ngo.opentelemetry.io/otel/sdk/metric v1.43.0 h1:S88dyqXjJkuBNLeMcVPRFXpRw2fuwdvfCGLEo89fDkw=\ngo.opentelemetry.io/otel/sdk/metric v1.43.0/go.mod h1:C/RJtwSEJ5hzTiUz5pXF1kILHStzb9zFlIEe85bhj6A=\ngo.opentelemetry.io/otel/trace v1.43.0 h1:BkNrHpup+4k4w+ZZ86CZoHHEkohws8AY+WTX09nk+3A=\ngo.opentelemetry.io/otel/trace v1.43.0/go.mod h1:/QJhyVBUUswCphDVxq+8mld+AvhXZLhe+8WVFxiFff0=\ngo.opentelemetry.io/proto/otlp v1.10.0 h1:IQRWgT5srOCYfiWnpqUYz9CVmbO8bFmKcwYxpuCSL2g=\ngo.opentelemetry.io/proto/otlp v1.10.0/go.mod h1:/CV4QoCR/S9yaPj8utp3lvQPoqMtxXdzn7ozvvozVqk=\ngo.uber.org/mock v0.6.0 h1:hyF9dfmbgIX5EfOdasqLsWD6xqpNZlXblLB/Dbnwv3Y=\ngo.uber.org/mock v0.6.0/go.mod h1:KiVJ4BqZJaMj4svdfmHM0AUx4NJYO8ZNpPnZn1Z+BBU=\ngo.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=\ngolang.org/x/arch v0.26.0 h1:jZ6dpec5haP/fUv1kLCbuJy6dnRrfX6iVK08lZBFpk4=\ngolang.org/x/arch v0.26.0/go.mod h1:0X+GdSIP+kL5wPmpK7sdkEVTt2XoYP0cSjQSbZBwOi8=\ngolang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=\ngolang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=\ngolang.org/x/net v0.53.0 h1:d+qAbo5L0orcWAr0a9JweQpjXF19LMXJE8Ey7hwOdUA=\ngolang.org/x/net v0.53.0/go.mod h1:JvMuJH7rrdiCfbeHoo3fCQU24Lf5JJwT9W3sJFulfgs=\ngolang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI=\ngolang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=\ngolang.org/x/term v0.42.0 h1:UiKe+zDFmJobeJ5ggPwOshJIVt6/Ft0rcfrXZDLWAWY=\ngolang.org/x/term v0.42.0/go.mod h1:Dq/D+snpsbazcBG5+F9Q1n2rXV8Ma+71xEjTRufARgY=\ngolang.org/x/text v0.36.0 h1:JfKh3XmcRPqZPKevfXVpI1wXPTqbkE5f7JA92a55Yxg=\ngolang.org/x/text v0.36.0/go.mod h1:NIdBknypM8iqVmPiuco0Dh6P5Jcdk8lJL0CUebqK164=\ngolang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=\ngolang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=\ngonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=\ngonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=\ngoogle.golang.org/genproto/googleapis/api v0.0.0-20260406210006-6f92a3bedf2d h1:/aDRtSZJjyLQzm75d+a1wOJaqyKBMvIAfeQmoa3ORiI=\ngoogle.golang.org/genproto/googleapis/api v0.0.0-20260406210006-6f92a3bedf2d/go.mod h1:etfGUgejTiadZAUaEP14NP97xi1RGeawqkjDARA/UOs=\ngoogle.golang.org/genproto/googleapis/api v0.0.0-20260413175733-85fdc51ac911 h1:JZKPrnoyTOWOMRB2oxYksxo5aBDISQ/WeERx0X6bW0k=\ngoogle.golang.org/genproto/googleapis/api v0.0.0-20260413175733-85fdc51ac911/go.mod h1:C6ADNqOxbgdUUeRTU+LCHDPB9ttAMCTff6auwCVa4uc=\ngoogle.golang.org/genproto/googleapis/rpc v0.0.0-20260406210006-6f92a3bedf2d h1:wT2n40TBqFY6wiwazVK9/iTWbsQrgk5ZfCSVFLO9LQA=\ngoogle.golang.org/genproto/googleapis/rpc v0.0.0-20260406210006-6f92a3bedf2d/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=\ngoogle.golang.org/genproto/googleapis/rpc v0.0.0-20260413175733-85fdc51ac911 h1:yDfDWRVlYKc8k40wk7ZEvWZx95DzAGj2hMkQBSA2Ims=\ngoogle.golang.org/genproto/googleapis/rpc v0.0.0-20260413175733-85fdc51ac911/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=\ngoogle.golang.org/grpc v1.80.0 h1:Xr6m2WmWZLETvUNvIUmeD5OAagMw3FiKmMlTdViWsHM=\ngoogle.golang.org/grpc v1.80.0/go.mod h1:ho/dLnxwi3EDJA4Zghp7k2Ec1+c2jqup0bFkw07bwF4=\ngoogle.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=\ngoogle.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=\ngopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=\ngopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=\ngopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=\ngopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=\ngopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=\ngopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=\n" }, { "path": "internal/auth/api_key.go", "content": "package auth\n\nfunc NewAPIKeySecurityScheme(name string, in SchemeIn, value *string) (*SecurityScheme, error) {\n\ttokenFormat := NoneTokenFormat\n\tsecurityScheme, err := NewSecurityScheme(name, nil, ApiKey, NoneScheme, &in, &tokenFormat)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tif value != nil && *value != \"\" {\n\t\terr = securityScheme.SetValidValue(*value)\n\t\tif err != nil {\n\t\t\treturn nil, err\n\t\t}\n\t}\n\n\treturn securityScheme, nil\n}\n\nfunc MustNewAPIKeySecurityScheme(name string, in SchemeIn, value *string) *SecurityScheme {\n\tsecurityScheme, err := NewAPIKeySecurityScheme(name, in, value)\n\tif err != nil {\n\t\tpanic(err)\n\t}\n\n\treturn securityScheme\n}\n" }, { "path": "internal/auth/api_key_test.go", "content": "package auth_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewAPIKeySecurityScheme(t *testing.T) {\n\tname := \"token\"\n\tvalue := \"abc123\"\n\ttokenFormat := auth.NoneTokenFormat\n\n\tsecurityScheme, err := auth.NewAPIKeySecurityScheme(name, auth.InHeader, &value)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, auth.ApiKey, securityScheme.GetType())\n\tassert.Equal(t, auth.NoneScheme, securityScheme.GetScheme())\n\tassert.Equal(t, auth.InHeader, *securityScheme.GetIn())\n\tassert.Equal(t, &tokenFormat, securityScheme.GetTokenFormat())\n\tassert.Equal(t, name, securityScheme.GetName())\n\tassert.Equal(t, value, securityScheme.GetValidValue().(string))\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n\nfunc TestTestNewAPIKeySecurityScheme_WhenNilValue(t *testing.T) {\n\tname := \"token\"\n\n\tsecurityScheme, err := auth.NewAPIKeySecurityScheme(name, auth.InHeader, nil)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, nil, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n\nfunc TestNewAuthorizationBearerSecurityScheme_WhenInCooke(t *testing.T) {\n\tname := \"token\"\n\tvalue := \"abc123\"\n\n\tsecurityScheme, err := auth.NewAPIKeySecurityScheme(name, auth.InQuery, &value)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, auth.InQuery, *securityScheme.GetIn())\n}\n\nfunc TestMustNewAPIKeySecurityScheme(t *testing.T) {\n\tname := \"token\"\n\tvalue := \"abc123\"\n\ttokenFormat := auth.NoneTokenFormat\n\n\tsecurityScheme := auth.MustNewAPIKeySecurityScheme(name, auth.InHeader, &value)\n\n\tassert.Equal(t, auth.ApiKey, securityScheme.GetType())\n\tassert.Equal(t, auth.NoneScheme, securityScheme.GetScheme())\n\tassert.Equal(t, auth.InHeader, *securityScheme.GetIn())\n\tassert.Equal(t, &tokenFormat, securityScheme.GetTokenFormat())\n\tassert.Equal(t, name, securityScheme.GetName())\n\tassert.Equal(t, value, securityScheme.GetValidValue().(string))\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n" }, { "path": "internal/auth/basic.go", "content": "package auth\n\nimport \"encoding/base64\"\n\ntype HTTPBasicCredentials struct {\n\tUsername string `json:\"username\" yaml:\"username\"`\n\tPassword string `json:\"password\" yaml:\"password\"` //nolint:gosec\n}\n\nfunc NewHTTPBasicCredentials(username string, password string) *HTTPBasicCredentials {\n\treturn &HTTPBasicCredentials{\n\t\tUsername: username,\n\t\tPassword: password,\n\t}\n}\n\nfunc (credentials *HTTPBasicCredentials) GetUsername() string {\n\treturn credentials.Username\n}\n\nfunc (credentials *HTTPBasicCredentials) GetPassword() string {\n\treturn credentials.Password\n}\n\nfunc (credentials *HTTPBasicCredentials) Encode() string {\n\treturn base64.StdEncoding.EncodeToString([]byte(credentials.GetUsername() + \":\" + credentials.GetPassword()))\n}\n\nfunc NewAuthorizationBasicSecurityScheme(name string, credentials *HTTPBasicCredentials) (*SecurityScheme, error) {\n\tin := InHeader\n\tsecurityScheme, err := NewSecurityScheme(name, nil, HttpType, BasicScheme, &in, nil)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tif credentials != nil {\n\t\terr = securityScheme.SetValidValue(credentials)\n\t\tif err != nil {\n\t\t\treturn nil, err\n\t\t}\n\t}\n\n\treturn securityScheme, nil\n}\n\nfunc MustNewAuthorizationBasicSecurityScheme(name string, credentials *HTTPBasicCredentials) *SecurityScheme {\n\tsecurityScheme, err := NewAuthorizationBasicSecurityScheme(name, credentials)\n\tif err != nil {\n\t\tpanic(err)\n\t}\n\n\treturn securityScheme\n}\n" }, { "path": "internal/auth/basic_test.go", "content": "package auth_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewAuthorizationBasicSecurityScheme(t *testing.T) {\n\tname := \"basic\"\n\tbasicCredentials := auth.NewHTTPBasicCredentials(\"admin\", \"password\")\n\n\tsecurityScheme, err := auth.NewAuthorizationBasicSecurityScheme(name, basicCredentials)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, auth.HttpType, securityScheme.GetType())\n\tassert.Equal(t, auth.BasicScheme, securityScheme.GetScheme())\n\tassert.Equal(t, auth.InHeader, *securityScheme.GetIn())\n\tassert.Equal(t, name, securityScheme.GetName())\n\tassert.Equal(t, basicCredentials, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n\nfunc TestNewAuthorizationBasicSecurityScheme_WhenNilValue(t *testing.T) {\n\tname := \"basic\"\n\n\tsecurityScheme, err := auth.NewAuthorizationBasicSecurityScheme(name, nil)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, nil, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n\nfunc TestMustNewAuthorizationBasicSecurityScheme(t *testing.T) {\n\tname := \"basic\"\n\tbasicCredentials := auth.NewHTTPBasicCredentials(\"admin\", \"password\")\n\n\tsecurityScheme := auth.MustNewAuthorizationBasicSecurityScheme(name, basicCredentials)\n\n\tassert.Equal(t, auth.HttpType, securityScheme.GetType())\n\tassert.Equal(t, auth.BasicScheme, securityScheme.GetScheme())\n\tassert.Equal(t, auth.InHeader, *securityScheme.GetIn())\n\tassert.Equal(t, name, securityScheme.GetName())\n\tassert.Equal(t, basicCredentials, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n" }, { "path": "internal/auth/bearer.go", "content": "package auth\n\nimport (\n\tjwtop \"github.com/cerberauth/jwtop/jwt\"\n)\n\nfunc NewAuthorizationBearerSecurityScheme(name string, value *string) (*SecurityScheme, error) {\n\tin := InHeader\n\tsecurityScheme, err := NewSecurityScheme(name, nil, HttpType, BearerScheme, &in, nil)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tif value != nil && *value != \"\" {\n\t\terr = securityScheme.SetValidValue(*value)\n\t\tif err != nil {\n\t\t\treturn nil, err\n\t\t}\n\n\t\tvar tokenFormat TokenFormat\n\t\tif jwtop.IsJWT(*value) {\n\t\t\ttokenFormat = JWTTokenFormat\n\t\t} else {\n\t\t\ttokenFormat = NoneTokenFormat\n\t\t}\n\t\tif err = securityScheme.SetTokenFormat(tokenFormat); err != nil {\n\t\t\treturn nil, err\n\t\t}\n\t}\n\n\treturn securityScheme, nil\n}\n\nfunc MustNewAuthorizationBearerSecurityScheme(name string, value *string) *SecurityScheme {\n\tsecurityScheme, err := NewAuthorizationBearerSecurityScheme(name, value)\n\tif err != nil {\n\t\tpanic(err)\n\t}\n\n\treturn securityScheme\n}\n" }, { "path": "internal/auth/bearer_test.go", "content": "package auth_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewAuthorizationBearerSecurityScheme(t *testing.T) {\n\tname := \"token\"\n\tvalue := \"abc123\"\n\ttokenFormat := auth.NoneTokenFormat\n\n\tsecurityScheme, err := auth.NewAuthorizationBearerSecurityScheme(name, &value)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, auth.HttpType, securityScheme.GetType())\n\tassert.Equal(t, auth.BearerScheme, securityScheme.GetScheme())\n\tassert.Equal(t, auth.InHeader, *securityScheme.GetIn())\n\tassert.Equal(t, &tokenFormat, securityScheme.GetTokenFormat())\n\tassert.Equal(t, name, securityScheme.GetName())\n\tassert.Equal(t, value, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n\nfunc TestNewAuthorizationBearerSecurityScheme_WhenNilValue(t *testing.T) {\n\tname := \"token\"\n\n\tsecurityScheme, err := auth.NewAuthorizationBearerSecurityScheme(name, nil)\n\n\tassert.NoError(t, err)\n\tassert.Nil(t, securityScheme.GetTokenFormat())\n\tassert.Equal(t, nil, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n\nfunc TestNewAuthorizationBearerSecurityScheme_WhenJWTFormatValue(t *testing.T) {\n\tname := \"token\"\n\tvalue := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e30.ufhxDTmrs4T5MSsvT6lsb3OpdWi5q8O31VX7TgrVamA\"\n\ttokenFormat := auth.JWTTokenFormat\n\n\tsecurityScheme, err := auth.NewAuthorizationBearerSecurityScheme(name, &value)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, auth.HttpType, securityScheme.GetType())\n\tassert.Equal(t, auth.BearerScheme, securityScheme.GetScheme())\n\tassert.Equal(t, &tokenFormat, securityScheme.GetTokenFormat())\n\tassert.Equal(t, value, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n\nfunc TestMustNewAuthorizationBearerSecurityScheme(t *testing.T) {\n\tname := \"token\"\n\tvalue := \"abc123\"\n\ttokenFormat := auth.NoneTokenFormat\n\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(name, &value)\n\n\tassert.Equal(t, auth.HttpType, securityScheme.GetType())\n\tassert.Equal(t, auth.BearerScheme, securityScheme.GetScheme())\n\tassert.Equal(t, auth.InHeader, *securityScheme.GetIn())\n\tassert.Equal(t, &tokenFormat, securityScheme.GetTokenFormat())\n\tassert.Equal(t, name, securityScheme.GetName())\n\tassert.Equal(t, value, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n" }, { "path": "internal/auth/headers.go", "content": "package auth\n\nconst AuthorizationHeader = \"Authorization\"\nconst BearerPrefix = \"Bearer\"\nconst BasicPrefix = \"Basic\"\n" }, { "path": "internal/auth/no_auth.go", "content": "package auth\n\nvar defaultName = \"no_auth\"\n\nfunc NewNoAuthSecurityScheme() (*SecurityScheme, error) {\n\treturn NewSecurityScheme(defaultName, nil, None, NoneScheme, nil, nil)\n}\n\nfunc MustNewNoAuthSecurityScheme() *SecurityScheme {\n\tscheme, err := NewNoAuthSecurityScheme()\n\tif err != nil {\n\t\tpanic(err)\n\t}\n\n\treturn scheme\n}\n" }, { "path": "internal/auth/no_auth_test.go", "content": "package auth_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewNoAuthSecurityScheme(t *testing.T) {\n\tsecurityScheme, err := auth.NewNoAuthSecurityScheme()\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, securityScheme)\n\tassert.Equal(t, \"no_auth\", securityScheme.GetName())\n\tassert.Equal(t, auth.None, securityScheme.GetType())\n\tassert.Equal(t, auth.NoneScheme, securityScheme.GetScheme())\n\tassert.Nil(t, securityScheme.GetIn())\n}\n\nfunc TestMustNewNoAuthSecurityScheme(t *testing.T) {\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\n\tassert.NotNil(t, securityScheme)\n\tassert.Equal(t, \"no_auth\", securityScheme.GetName())\n\tassert.Equal(t, auth.None, securityScheme.GetType())\n\tassert.Equal(t, auth.NoneScheme, securityScheme.GetScheme())\n\tassert.Nil(t, securityScheme.GetIn())\n}\n" }, { "path": "internal/auth/oauth.go", "content": "package auth\n\nimport (\n\t\"time\"\n\n\tjwtop \"github.com/cerberauth/jwtop/jwt\"\n)\n\ntype OAuthFlow string\n\nconst (\n\tAuthorizationCodeFlow OAuthFlow = \"authorization_code\"\n\tImplicitFlow OAuthFlow = \"implicit\"\n\tClientCredentials OAuthFlow = \"client_credentials\"\n)\n\ntype OAuthValue struct {\n\tAccessToken string `json:\"access_token\" yaml:\"access_token\"` //nolint:gosec\n\tRefreshToken *string `json:\"refresh_token\" yaml:\"refresh_token\"` //nolint:gosec\n\tExpiresIn *time.Time `json:\"expires_in\" yaml:\"expires_in\"`\n\tScope *string `json:\"scope\" yaml:\"scope\"`\n}\n\nfunc NewOAuthValue(accessToken string, refreshToken *string, expiresIn *time.Time, scope *string) *OAuthValue {\n\treturn &OAuthValue{\n\t\tAccessToken: accessToken,\n\t\tRefreshToken: refreshToken,\n\t\tExpiresIn: expiresIn,\n\t\tScope: scope,\n\t}\n}\n\nfunc (value *OAuthValue) SetAccessToken(accessToken string) {\n\tvalue.AccessToken = accessToken\n}\n\nfunc (value *OAuthValue) GetAccessToken() string {\n\treturn value.AccessToken\n}\n\ntype OAuthConfig struct {\n\tClientID string\n\tClientSecret string //nolint:gosec\n\n\tTokenURL string\n\tRefreshURL string\n}\n\nvar defaultIn = InHeader\n\nfunc NewOAuthSecurityScheme(name string, in *SchemeIn, value *OAuthValue, config *OAuthConfig) (*SecurityScheme, error) {\n\tif in == nil {\n\t\tin = &defaultIn\n\t}\n\n\tsecurityScheme, err := NewSecurityScheme(name, config, OAuth2, OAuthScheme, in, nil)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tif value != nil && value.AccessToken != \"\" {\n\t\terr = securityScheme.SetValidValue(value)\n\t\tif err != nil {\n\t\t\treturn nil, err\n\t\t}\n\n\t\tvar tokenFormat TokenFormat\n\t\tif jwtop.IsJWT(value.AccessToken) {\n\t\t\ttokenFormat = JWTTokenFormat\n\t\t} else {\n\t\t\ttokenFormat = NoneTokenFormat\n\t\t}\n\t\tif err = securityScheme.SetTokenFormat(tokenFormat); err != nil {\n\t\t\treturn nil, err\n\t\t}\n\t}\n\n\treturn securityScheme, nil\n}\n\nfunc MustNewOAuthSecurityScheme(name string, in *SchemeIn, value *OAuthValue, config *OAuthConfig) *SecurityScheme {\n\tsecurityScheme, err := NewOAuthSecurityScheme(name, in, value, config)\n\tif err != nil {\n\t\tpanic(err)\n\t}\n\n\treturn securityScheme\n}\n" }, { "path": "internal/auth/oauth_test.go", "content": "package auth_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewOAuthSecurityScheme(t *testing.T) {\n\tname := \"token\"\n\taccessToken := \"abc123\"\n\tin := auth.InHeader\n\ttokenFormat := auth.NoneTokenFormat\n\toauthValue := auth.NewOAuthValue(accessToken, nil, nil, nil)\n\toauthConfig := auth.OAuthConfig{}\n\n\tsecurityScheme, err := auth.NewOAuthSecurityScheme(name, &in, oauthValue, &oauthConfig)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, auth.OAuth2, securityScheme.GetType())\n\tassert.Equal(t, auth.OAuthScheme, securityScheme.GetScheme())\n\tassert.Equal(t, auth.InHeader, *securityScheme.GetIn())\n\tassert.Equal(t, &tokenFormat, securityScheme.GetTokenFormat())\n\tassert.Equal(t, name, securityScheme.GetName())\n\tassert.Equal(t, oauthValue, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n\nfunc TestNewOAuthSecurityScheme_WhenNilIn(t *testing.T) {\n\tname := \"token\"\n\taccessToken := \"abc123\"\n\toauthValue := auth.NewOAuthValue(accessToken, nil, nil, nil)\n\toauthConfig := auth.OAuthConfig{}\n\n\tsecurityScheme, err := auth.NewOAuthSecurityScheme(name, nil, oauthValue, &oauthConfig)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, auth.InHeader, *securityScheme.GetIn())\n}\n\nfunc TestNewOAuthSecurityScheme_WhenQueryIn(t *testing.T) {\n\tname := \"token\"\n\taccessToken := \"abc123\"\n\tin := auth.InQuery\n\toauthValue := auth.NewOAuthValue(accessToken, nil, nil, nil)\n\toauthConfig := auth.OAuthConfig{}\n\n\tsecurityScheme, err := auth.NewOAuthSecurityScheme(name, &in, oauthValue, &oauthConfig)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, auth.InQuery, *securityScheme.GetIn())\n}\n\nfunc TestNewOAuthSecurityScheme_WhenNilValue(t *testing.T) {\n\tname := \"token\"\n\toauthConfig := auth.OAuthConfig{}\n\n\tsecurityScheme, err := auth.NewOAuthSecurityScheme(name, nil, nil, &oauthConfig)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, nil, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n\nfunc TestNewOAuthSecurityScheme_WhenJWTFormatValue(t *testing.T) {\n\tname := \"token\"\n\taccessToken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e30.ufhxDTmrs4T5MSsvT6lsb3OpdWi5q8O31VX7TgrVamA\"\n\tin := auth.InHeader\n\ttokenFormat := auth.JWTTokenFormat\n\toauthValue := auth.NewOAuthValue(accessToken, nil, nil, nil)\n\toauthConfig := auth.OAuthConfig{}\n\n\tsecurityScheme, err := auth.NewOAuthSecurityScheme(name, &in, oauthValue, &oauthConfig)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, &tokenFormat, securityScheme.GetTokenFormat())\n\tassert.Equal(t, oauthValue, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n\nfunc TestMustNewOAuthSecurityScheme(t *testing.T) {\n\tname := \"token\"\n\taccessToken := \"abc123\"\n\tin := auth.InHeader\n\ttokenFormat := auth.NoneTokenFormat\n\toauthValue := auth.NewOAuthValue(accessToken, nil, nil, nil)\n\toauthConfig := auth.OAuthConfig{}\n\n\tsecurityScheme := auth.MustNewOAuthSecurityScheme(name, &in, oauthValue, &oauthConfig)\n\n\tassert.Equal(t, auth.OAuth2, securityScheme.GetType())\n\tassert.Equal(t, auth.OAuthScheme, securityScheme.GetScheme())\n\tassert.Equal(t, auth.InHeader, *securityScheme.GetIn())\n\tassert.Equal(t, &tokenFormat, securityScheme.GetTokenFormat())\n\tassert.Equal(t, name, securityScheme.GetName())\n\tassert.Equal(t, oauthValue, securityScheme.GetValidValue())\n\tassert.Equal(t, nil, securityScheme.GetAttackValue())\n}\n" }, { "path": "internal/auth/scheme.go", "content": "package auth\n\ntype SchemeName string\n\n// Values are registred in the IANA Authentication Scheme registry\n// https://www.iana.org/assignments/http-authschemes/http-authschemes.xhtml\nconst (\n\tBasicScheme SchemeName = \"Basic\"\n\tBearerScheme SchemeName = \"Bearer\"\n\tDigestScheme SchemeName = \"Digest\"\n\tOAuthScheme SchemeName = \"OAuth\"\n\tPrivateToken SchemeName = \"PrivateToken\"\n\tNoneScheme SchemeName = \"None\"\n)\n\nfunc (s *SchemeName) String() string {\n\treturn string(*s)\n}\n\nfunc (e *SchemeName) Type() string {\n\treturn \"scheme\"\n}\n\ntype SchemeIn string\n\nconst (\n\tInQuery SchemeIn = \"query\"\n\tInHeader SchemeIn = \"header\"\n\tInCookie SchemeIn = \"cookie\"\n)\n\ntype TokenFormat string\n\nconst (\n\tJWTTokenFormat TokenFormat = \"jwt\"\n\tNoneTokenFormat TokenFormat = \"none\"\n)\n" }, { "path": "internal/auth/scheme_test.go", "content": "package auth_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestSchemeName_String(t *testing.T) {\n\tscheme := auth.BasicScheme\n\tassert.Equal(t, \"Basic\", scheme.String())\n}\n\nfunc TestSchemeName_Type(t *testing.T) {\n\tscheme := auth.BasicScheme\n\tassert.Equal(t, \"scheme\", scheme.Type())\n}\n\nfunc TestSchemeIn(t *testing.T) {\n\tschemeIn := auth.InHeader\n\tassert.Equal(t, \"header\", string(schemeIn))\n}\n\nfunc TestSchemeIn_String(t *testing.T) {\n\tschemeIn := auth.InHeader\n\tassert.Equal(t, \"header\", string(schemeIn))\n}\n" }, { "path": "internal/auth/security_scheme.go", "content": "package auth\n\nimport (\n\t\"fmt\"\n\t\"net/http\"\n\n\tjwtop \"github.com/cerberauth/jwtop/jwt\"\n\t\"github.com/cerberauth/jwtop/jwt/editor\"\n)\n\nfunc NewErrTokenFormatShouldBeJWT() error {\n\treturn fmt.Errorf(\"token format should be jwt\")\n}\n\ntype SecurityScheme struct {\n\tType Type `json:\"type\" yaml:\"type\"`\n\tScheme SchemeName `json:\"scheme\" yaml:\"scheme\"`\n\tIn *SchemeIn `json:\"in\" yaml:\"in\"`\n\tTokenFormat *TokenFormat `json:\"tokenFormat\" yaml:\"tokenFormat\"`\n\n\tName string `json:\"name\" yaml:\"name\"`\n\tConfig interface{} `json:\"config\" yaml:\"config\"`\n\n\tValidValue interface{} `json:\"-\" yaml:\"-\"`\n\tAttackValue interface{} `json:\"-\" yaml:\"-\"`\n}\ntype SecuritySchemesMap map[string]*SecurityScheme\n\ntype InQueryValue = string\ntype InHeaderValue = string\ntype InCookieValue = http.Cookie\n\nfunc NewSecurityScheme(name string, config interface{}, t Type, scheme SchemeName, in *SchemeIn, tokenFormat *TokenFormat) (*SecurityScheme, error) {\n\tif in != nil && name == \"\" {\n\t\treturn nil, fmt.Errorf(\"name is required for security scheme with in %s\", *in)\n\t}\n\n\tif t == ApiKey && in == nil {\n\t\treturn nil, fmt.Errorf(\"in is required for security scheme with type %s\", t)\n\t}\n\n\treturn &SecurityScheme{\n\t\tName: name,\n\t\tConfig: config,\n\n\t\tType: t,\n\t\tScheme: scheme,\n\t\tIn: in,\n\t\tTokenFormat: tokenFormat,\n\t}, nil\n}\n\nfunc (securityScheme *SecurityScheme) GetType() Type {\n\treturn securityScheme.Type\n}\n\nfunc (securityScheme *SecurityScheme) GetScheme() SchemeName {\n\treturn securityScheme.Scheme\n}\n\nfunc (securityScheme *SecurityScheme) GetIn() *SchemeIn {\n\treturn securityScheme.In\n}\n\nfunc (securityScheme *SecurityScheme) GetToken() string {\n\tif !securityScheme.HasValidValue() {\n\t\treturn \"\"\n\t}\n\tswitch securityScheme.GetType() {\n\tcase OAuth2:\n\t\treturn securityScheme.GetValidValue().(*OAuthValue).GetAccessToken()\n\tdefault:\n\t\treturn securityScheme.GetValidValue().(string)\n\t}\n}\n\nfunc (securityScheme *SecurityScheme) SetTokenFormat(tokenFormat TokenFormat) error {\n\tif tokenFormat == JWTTokenFormat && securityScheme.HasValidValue() && !jwtop.IsJWT(securityScheme.GetToken()) {\n\t\treturn NewErrTokenFormatShouldBeJWT()\n\t}\n\n\tsecurityScheme.TokenFormat = &tokenFormat\n\treturn nil\n}\n\nfunc (securityScheme *SecurityScheme) GetTokenFormat() *TokenFormat {\n\treturn securityScheme.TokenFormat\n}\n\nfunc (securityScheme *SecurityScheme) GetName() string {\n\treturn securityScheme.Name\n}\n\nfunc (securityScheme *SecurityScheme) GetConfig() interface{} {\n\treturn securityScheme.Config\n}\n\nfunc (securityScheme *SecurityScheme) validateValue(value interface{}) error {\n\tif value == nil {\n\t\treturn fmt.Errorf(\"value is required\")\n\t}\n\n\tswitch securityScheme.GetType() {\n\tcase ApiKey:\n\t\tif securityScheme.GetIn() == nil {\n\t\t\treturn fmt.Errorf(\"in is required for api key security scheme\")\n\t\t}\n\n\t\tvar ok bool\n\t\tswitch *securityScheme.GetIn() {\n\t\tcase InQuery:\n\t\t\t_, ok = value.(InQueryValue)\n\t\tcase InHeader:\n\t\t\t_, ok = value.(InHeaderValue)\n\t\tcase InCookie:\n\t\t\t_, ok = value.(InCookieValue)\n\t\t}\n\t\tif !ok {\n\t\t\treturn fmt.Errorf(\"invalid value for api key security scheme\")\n\t\t}\n\t\treturn nil\n\n\tcase HttpType:\n\t\tswitch securityScheme.GetScheme() {\n\t\tcase BasicScheme:\n\t\t\t_, ok := value.(*HTTPBasicCredentials)\n\t\t\tif !ok {\n\t\t\t\treturn fmt.Errorf(\"invalid value for http basic security scheme\")\n\t\t\t}\n\t\t\treturn nil\n\t\tdefault:\n\t\t\tval, ok := value.(string)\n\t\t\tif !ok {\n\t\t\t\treturn fmt.Errorf(\"invalid value for http security scheme\")\n\t\t\t}\n\t\t\tif securityScheme.GetTokenFormat() != nil && *securityScheme.GetTokenFormat() == JWTTokenFormat {\n\t\t\t\tif _, err := editor.NewTokenEditor(val); err != nil {\n\t\t\t\t\treturn err\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn nil\n\t\t}\n\n\tcase OAuth2:\n\t\t_, ok := value.(*OAuthValue)\n\t\tif !ok {\n\t\t\treturn fmt.Errorf(\"invalid value for oauth2 security scheme\")\n\t\t}\n\t\treturn nil\n\t}\n\n\treturn nil\n}\n\nfunc (securityScheme *SecurityScheme) SetValidValue(value interface{}) error {\n\tif value == nil {\n\t\tsecurityScheme.ValidValue = nil\n\t\treturn nil\n\t}\n\n\tif err := securityScheme.validateValue(value); err != nil {\n\t\treturn err\n\t}\n\n\tsecurityScheme.ValidValue = value\n\treturn nil\n}\n\nfunc (securityScheme *SecurityScheme) GetValidValue() interface{} {\n\treturn securityScheme.ValidValue\n}\n\nfunc (securityScheme *SecurityScheme) HasValidValue() bool {\n\treturn securityScheme.GetValidValue() != nil\n}\n\nfunc (securityScheme *SecurityScheme) SetAttackValue(value interface{}) error {\n\tif value == nil {\n\t\tsecurityScheme.AttackValue = nil\n\t\treturn nil\n\t}\n\n\tif err := securityScheme.validateValue(value); err != nil {\n\t\treturn err\n\t}\n\n\tsecurityScheme.AttackValue = value\n\treturn nil\n}\n\nfunc (securityScheme *SecurityScheme) GetAttackValue() interface{} {\n\treturn securityScheme.AttackValue\n}\n\nfunc (securityScheme *SecurityScheme) GetHeaders() http.Header {\n\theader := http.Header{}\n\tif securityScheme.GetIn() == nil || *securityScheme.GetIn() != InHeader {\n\t\treturn header\n\t}\n\n\tattackValue := securityScheme.GetAttackValue()\n\tif attackValue == nil && securityScheme.HasValidValue() {\n\t\tattackValue = securityScheme.GetValidValue()\n\t}\n\tif attackValue == nil {\n\t\treturn header\n\t}\n\n\tswitch securityScheme.GetType() {\n\tcase HttpType:\n\t\tvar val string\n\t\tswitch securityScheme.GetScheme() {\n\t\tcase BasicScheme:\n\t\t\tcredentials := attackValue.(*HTTPBasicCredentials)\n\t\t\tval = fmt.Sprintf(\"%s %s\", BasicPrefix, credentials.Encode())\n\t\tcase BearerScheme:\n\t\t\tval = fmt.Sprintf(\"%s %s\", BearerPrefix, attackValue)\n\t\tdefault:\n\t\t\tval = fmt.Sprintf(\"%s\", attackValue)\n\t\t}\n\t\tif val != \"\" {\n\t\t\theader.Set(AuthorizationHeader, val)\n\t\t}\n\tcase ApiKey:\n\t\tif val := fmt.Sprintf(\"%s\", attackValue); val != \"\" {\n\t\t\theader.Set(securityScheme.GetName(), val)\n\t\t}\n\t}\n\n\treturn header\n}\n\nfunc (securityScheme *SecurityScheme) GetCookies() []*http.Cookie {\n\tif securityScheme.GetIn() == nil || *securityScheme.GetIn() != InCookie {\n\t\treturn []*http.Cookie{}\n\t}\n\n\tcookies := []*http.Cookie{}\n\t// TODO\n\treturn cookies\n}\n" }, { "path": "internal/auth/security_scheme_test.go", "content": "package auth_test\n\nimport (\n\t\"fmt\"\n\t\"net/http\"\n\t\"testing\"\n\n\tjwtop \"github.com/cerberauth/jwtop/jwt\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestNewSecurityScheme(t *testing.T) {\n\tinHeader := auth.InHeader\n\tjwtTokenFormat := auth.JWTTokenFormat\n\n\ttests := []struct {\n\t\tname string\n\t\tschemeName string\n\t\tconfig interface{}\n\t\tt auth.Type\n\t\tscheme auth.SchemeName\n\t\tin *auth.SchemeIn\n\t\ttokenFormat *auth.TokenFormat\n\t\texpectError bool\n\t}{\n\t\t{\n\t\t\tname: \"Valid API Key in Header\",\n\t\t\tschemeName: \"apiKey\",\n\t\t\tconfig: nil,\n\t\t\tt: auth.ApiKey,\n\t\t\tscheme: auth.PrivateToken,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\texpectError: false,\n\t\t},\n\t\t{\n\t\t\tname: \"Missing name with in\",\n\t\t\tschemeName: \"\",\n\t\t\tconfig: nil,\n\t\t\tt: auth.ApiKey,\n\t\t\tscheme: auth.PrivateToken,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\texpectError: true,\n\t\t},\n\t\t{\n\t\t\tname: \"Missing in for API Key\",\n\t\t\tschemeName: \"apiKey\",\n\t\t\tconfig: nil,\n\t\t\tt: auth.ApiKey,\n\t\t\tscheme: auth.PrivateToken,\n\t\t\tin: nil,\n\t\t\ttokenFormat: nil,\n\t\t\texpectError: true,\n\t\t},\n\t\t{\n\t\t\tname: \"Valid HTTP Bearer\",\n\t\t\tschemeName: \"bearer\",\n\t\t\tconfig: nil,\n\t\t\tt: auth.HttpType,\n\t\t\tscheme: auth.BearerScheme,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: &jwtTokenFormat,\n\t\t\texpectError: false,\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tsecurityScheme, err := auth.NewSecurityScheme(tt.schemeName, tt.config, tt.t, tt.scheme, tt.in, tt.tokenFormat)\n\t\t\tif tt.expectError {\n\t\t\t\tassert.Error(t, err)\n\t\t\t} else {\n\t\t\t\tassert.NoError(t, err)\n\t\t\t\tassert.Equal(t, tt.schemeName, securityScheme.GetName())\n\t\t\t\tassert.Equal(t, tt.config, securityScheme.GetConfig())\n\t\t\t\tassert.Equal(t, tt.t, securityScheme.GetType())\n\t\t\t\tassert.Equal(t, tt.scheme, securityScheme.GetScheme())\n\t\t\t\tassert.Equal(t, tt.in, securityScheme.GetIn())\n\t\t\t\tassert.Equal(t, tt.tokenFormat, securityScheme.GetTokenFormat())\n\t\t\t}\n\t\t})\n\t}\n}\n\nfunc TestSetValidValue(t *testing.T) {\n\tinHeader := auth.InHeader\n\tinQuery := auth.InQuery\n\tinCookie := auth.InCookie\n\tjwtTokenFormat := auth.JWTTokenFormat\n\temptyJWT, err := jwtop.CreateWithSecret(jwtop.CreateOptions{Algorithm: \"HS256\"}, []byte(\"\"))\n\trequire.NoError(t, err)\n\n\ttests := []struct {\n\t\tname string\n\t\tschemeType auth.Type\n\t\tschemeName auth.SchemeName\n\t\tin *auth.SchemeIn\n\t\ttokenFormat *auth.TokenFormat\n\t\tvalue interface{}\n\t\texpectError bool\n\t\texpectedMessage string\n\t}{\n\t\t{\n\t\t\tname: \"Valid API Key in Header\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: \"valid-api-key\",\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Invalid API Key in Header\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: &http.Header{\"token\": []string{\"invalid-api-key\"}},\n\t\t\texpectError: true,\n\t\t\texpectedMessage: \"invalid value for api key security scheme\",\n\t\t},\n\t\t{\n\t\t\tname: \"Valid API Key in Query\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: &inQuery,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: \"valid-api-key\",\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Valid API Key in Cookie\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: &inCookie,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: http.Cookie{Name: \"token\", Value: \"valid-api-key\"},\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Valid HTTP Bearer with JWT\",\n\t\t\tschemeType: auth.HttpType,\n\t\t\tschemeName: auth.BearerScheme,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: &jwtTokenFormat,\n\t\t\tvalue: emptyJWT,\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Invalid HTTP Bearer with JWT\",\n\t\t\tschemeType: auth.HttpType,\n\t\t\tschemeName: auth.BearerScheme,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: &jwtTokenFormat,\n\t\t\tvalue: \"invalid-jwt\",\n\t\t\texpectError: true,\n\t\t\texpectedMessage: \"token is malformed: token contains an invalid number of segments\",\n\t\t},\n\t\t{\n\t\t\tname: \"Valid OAuth2\",\n\t\t\tschemeType: auth.OAuth2,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: nil,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: &auth.OAuthValue{},\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Invalid OAuth2\",\n\t\t\tschemeType: auth.OAuth2,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: nil,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: \"invalid-oauth2\",\n\t\t\texpectError: true,\n\t\t\texpectedMessage: \"invalid value for oauth2 security scheme\",\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tsecurityScheme, err := auth.NewSecurityScheme(\"testScheme\", nil, tt.schemeType, tt.schemeName, tt.in, tt.tokenFormat)\n\t\t\tassert.NoError(t, err)\n\n\t\t\terr = securityScheme.SetValidValue(tt.value)\n\t\t\tif tt.expectError {\n\t\t\t\tassert.Error(t, err)\n\t\t\t\tassert.Equal(t, tt.expectedMessage, err.Error())\n\t\t\t} else {\n\t\t\t\tassert.NoError(t, err)\n\t\t\t\tassert.Equal(t, tt.value, securityScheme.GetValidValue())\n\t\t\t}\n\t\t})\n\t}\n}\n\nfunc TestSetTokenFormat(t *testing.T) {\n\tinHeader := auth.InHeader\n\tjwtTokenFormat := auth.JWTTokenFormat\n\temptyJWT, err := jwtop.CreateWithSecret(jwtop.CreateOptions{Algorithm: \"HS256\"}, []byte(\"\"))\n\trequire.NoError(t, err)\n\n\ttests := []struct {\n\t\tname string\n\t\tinitialValue interface{}\n\t\ttokenFormat auth.TokenFormat\n\t\texpectError bool\n\t\texpectedMessage string\n\t}{\n\t\t{\n\t\t\tname: \"Valid JWT Token Format\",\n\t\t\tinitialValue: emptyJWT,\n\t\t\ttokenFormat: jwtTokenFormat,\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Invalid JWT Token Format\",\n\t\t\tinitialValue: \"invalid-token\",\n\t\t\ttokenFormat: jwtTokenFormat,\n\t\t\texpectError: true,\n\t\t\texpectedMessage: \"token format should be jwt\",\n\t\t},\n\t\t{\n\t\t\tname: \"Non-JWT Token Format\",\n\t\t\tinitialValue: \"some-value\",\n\t\t\ttokenFormat: auth.TokenFormat(\"non-jwt\"),\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tsecurityScheme, err := auth.NewSecurityScheme(\"testScheme\", nil, auth.HttpType, auth.BearerScheme, &inHeader, nil)\n\t\t\tassert.NoError(t, err)\n\n\t\t\terr = securityScheme.SetValidValue(tt.initialValue)\n\t\t\tassert.NoError(t, err)\n\n\t\t\terr = securityScheme.SetTokenFormat(tt.tokenFormat)\n\t\t\tif tt.expectError {\n\t\t\t\tassert.Error(t, err)\n\t\t\t\tassert.Equal(t, tt.expectedMessage, err.Error())\n\t\t\t} else {\n\t\t\t\tassert.NoError(t, err)\n\t\t\t\tassert.Equal(t, &tt.tokenFormat, securityScheme.GetTokenFormat())\n\t\t\t}\n\t\t})\n\t}\n}\n\nfunc TestSetAttackValue(t *testing.T) {\n\tinHeader := auth.InHeader\n\tinQuery := auth.InQuery\n\tinCookie := auth.InCookie\n\tjwtTokenFormat := auth.JWTTokenFormat\n\temptyJWT, err := jwtop.CreateWithSecret(jwtop.CreateOptions{Algorithm: \"HS256\"}, []byte(\"\"))\n\trequire.NoError(t, err)\n\n\ttests := []struct {\n\t\tname string\n\t\tschemeType auth.Type\n\t\tschemeName auth.SchemeName\n\t\tin *auth.SchemeIn\n\t\ttokenFormat *auth.TokenFormat\n\t\tvalue interface{}\n\t\texpectError bool\n\t\texpectedMessage string\n\t}{\n\t\t{\n\t\t\tname: \"Valid API Key in Header\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: \"valid-api-key\",\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Invalid API Key in Header\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: &http.Header{\"token\": []string{\"invalid-api-key\"}},\n\t\t\texpectError: true,\n\t\t\texpectedMessage: \"invalid value for api key security scheme\",\n\t\t},\n\t\t{\n\t\t\tname: \"Valid API Key in Query\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: &inQuery,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: \"valid-api-key\",\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Valid API Key in Cookie\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: &inCookie,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: http.Cookie{Name: \"token\", Value: \"valid-api-key\"},\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Valid HTTP Bearer with JWT\",\n\t\t\tschemeType: auth.HttpType,\n\t\t\tschemeName: auth.BearerScheme,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: &jwtTokenFormat,\n\t\t\tvalue: emptyJWT,\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Invalid HTTP Bearer with JWT\",\n\t\t\tschemeType: auth.HttpType,\n\t\t\tschemeName: auth.BearerScheme,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: &jwtTokenFormat,\n\t\t\tvalue: \"invalid-jwt\",\n\t\t\texpectError: true,\n\t\t\texpectedMessage: \"token is malformed: token contains an invalid number of segments\",\n\t\t},\n\t\t{\n\t\t\tname: \"Valid OAuth2\",\n\t\t\tschemeType: auth.OAuth2,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: nil,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: &auth.OAuthValue{},\n\t\t\texpectError: false,\n\t\t\texpectedMessage: \"\",\n\t\t},\n\t\t{\n\t\t\tname: \"Invalid OAuth2\",\n\t\t\tschemeType: auth.OAuth2,\n\t\t\tschemeName: auth.PrivateToken,\n\t\t\tin: nil,\n\t\t\ttokenFormat: nil,\n\t\t\tvalue: \"invalid-oauth2\",\n\t\t\texpectError: true,\n\t\t\texpectedMessage: \"invalid value for oauth2 security scheme\",\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tsecurityScheme, err := auth.NewSecurityScheme(\"testScheme\", nil, tt.schemeType, tt.schemeName, tt.in, tt.tokenFormat)\n\t\t\tassert.NoError(t, err)\n\n\t\t\terr = securityScheme.SetAttackValue(tt.value)\n\t\t\tif tt.expectError {\n\t\t\t\tassert.Error(t, err)\n\t\t\t\tassert.Equal(t, tt.expectedMessage, err.Error())\n\t\t\t} else {\n\t\t\t\tassert.NoError(t, err)\n\t\t\t\tassert.Equal(t, tt.value, securityScheme.GetAttackValue())\n\t\t\t}\n\t\t})\n\t}\n}\n\nfunc TestGetHeaders(t *testing.T) {\n\tinHeader := auth.InHeader\n\tjwtTokenFormat := auth.JWTTokenFormat\n\temptyJWT, err := jwtop.CreateWithSecret(jwtop.CreateOptions{Algorithm: \"HS256\"}, []byte(\"\"))\n\trequire.NoError(t, err)\n\n\ttests := []struct {\n\t\tname string\n\t\tschemeName string\n\t\tschemeType auth.Type\n\t\tscheme auth.SchemeName\n\t\tin *auth.SchemeIn\n\t\ttokenFormat *auth.TokenFormat\n\t\tvalidValue interface{}\n\t\tattackValue interface{}\n\t\texpectedHeaders http.Header\n\t}{\n\t\t{\n\t\t\tname: \"API Key in Header with Valid Value\",\n\t\t\tschemeName: \"X-Api-Key\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tscheme: auth.PrivateToken,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\tvalidValue: \"valid-api-key\",\n\t\t\tattackValue: nil,\n\t\t\texpectedHeaders: http.Header{\"X-Api-Key\": []string{\"valid-api-key\"}},\n\t\t},\n\t\t{\n\t\t\tname: \"API Key in Header with Attack Value\",\n\t\t\tschemeName: \"X-Api-Key\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tscheme: auth.PrivateToken,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\tvalidValue: \"valid-api-key\",\n\t\t\tattackValue: \"attack-api-key\",\n\t\t\texpectedHeaders: http.Header{\"X-Api-Key\": []string{\"attack-api-key\"}},\n\t\t},\n\t\t{\n\t\t\tname: \"HTTP Bearer with JWT\",\n\t\t\tschemeName: \"Bearer\",\n\t\t\tschemeType: auth.HttpType,\n\t\t\tscheme: auth.BearerScheme,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: &jwtTokenFormat,\n\t\t\tvalidValue: emptyJWT,\n\t\t\tattackValue: nil,\n\t\t\texpectedHeaders: http.Header{\"Authorization\": []string{fmt.Sprintf(\"%s %s\", auth.BearerPrefix, emptyJWT)}},\n\t\t},\n\t\t{\n\t\t\tname: \"HTTP Bearer with Attack JWT\",\n\t\t\tschemeName: \"Bearer\",\n\t\t\tschemeType: auth.HttpType,\n\t\t\tscheme: auth.BearerScheme,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: &jwtTokenFormat,\n\t\t\tvalidValue: emptyJWT,\n\t\t\tattackValue: \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e30.\",\n\t\t\texpectedHeaders: http.Header{\"Authorization\": []string{fmt.Sprintf(\"%s %s\", auth.BearerPrefix, \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e30.\")}},\n\t\t},\n\t\t{\n\t\t\tname: \"No Valid or Attack Value\",\n\t\t\tschemeName: \"X-Api-Key\",\n\t\t\tschemeType: auth.ApiKey,\n\t\t\tscheme: auth.PrivateToken,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\tvalidValue: nil,\n\t\t\tattackValue: nil,\n\t\t\texpectedHeaders: http.Header{},\n\t\t},\n\t\t{\n\t\t\tname: \"HTTP Basic with valid credentials\",\n\t\t\tschemeName: \"Basic\",\n\t\t\tschemeType: auth.HttpType,\n\t\t\tscheme: auth.BasicScheme,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\tvalidValue: auth.NewHTTPBasicCredentials(\"user\", \"password\"),\n\t\t\tattackValue: nil,\n\t\t\texpectedHeaders: http.Header{\"Authorization\": []string{fmt.Sprintf(\"%s %s\", auth.BasicPrefix, \"dXNlcjpwYXNzd29yZA==\")}},\n\t\t},\n\t\t{\n\t\t\tname: \"HTTP Basic with attack credentials\",\n\t\t\tschemeName: \"Basic\",\n\t\t\tschemeType: auth.HttpType,\n\t\t\tscheme: auth.BasicScheme,\n\t\t\tin: &inHeader,\n\t\t\ttokenFormat: nil,\n\t\t\tvalidValue: auth.NewHTTPBasicCredentials(\"user\", \"password\"),\n\t\t\tattackValue: auth.NewHTTPBasicCredentials(\"user\", \"attack-password\"),\n\t\t\texpectedHeaders: http.Header{\"Authorization\": []string{fmt.Sprintf(\"%s %s\", auth.BasicPrefix, \"dXNlcjphdHRhY2stcGFzc3dvcmQ=\")}},\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tsecurityScheme, err := auth.NewSecurityScheme(tt.schemeName, nil, tt.schemeType, tt.scheme, tt.in, tt.tokenFormat)\n\t\t\tassert.NoError(t, err)\n\n\t\t\terr = securityScheme.SetValidValue(tt.validValue)\n\t\t\tassert.NoError(t, err)\n\n\t\t\terr = securityScheme.SetAttackValue(tt.attackValue)\n\t\t\tassert.NoError(t, err)\n\n\t\t\theaders := securityScheme.GetHeaders()\n\t\t\tassert.Equal(t, tt.expectedHeaders, headers)\n\t\t})\n\t}\n}\n" }, { "path": "internal/auth/type.go", "content": "package auth\n\ntype Type string\n\nconst (\n\tHttpType Type = \"http\"\n\tOAuth2 Type = \"oauth2\"\n\tOpenIdConnect Type = \"openIdConnect\"\n\tApiKey Type = \"apiKey\"\n\tMutualTLS Type = \"mutualTLS\"\n\tNone Type = \"none\"\n)\n" }, { "path": "internal/auth/uniq_name.go", "content": "package auth\n\nfunc GetSecuritySchemeUniqueName(securityScheme *SecurityScheme) string {\n\tif securityScheme == nil {\n\t\treturn \"\"\n\t}\n\n\tuniqueName := string(securityScheme.GetType()) + \"-\" + string(securityScheme.GetScheme())\n\tif securityScheme.GetIn() != nil {\n\t\tuniqueName += \"-\" + string(*securityScheme.GetIn())\n\t}\n\n\treturn uniqueName\n}\n" }, { "path": "internal/auth/uniq_name_test.go", "content": "package auth_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestGetSecuritySchemeUniqueName(t *testing.T) {\n\ttests := []struct {\n\t\tname string\n\t\tsecurityScheme *auth.SecurityScheme\n\t\texpected string\n\t}{\n\t\t{\n\t\t\tname: \"no auth security scheme\",\n\t\t\tsecurityScheme: auth.MustNewNoAuthSecurityScheme(),\n\t\t\texpected: \"none-None\",\n\t\t},\n\t\t{\n\t\t\tname: \"bearer security scheme\",\n\t\t\tsecurityScheme: auth.MustNewAuthorizationBearerSecurityScheme(\"name\", nil),\n\t\t\texpected: \"http-Bearer-header\",\n\t\t},\n\t\t{\n\t\t\tname: \"oauth security scheme\",\n\t\t\tsecurityScheme: auth.MustNewOAuthSecurityScheme(\"name\", nil, &auth.OAuthValue{}, nil),\n\t\t\texpected: \"oauth2-OAuth-header\",\n\t\t},\n\t}\n\n\tassert.Equal(t, \"\", auth.GetSecuritySchemeUniqueName(nil))\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tresult := auth.GetSecuritySchemeUniqueName(tt.securityScheme)\n\t\t\tassert.Equal(t, tt.expected, result)\n\t\t})\n\t}\n}\n" }, { "path": "internal/cmd/args.go", "content": "package cmd\n\nimport (\n\t\"github.com/cerberauth/cobracurl\"\n\t\"github.com/spf13/cobra\"\n)\n\nvar (\n\tincludeScans []string\n\texcludeScans []string\n\n\treportFormat string\n\treportTransport string\n\treportFile string\n\treportURL string\n\n\tnoProgress bool\n\tseverityThreshold float64\n)\n\nfunc AddCommonArgs(cmd *cobra.Command) {\n\tcobracurl.RegisterClientFlags(cmd.Flags())\n\tcobracurl.RegisterHeaderFlags(cmd.Flags())\n\tcobracurl.RegisterAuthFlags(cmd.Flags())\n\tcobracurl.RegisterRateFlag(cmd.Flags())\n\n\tcmd.Flags().StringP(\"rate-limit\", \"r\", \"\", \"Rate limit for requests (e.g. 10/s, 1/m)\")\n\tif err := cmd.Flags().MarkDeprecated(\"rate-limit\", \"use --rate instead\"); err != nil {\n\t\tpanic(err)\n\t}\n\n\tcmd.Flags().StringArrayVarP(&includeScans, \"scans\", \"\", includeScans, \"Include specific scans\")\n\tcmd.Flags().StringArrayVar(&excludeScans, \"exclude-scans\", excludeScans, \"Exclude specific scans\")\n\n\tcmd.Flags().StringVarP(&reportFormat, \"report-format\", \"\", \"table\", \"Report format (table, json, yaml)\")\n\tcmd.Flags().StringVarP(&reportTransport, \"report-transport\", \"\", \"file\", \"The transport to use for report (e.g. file, http)\")\n\tcmd.Flags().StringVarP(&reportFile, \"report-file\", \"\", \"\", \"The file to write the report to\")\n\tcmd.Flags().StringVarP(&reportURL, \"report-url\", \"\", \"\", \"The URL to send the report to\")\n\n\tcmd.Flags().BoolVarP(&noProgress, \"no-progress\", \"\", false, \"Disable progress output\")\n\tcmd.Flags().Float64VarP(&severityThreshold, \"severity-threshold\", \"\", 1, \"Threshold to trigger stderr output if at least one vulnerability CVSS is higher\")\n}\n\nfunc FilterScans(scans []string) []string {\n\tvar filtered []string\n\tfor _, s := range scans {\n\t\tif s != \"\" {\n\t\t\tfiltered = append(filtered, s)\n\t\t}\n\t}\n\treturn filtered\n}\n\nfunc GetIncludeScans() []string {\n\treturn FilterScans(includeScans)\n}\n\nfunc GetExcludeScans() []string {\n\treturn FilterScans(excludeScans)\n}\n\nfunc GetReportFormat() string {\n\treturn reportFormat\n}\n\nfunc GetReportTransport() string {\n\treturn reportTransport\n}\n\nfunc GetNoProgress() bool {\n\treturn noProgress\n}\n\nfunc GetSeverityThreshold() float64 {\n\treturn severityThreshold\n}\n\nfunc SetReportFile(f string) {\n\treportFile = f\n}\n\nfunc SetReportURL(u string) {\n\treportURL = u\n}\n\nfunc SetSeverityThreshold(t float64) {\n\tseverityThreshold = t\n}\n\nfunc ClearValues() {\n\tincludeScans = []string{}\n\texcludeScans = []string{}\n\treportFormat = \"table\"\n\treportTransport = \"file\"\n\treportFile = \"\"\n\treportURL = \"\"\n\tnoProgress = false\n\tseverityThreshold = 1\n}\n" }, { "path": "internal/cmd/args_test.go", "content": "package cmd_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/cmd\"\n\t\"github.com/spf13/cobra\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestAddCommonArgs(t *testing.T) {\n\ttests := []struct {\n\t\tname string\n\t\targs []string\n\t\texpected struct {\n\t\t\tincludeScans []string\n\t\t\texcludeScans []string\n\t\t\toutputFormat string\n\t\t\toutputTransport string\n\t\t\tnoProgress bool\n\t\t\tseverityThreshold float64\n\t\t}\n\t}{\n\t\t{\n\t\t\tname: \"default values\",\n\t\t\targs: []string{},\n\t\t\texpected: struct {\n\t\t\t\tincludeScans []string\n\t\t\t\texcludeScans []string\n\t\t\t\toutputFormat string\n\t\t\t\toutputTransport string\n\t\t\t\tnoProgress bool\n\t\t\t\tseverityThreshold float64\n\t\t\t}{\n\t\t\t\tincludeScans: nil,\n\t\t\t\texcludeScans: nil,\n\t\t\t\toutputFormat: \"table\",\n\t\t\t\toutputTransport: \"file\",\n\t\t\t\tnoProgress: false,\n\t\t\t\tseverityThreshold: 1,\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tname: \"custom values\",\n\t\t\targs: []string{\n\t\t\t\t\"--proxy=http://proxy.example.com\",\n\t\t\t\t\"--header=Authorization: Bearer token\",\n\t\t\t\t\"--cookie=sessionid=12345\",\n\t\t\t\t\"--scans=scan1\",\n\t\t\t\t\"--scans=scan2\",\n\t\t\t\t\"--report-format=json\",\n\t\t\t\t\"--report-transport=http\",\n\t\t\t\t\"--report-file=/tmp/output\",\n\t\t\t\t\"--report-url=http://example.com/output\",\n\t\t\t\t\"--no-progress\",\n\t\t\t\t\"--severity-threshold=5\",\n\t\t\t},\n\t\t\texpected: struct {\n\t\t\t\tincludeScans []string\n\t\t\t\texcludeScans []string\n\t\t\t\toutputFormat string\n\t\t\t\toutputTransport string\n\t\t\t\tnoProgress bool\n\t\t\t\tseverityThreshold float64\n\t\t\t}{\n\t\t\t\tincludeScans: []string{\"scan1\", \"scan2\"},\n\t\t\t\texcludeScans: nil,\n\t\t\t\toutputFormat: \"json\",\n\t\t\t\toutputTransport: \"http\",\n\t\t\t\tnoProgress: true,\n\t\t\t\tseverityThreshold: 5,\n\t\t\t},\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tcmd.ClearValues()\n\t\t\ttestCmd := &cobra.Command{}\n\t\t\tcmd.AddCommonArgs(testCmd)\n\t\t\ttestCmd.SetArgs(tt.args)\n\t\t\ttestCmd.Execute()\n\n\t\t\tassert.Equal(t, tt.expected.includeScans, cmd.GetIncludeScans())\n\t\t\tassert.Equal(t, tt.expected.excludeScans, cmd.GetExcludeScans())\n\t\t\tassert.Equal(t, tt.expected.outputFormat, cmd.GetReportFormat())\n\t\t\tassert.Equal(t, tt.expected.outputTransport, cmd.GetReportTransport())\n\t\t\tassert.Equal(t, tt.expected.noProgress, cmd.GetNoProgress())\n\t\t\tassert.Equal(t, tt.expected.severityThreshold, cmd.GetSeverityThreshold())\n\t\t})\n\t}\n}\n" }, { "path": "internal/cmd/http.go", "content": "package cmd\n\nimport (\n\t\"github.com/cerberauth/cobracurl\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/spf13/cobra\"\n)\n\nfunc NewHTTPClientFromCmd(cmd *cobra.Command) (*request.Client, error) {\n\thttpClient, err := cobracurl.BuildClient(cmd)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\t// Deprecated: --rate-limit is deprecated in favour of cobracurl's --rate flag.\n\t// Forward the value so existing usages keep working.\n\tif cmd.Flags().Changed(\"rate-limit\") {\n\t\trateLimit, _ := cmd.Flags().GetString(\"rate-limit\")\n\t\t_ = cmd.Flags().Set(\"rate\", rateLimit)\n\t}\n\n\tlimiter, err := cobracurl.BuildRateLimiter(cmd)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\treturn request.NewClientFromHTTPClient(httpClient, limiter), nil\n}\n" }, { "path": "internal/cmd/printtable/fingerprint_table.go", "content": "package printtable\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan/discover/fingerprint\"\n\t\"github.com/fatih/color\"\n)\n\nfunc FingerprintScanReport(reporter *report.Reporter) {\n\treport := reporter.GetScanReportByID(fingerprint.DiscoverFingerPrintScanID)\n\tif report == nil || !report.HasData() {\n\t\treturn\n\t}\n\n\tdata, ok := report.Data.(fingerprint.FingerPrintData)\n\tif !ok {\n\t\treturn\n\t}\n\n\trows := [][]string{}\n\tfor _, fp := range data.AuthServices {\n\t\trows = append(rows, []string{\"Authentication Service\", fp.Name})\n\t}\n\n\tfor _, fp := range data.CDNs {\n\t\trows = append(rows, []string{\"CDN\", fp.Name})\n\t}\n\n\tfor _, fp := range data.Caching {\n\t\trows = append(rows, []string{\"Caching\", fp.Name})\n\t}\n\n\tfor _, fp := range data.CertificateAuthority {\n\t\trows = append(rows, []string{\"Certificate Authority\", fp.Name})\n\t}\n\n\tfor _, fp := range data.Databases {\n\t\trows = append(rows, []string{\"Database\", fp.Name})\n\t}\n\n\tfor _, fp := range data.Frameworks {\n\t\trows = append(rows, []string{\"Framework\", fp.Name})\n\t}\n\n\tfor _, fp := range data.Hosting {\n\t\trows = append(rows, []string{\"Hosting\", fp.Name})\n\t}\n\n\tfor _, fp := range data.Languages {\n\t\trows = append(rows, []string{\"Language\", fp.Name})\n\t}\n\n\tfor _, fp := range data.OS {\n\t\trows = append(rows, []string{\"Operating System\", fp.Name})\n\t}\n\n\tfor _, fp := range data.SecurityServices {\n\t\trows = append(rows, []string{\"Security Service\", fp.Name})\n\t}\n\n\tfor _, fp := range data.ServerExtensions {\n\t\trows = append(rows, []string{\"Server Extension\", fp.Name})\n\t}\n\n\tfor _, fp := range data.Servers {\n\t\trows = append(rows, []string{\"Server\", fp.Name})\n\t}\n\n\tif len(rows) == 0 {\n\t\treturn\n\t}\n\n\tfmt.Println()\n\theaders := []string{\"Technologie/Service\", \"Value\"}\n\ttable := CreateTable(headers)\n\n\tbold := color.New(color.Bold).SprintFunc()\n\n\tfor _, row := range rows {\n\t\trowAny := []any{\n\t\t\tbold(row[0]),\n\t\t\tbold(row[1]),\n\t\t}\n\t\t_ = table.Append(rowAny...)\n\t}\n\n\t_ = table.Render()\n\tfmt.Println()\n}\n" }, { "path": "internal/cmd/printtable/printttable.go", "content": "package printtable\n\nimport (\n\t\"fmt\"\n\t\"os\"\n\n\t\"github.com/olekukonko/tablewriter\"\n\t\"github.com/olekukonko/tablewriter/renderer\"\n\t\"github.com/olekukonko/tablewriter/tw\"\n)\n\nfunc CreateTable(headers []string) *tablewriter.Table {\n\ttable := tablewriter.NewTable(os.Stdout,\n\t\ttablewriter.WithRenderer(renderer.NewBlueprint(tw.Rendition{\n\t\t\tBorders: tw.Border{\n\t\t\t\tLeft: tw.On,\n\t\t\t\tRight: tw.On,\n\t\t\t},\n\t\t\tSettings: tw.Settings{\n\t\t\t\tSeparators: tw.Separators{\n\t\t\t\t\tBetweenColumns: tw.On,\n\t\t\t\t},\n\t\t\t},\n\t\t})),\n\t\ttablewriter.WithConfig(tablewriter.Config{\n\t\t\tHeader: tw.CellConfig{\n\t\t\t\tAlignment: tw.CellAlignment{Global: tw.AlignLeft},\n\t\t\t},\n\t\t\tRow: tw.CellConfig{\n\t\t\t\tAlignment: tw.CellAlignment{Global: tw.AlignLeft},\n\t\t\t\tMerging: tw.CellMerging{\n\t\t\t\t\tMode: tw.MergeHorizontal,\n\t\t\t\t\tByColumnIndex: tw.NewBoolMapper(0),\n\t\t\t\t},\n\t\t\t},\n\t\t}),\n\t)\n\n\t// Convert headers to []any for the new API\n\theaderAny := make([]any, len(headers))\n\tfor i, h := range headers {\n\t\theaderAny[i] = h\n\t}\n\ttable.Header(headerAny...)\n\n\treturn table\n}\n\nfunc DisplayUnexpectedErrorMessage() {\n\tfmt.Println()\n\tfmt.Println(\"If you think that report is not accurate or if you have any suggestions for improvements, please open an issue at: https://github.com/cerberauth/vulnapi/issues/new.\")\n}\n" }, { "path": "internal/cmd/printtable/report_table.go", "content": "package printtable\n\nimport (\n\t\"fmt\"\n\t\"sort\"\n\t\"strings\"\n\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/fatih/color\"\n\t\"golang.org/x/text/cases\"\n\t\"golang.org/x/text/language\"\n)\n\ntype ScanIssueReport struct {\n\tOperationMethod string `json:\"method\"`\n\tOperationPath string `json:\"path\"`\n\n\tIssue *report.IssueReport `json:\"issue\"`\n}\n\ntype SortByPathAndSeverity []*ScanIssueReport\n\nfunc (a SortByPathAndSeverity) Len() int { return len(a) }\nfunc (a SortByPathAndSeverity) Swap(i, j int) { a[i], a[j] = a[j], a[i] }\nfunc (a SortByPathAndSeverity) Less(i, j int) bool {\n\tif a[i].OperationPath == a[j].OperationPath {\n\t\tif a[i].OperationMethod == a[j].OperationMethod {\n\t\t\treturn a[i].Issue.CVSS.Score > a[j].Issue.CVSS.Score\n\t\t}\n\n\t\treturn a[i].OperationMethod < a[j].OperationMethod\n\t}\n\n\treturn a[i].OperationPath < a[j].OperationPath\n}\n\nfunc NewScanIssueReports(r *report.ScanReport) []*ScanIssueReport {\n\treports := r.GetFailedIssueReports()\n\tissues := make([]*ScanIssueReport, 0, len(reports))\n\tfor _, ir := range reports {\n\t\tissues = append(issues, &ScanIssueReport{\n\t\t\tOperationMethod: ir.Operation.Method,\n\t\t\tOperationPath: ir.Operation.URL.Path,\n\n\t\t\tIssue: ir,\n\t\t})\n\t}\n\n\treturn issues\n}\n\nfunc NewFullScanIssueReports(reports []*report.ScanReport) []*ScanIssueReport {\n\tvulns := make([]*ScanIssueReport, 0)\n\tfor _, r := range reports {\n\t\tvulns = append(vulns, NewScanIssueReports(r)...)\n\t}\n\n\tsort.Sort(SortByPathAndSeverity(vulns))\n\n\treturn vulns\n}\n\nfunc severityTableColor(v *report.IssueReport) color.Attribute {\n\tswitch {\n\tcase v.IsLowRiskSeverity() || v.IsInfoRiskSeverity():\n\t\treturn color.BgBlue\n\tcase v.IsMediumRiskSeverity():\n\t\treturn color.BgYellow\n\tcase v.IsHighRiskSeverity():\n\t\treturn color.BgRed\n\tcase v.IsCriticalRiskSeverity():\n\t\treturn color.BgHiRed\n\t}\n\n\treturn color.BgWhite\n}\n\nfunc DisplayReportSummaryTable(r *report.Reporter) {\n\tif r == nil || len(r.GetScanReports()) == 0 {\n\t\treturn\n\t}\n\n\tfmt.Println()\n\theaders := []string{\"Status\", \"Scans Number\"}\n\ttable := CreateTable(headers)\n\n\tbold := color.New(color.Bold).SprintFunc()\n\tstatusCaser := cases.Title(language.English)\n\tfor _, status := range report.IssueReportStatuses {\n\t\tscansNumber := len(r.GetReportsByIssueStatus(status))\n\n\t\trow := []any{\n\t\t\tbold(statusCaser.String(strings.ToLower(status.String()))),\n\t\t\tbold(fmt.Sprintf(\"%d\", scansNumber)),\n\t\t}\n\n\t\t_ = table.Append(row...)\n\t}\n\n\t_ = table.Render()\n\tfmt.Println()\n}\n\nfunc DisplayReportTable(r *report.Reporter) {\n\tif r == nil || !r.HasIssue() {\n\t\treturn\n\t}\n\n\theaders := []string{\"Operation\", \"Risk Level\", \"CVSS 4.0 Score\", \"OWASP\", \"Issue\"}\n\ttable := CreateTable(headers)\n\n\tIssueReports := NewFullScanIssueReports(r.GetScanReports())\n\tfor _, issueReport := range IssueReports {\n\t\t// Apply color to severity level column\n\t\tseverityColor := color.New(color.Bold, severityTableColor(issueReport.Issue)).SprintFunc()\n\n\t\trow := []any{\n\t\t\tfmt.Sprintf(\"%s %s\", issueReport.OperationMethod, issueReport.OperationPath),\n\t\t\tseverityColor(issueReport.Issue.SeverityLevelString()),\n\t\t\tfmt.Sprintf(\"%.1f\", issueReport.Issue.CVSS.Score),\n\t\t\tstring(issueReport.Issue.Classifications.OWASP),\n\t\t\tissueReport.Issue.Name,\n\t\t}\n\n\t\t_ = table.Append(row...)\n\t}\n\n\terrors := r.GetErrors()\n\tif len(errors) > 0 {\n\t\tfmt.Println()\n\t\tfmt.Println(\"Errors:\")\n\t\tfor _, err := range errors {\n\t\t\tfmt.Printf(\" - %s\\n\", err)\n\t\t}\n\t}\n\n\t_ = table.Render()\n\tfmt.Println()\n}\n" }, { "path": "internal/cmd/printtable/report_table_test.go", "content": "package printtable_test\n\nimport (\n\t\"testing\"\n\n\tprinttable \"github.com/cerberauth/vulnapi/internal/cmd/printtable\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewScanIssueReports(t *testing.T) {\n\toperation := operation.MustNewOperation(\"GET\", \"/api/v1/\", nil, nil)\n\tsr := &report.ScanReport{\n\t\tIssues: []*report.IssueReport{\n\t\t\t{\n\t\t\t\tIssue: report.Issue{\n\t\t\t\t\tName: \"Vuln1\",\n\t\t\t\t\tCVSS: report.CVSS{\n\t\t\t\t\t\tScore: 5.0,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tStatus: report.IssueReportStatusFailed,\n\t\t\t\tOperation: operation,\n\t\t\t},\n\t\t\t{\n\t\t\t\tIssue: report.Issue{\n\t\t\t\t\tName: \"Vuln2\",\n\t\t\t\t\tCVSS: report.CVSS{\n\t\t\t\t\t\tScore: 5.0,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tStatus: report.IssueReportStatusFailed,\n\t\t\t\tOperation: operation,\n\t\t\t},\n\t\t},\n\t}\n\n\tissues := printtable.NewScanIssueReports(sr)\n\n\tassert.Len(t, issues, 2)\n\tassert.Equal(t, \"GET\", issues[0].OperationMethod)\n\tassert.Equal(t, \"/api/v1/\", issues[0].OperationPath)\n\tassert.Equal(t, \"Vuln1\", issues[0].Issue.Name)\n\tassert.Equal(t, \"GET\", issues[1].OperationMethod)\n\tassert.Equal(t, \"/api/v1/\", issues[1].OperationPath)\n\tassert.Equal(t, \"Vuln2\", issues[1].Issue.Name)\n}\n\nfunc TestNewFullScanIssueReports(t *testing.T) {\n\toperation := operation.MustNewOperation(\"GET\", \"/api/v1/\", nil, nil)\n\tsr1 := &report.ScanReport{\n\t\tIssues: []*report.IssueReport{\n\t\t\t{\n\t\t\t\tIssue: report.Issue{\n\t\t\t\t\tName: \"Vuln1\",\n\t\t\t\t\tCVSS: report.CVSS{\n\t\t\t\t\t\tScore: 5.0,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tStatus: report.IssueReportStatusFailed,\n\t\t\t\tOperation: operation,\n\t\t\t},\n\t\t\t{\n\t\t\t\tIssue: report.Issue{\n\t\t\t\t\tName: \"Vuln2\",\n\t\t\t\t\tCVSS: report.CVSS{\n\t\t\t\t\t\tScore: 5.0,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tStatus: report.IssueReportStatusFailed,\n\t\t\t\tOperation: operation,\n\t\t\t},\n\t\t},\n\t}\n\tsr2 := &report.ScanReport{\n\t\tIssues: []*report.IssueReport{\n\t\t\t{\n\t\t\t\tIssue: report.Issue{\n\t\t\t\t\tName: \"Vuln3\",\n\t\t\t\t\tCVSS: report.CVSS{\n\t\t\t\t\t\tScore: 5.0,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tStatus: report.IssueReportStatusFailed,\n\t\t\t\tOperation: operation,\n\t\t\t},\n\t\t\t{\n\t\t\t\tIssue: report.Issue{\n\t\t\t\t\tName: \"Vuln4\",\n\t\t\t\t\tCVSS: report.CVSS{\n\t\t\t\t\t\tScore: 5.0,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tStatus: report.IssueReportStatusFailed,\n\t\t\t\tOperation: operation,\n\t\t\t},\n\t\t},\n\n\t\tOperation: &report.ScanReportOperation{\n\t\t\tID: \"id\",\n\t\t},\n\t}\n\n\tissues := printtable.NewFullScanIssueReports([]*report.ScanReport{sr1, sr2})\n\n\tassert.Len(t, issues, 4)\n\tassert.Equal(t, \"GET\", issues[0].OperationMethod)\n\tassert.Equal(t, \"/api/v1/\", issues[0].OperationPath)\n\tassert.Equal(t, \"Vuln1\", issues[0].Issue.Name)\n\tassert.Equal(t, \"GET\", issues[1].OperationMethod)\n\tassert.Equal(t, \"/api/v1/\", issues[1].OperationPath)\n\tassert.Equal(t, \"Vuln2\", issues[1].Issue.Name)\n\tassert.Equal(t, \"GET\", issues[2].OperationMethod)\n\tassert.Equal(t, \"/api/v1/\", issues[2].OperationPath)\n\tassert.Equal(t, \"Vuln3\", issues[2].Issue.Name)\n\tassert.Equal(t, \"GET\", issues[3].OperationMethod)\n\tassert.Equal(t, \"/api/v1/\", issues[3].OperationPath)\n\tassert.Equal(t, \"Vuln4\", issues[3].Issue.Name)\n}\n" }, { "path": "internal/cmd/printtable/wellknown_paths_table.go", "content": "package printtable\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan/discover\"\n\tdiscoverablegraphql \"github.com/cerberauth/vulnapi/scan/discover/discoverable_graphql\"\n\tdiscoverableopenapi \"github.com/cerberauth/vulnapi/scan/discover/discoverable_openapi\"\n\texposedfiles \"github.com/cerberauth/vulnapi/scan/discover/exposed_files\"\n\t\"github.com/cerberauth/vulnapi/scan/discover/healthcheck\"\n\twellknown \"github.com/cerberauth/vulnapi/scan/discover/well-known\"\n\t\"github.com/fatih/color\"\n)\n\nfunc wellKnownPathsFromReport(r *report.ScanReport, header string) [][]string {\n\trows := [][]string{}\n\tif r == nil || !r.HasData() {\n\t\treturn rows\n\t}\n\n\tdata, ok := r.Data.(discover.DiscoverData)\n\tif ok && len(data) > 0 {\n\t\trows = append(rows, []string{header, data[0].URL})\n\t}\n\n\treturn rows\n}\n\nfunc WellKnownPathsScanReport(reporter *report.Reporter) {\n\trows := [][]string{}\n\n\topenapiReport := reporter.GetScanReportByID(discoverableopenapi.DiscoverableOpenAPIScanID)\n\trows = append(rows, wellKnownPathsFromReport(openapiReport, \"OpenAPI\")...)\n\n\tgraphqlReport := reporter.GetScanReportByID(discoverablegraphql.DiscoverableGraphQLPathScanID)\n\trows = append(rows, wellKnownPathsFromReport(graphqlReport, \"GraphQL\")...)\n\n\twellKnownReport := reporter.GetScanReportByID(wellknown.DiscoverableWellKnownScanID)\n\trows = append(rows, wellKnownPathsFromReport(wellKnownReport, \"Well-Known\")...)\n\n\texposedFiles := reporter.GetScanReportByID(exposedfiles.DiscoverableFilesScanID)\n\trows = append(rows, wellKnownPathsFromReport(exposedFiles, \"Exposed Files\")...)\n\n\thealthcheckEndpoints := reporter.GetScanReportByID(healthcheck.DiscoverableHealthCheckScanID)\n\trows = append(rows, wellKnownPathsFromReport(healthcheckEndpoints, \"Health Check\")...)\n\n\tif len(rows) == 0 {\n\t\treturn\n\t}\n\n\tfmt.Println()\n\theaders := []string{\"Type\", \"URL\"}\n\ttable := CreateTable(headers)\n\n\tbold := color.New(color.Bold).SprintFunc()\n\n\tfor _, row := range rows {\n\t\trowAny := []any{\n\t\t\tbold(row[0]),\n\t\t\tbold(row[1]),\n\t\t}\n\t\t_ = table.Append(rowAny...)\n\t}\n\n\t_ = table.Render()\n\tfmt.Println()\n}\n" }, { "path": "internal/cmd/progressbar.go", "content": "package cmd\n\nimport (\n\t\"github.com/schollz/progressbar/v3\"\n)\n\nfunc NewProgressBar(max int) *progressbar.ProgressBar {\n\treturn progressbar.NewOptions(max,\n\t\tprogressbar.OptionFullWidth(),\n\t\tprogressbar.OptionSetElapsedTime(false),\n\t\tprogressbar.OptionSetPredictTime(false),\n\t\tprogressbar.OptionShowCount(),\n\t)\n}\n" }, { "path": "internal/cmd/report.go", "content": "package cmd\n\nimport (\n\t\"encoding/json\"\n\t\"fmt\"\n\t\"os\"\n\n\tprinttable \"github.com/cerberauth/vulnapi/internal/cmd/printtable\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"gopkg.in/yaml.v3\"\n)\n\nfunc PrintOrExportReport(format string, transport string, report *report.Reporter) error {\n\toutputStream := os.Stdout\n\tif report.HasHigherThanSeverityThresholdIssue(GetSeverityThreshold()) {\n\t\toutputStream = os.Stderr\n\t}\n\n\tvar outputMessage string\n\tswitch {\n\tcase !report.HasIssue():\n\t\toutputMessage = \"Success: No issue detected!\"\n\tcase report.HasHighRiskOrHigherSeverityIssue():\n\t\toutputMessage = \"Error: There are some high-risk issues. It's advised to take immediate action.\"\n\tdefault:\n\t\toutputMessage = \"Warning: There are some issues. It's advised to take action.\"\n\t}\n\n\tfmt.Println()\n\tfmt.Fprintln(outputStream, outputMessage)\n\n\tvar output []byte\n\tvar err error\n\tswitch format {\n\tcase \"json\":\n\t\toutput, err = ExportJSON(report)\n\tcase \"yaml\":\n\t\toutput, err = ExportYAML(report)\n\tcase \"table\":\n\t\tPrintTable(report)\n\t}\n\n\tif err != nil {\n\t\treturn err\n\t}\n\n\tif output != nil && transport != \"\" {\n\t\texportErr := exportWithTransport(transport, output)\n\t\tif exportErr != nil {\n\t\t\treturn exportErr\n\t\t}\n\t}\n\n\treturn nil\n}\n\nfunc PrintTable(report *report.Reporter) {\n\tprinttable.WellKnownPathsScanReport(report)\n\tprinttable.FingerprintScanReport(report)\n\tprinttable.DisplayReportSummaryTable(report)\n\tprinttable.DisplayReportTable(report)\n}\n\nfunc ExportJSON(report *report.Reporter) ([]byte, error) {\n\treturn json.Marshal(report)\n}\n\nfunc ExportYAML(report *report.Reporter) ([]byte, error) {\n\treturn yaml.Marshal(report)\n}\n\nfunc exportWithTransport(transport string, output []byte) error {\n\tswitch transport {\n\tcase \"file\":\n\t\tif reportFile == \"\" {\n\t\t\treturn fmt.Errorf(\"output file is not specified\")\n\t\t}\n\t\treturn writeFile(reportFile, output)\n\tcase \"http\":\n\t\tif reportURL == \"\" {\n\t\t\treturn fmt.Errorf(\"output URL is not specified\")\n\t\t}\n\t\treturn sendHTTP(reportURL, output)\n\t}\n\n\treturn nil\n}\n\nfunc writeFile(path string, output []byte) error {\n\tfile, err := os.Create(path)\n\tif err != nil {\n\t\treturn err\n\t}\n\tdefer file.Close()\n\n\t_, err = file.Write(output)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\treturn nil\n}\n\nfunc sendHTTP(outputURL string, output []byte) error {\n\treturn fmt.Errorf(\"HTTP transport not implemented yet\")\n}\n" }, { "path": "internal/operation/operation.go", "content": "package operation\n\nimport (\n\t\"bytes\"\n\t\"crypto/tls\"\n\t\"fmt\"\n\t\"io\"\n\t\"net\"\n\t\"net/http\"\n\t\"net/url\"\n\t\"regexp\"\n\t\"strings\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/getkin/kin-openapi/openapi3\"\n\t\"golang.org/x/text/cases\"\n\t\"golang.org/x/text/language\"\n)\n\nfunc GenerateOperationID(method string, path string) string {\n\tidSource := strings.ToLower(method)\n\tpathParts := strings.Split(path, \"/\")\n\tnewPathParts := []string{}\n\tcaser := cases.Title(language.English)\n\tfor _, part := range pathParts {\n\t\tif part != \"\" {\n\t\t\tnewPathParts = append(newPathParts, caser.String(part))\n\t\t}\n\t}\n\tif len(newPathParts) == 0 {\n\t\treturn idSource + \"Root\"\n\t}\n\n\tidSource += strings.Join(newPathParts, \"\")\n\tre := regexp.MustCompile(`[^a-zA-Z0-9]+`)\n\treturn re.ReplaceAllString(idSource, \"\")\n}\n\ntype Operation struct {\n\t*request.Client `json:\"-\" yaml:\"-\"`\n\n\tOpenAPIDocPath *string `json:\"-\" yaml:\"-\"`\n\tID string `json:\"id\" yaml:\"id\"`\n\n\tMethod string `json:\"method\" yaml:\"method\"`\n\tURL url.URL `json:\"url\" yaml:\"url\"`\n\tBody []byte `json:\"body,omitempty\" yaml:\"body,omitempty\"`\n\tCookies []*http.Cookie `json:\"cookies,omitempty\" yaml:\"cookies,omitempty\"`\n\tHeader http.Header `json:\"header,omitempty\" yaml:\"header,omitempty\"`\n\tSecuritySchemes []*auth.SecurityScheme `json:\"securitySchemes\" yaml:\"securitySchemes\"`\n}\n\nfunc getBody(body io.Reader) ([]byte, error) {\n\tif body == nil {\n\t\treturn nil, nil\n\t}\n\n\tif bodyBuffer, ok := body.(*bytes.Buffer); ok {\n\t\tif bodyBuffer == nil {\n\t\t\treturn nil, nil\n\t\t}\n\t\treturn bodyBuffer.Bytes(), nil\n\t}\n\n\treturn io.ReadAll(body)\n}\n\nfunc NewOperation(method string, operationUrl string, body io.Reader, client *request.Client) (*Operation, error) {\n\toperationClient := client\n\tif operationClient == nil {\n\t\toperationClient = request.GetDefaultClient()\n\t}\n\n\tparsedUrl, err := url.Parse(operationUrl)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tbodyBuffer, err := getBody(body)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\treturn &Operation{\n\t\tClient: operationClient,\n\n\t\tMethod: method,\n\t\tURL: *parsedUrl,\n\t\tBody: bodyBuffer,\n\t\tCookies: []*http.Cookie{},\n\t\tHeader: http.Header{},\n\t\tSecuritySchemes: []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()},\n\t}, nil\n}\n\nfunc MustNewOperation(method string, operationUrl string, body *bytes.Buffer, client *request.Client) *Operation {\n\toperation, err := NewOperation(method, operationUrl, body, client)\n\tif err != nil {\n\t\tpanic(err)\n\t}\n\treturn operation\n}\n\nfunc (operation *Operation) IsReachable() error {\n\thost := operation.URL.Host\n\tif _, _, err := net.SplitHostPort(host); err != nil {\n\t\tswitch operation.URL.Scheme {\n\t\tcase \"http\":\n\t\t\thost += \":80\"\n\t\tcase \"https\":\n\t\t\thost += \":443\"\n\t\tdefault:\n\t\t\treturn fmt.Errorf(\"unsupported scheme: %s\", operation.URL.Scheme)\n\t\t}\n\t}\n\n\tif operation.URL.Scheme == \"https\" {\n\t\ttlsConfig := operation.Client.Transport.(*http.Transport).TLSClientConfig\n\t\tif tlsConfig == nil || !tlsConfig.InsecureSkipVerify {\n\t\t\ttlsConn, err := tls.Dial(\"tcp\", host, tlsConfig)\n\t\t\tif err != nil {\n\t\t\t\treturn err\n\t\t\t}\n\t\t\tdefer tlsConn.Close()\n\t\t}\n\t}\n\n\tdialConn, err := net.DialTimeout(\"tcp\", host, operation.Timeout)\n\tif err != nil {\n\t\treturn err\n\t}\n\tdefer dialConn.Close()\n\n\treturn nil\n}\n\nfunc NewOperationFromRequest(r *request.Request) (*Operation, error) {\n\treturn &Operation{\n\t\tID: r.GetURL(),\n\t\tMethod: r.GetMethod(),\n\t\tURL: *r.HttpRequest.URL,\n\t\tHeader: r.GetHeader(),\n\t\tCookies: r.GetCookies(),\n\t\tBody: r.GetBody(),\n\n\t\tSecuritySchemes: []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()},\n\t}, nil\n}\n\nfunc (operation *Operation) WithOpenapiOperation(docPath string, openapiOperation *openapi3.Operation) *Operation {\n\tif openapiOperation.OperationID != \"\" {\n\t\toperation.SetID(openapiOperation.OperationID)\n\t} else {\n\t\toperation.SetID(GenerateOperationID(operation.Method, docPath))\n\t}\n\toperation.OpenAPIDocPath = &docPath\n\n\treturn operation\n}\n\nfunc (operation *Operation) WithHeader(header http.Header) *Operation {\n\toperation.Header = header\n\treturn operation\n}\n\nfunc (operation *Operation) WithCookies(cookies []*http.Cookie) *Operation {\n\toperation.Cookies = cookies\n\treturn operation\n}\n\nfunc (operation *Operation) NewRequest() (*request.Request, error) {\n\treq, err := request.NewRequest(operation.Method, operation.URL.String(), bytes.NewReader(operation.Body), operation.Client)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\treq.WithHeader(operation.Header).WithCookies(operation.Cookies)\n\n\treturn req, nil\n}\n\nfunc (operation *Operation) GetSecuritySchemes() []*auth.SecurityScheme {\n\tif operation.SecuritySchemes == nil {\n\t\treturn []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()}\n\t}\n\treturn operation.SecuritySchemes\n}\n\nfunc (operation *Operation) GetSecurityScheme() *auth.SecurityScheme {\n\tif len(operation.SecuritySchemes) == 0 {\n\t\treturn auth.MustNewNoAuthSecurityScheme()\n\t}\n\treturn operation.SecuritySchemes[0]\n}\n\nfunc (operation *Operation) SetSecuritySchemes(securitySchemes []*auth.SecurityScheme) *Operation {\n\toperation.SecuritySchemes = securitySchemes\n\treturn operation\n}\n\nfunc (operation *Operation) GetPath() string {\n\treturn operation.URL.Path\n}\n\nfunc (operation *Operation) GetOpenAPIDocPath() *string {\n\treturn operation.OpenAPIDocPath\n}\n\nfunc (operation *Operation) SetID(id string) *Operation {\n\toperation.ID = id\n\treturn operation\n}\n\nfunc (operation *Operation) GenerateID() *Operation {\n\toperation.SetID(GenerateOperationID(operation.Method, operation.URL.Path))\n\treturn operation\n}\n\nfunc (operation *Operation) GetID() string {\n\treturn operation.ID\n}\n\nfunc (o *Operation) Clone() (*Operation, error) {\n\tvar clonedSecuritySchemes []*auth.SecurityScheme\n\tif o.SecuritySchemes != nil {\n\t\tclonedSecuritySchemes = make([]*auth.SecurityScheme, len(o.SecuritySchemes))\n\t\tcopy(clonedSecuritySchemes, o.SecuritySchemes)\n\t}\n\n\treturn &Operation{\n\t\tClient: o.Client,\n\n\t\tMethod: o.Method,\n\t\tURL: o.URL,\n\t\tBody: o.Body,\n\t\tCookies: o.Cookies,\n\t\tHeader: o.Header,\n\t\tSecuritySchemes: clonedSecuritySchemes,\n\n\t\tID: o.ID,\n\t}, nil\n}\n" }, { "path": "internal/operation/operation_test.go", "content": "package operation_test\n\nimport (\n\t\"bytes\"\n\t\"encoding/json\"\n\t\"net/http\"\n\t\"net/http/httptest\"\n\t\"strings\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/getkin/kin-openapi/openapi3\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewOperation(t *testing.T) {\n\turl := \"http://example.com\"\n\tmethod := http.MethodGet\n\tbody := bytes.NewBufferString(\"test\")\n\n\toperation, err := operation.NewOperation(http.MethodGet, url, body, nil)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, url, operation.URL.String())\n\tassert.Equal(t, method, operation.Method)\n\tassert.Equal(t, []byte(\"test\"), operation.Body)\n}\n\nfunc TestMustNewOperation(t *testing.T) {\n\tt.Run(\"ValidOperation\", func(t *testing.T) {\n\t\turl := \"http://example.com\"\n\t\tmethod := http.MethodGet\n\t\tbody := bytes.NewBufferString(\"test\")\n\n\t\toperation := operation.MustNewOperation(method, url, body, nil)\n\n\t\tassert.NotNil(t, operation)\n\t\tassert.Equal(t, url, operation.URL.String())\n\t\tassert.Equal(t, method, operation.Method)\n\t\tassert.Equal(t, []byte(\"test\"), operation.Body)\n\t})\n\n\tt.Run(\"InvalidURL\", func(t *testing.T) {\n\t\tdefer func() {\n\t\t\tif r := recover(); r == nil {\n\t\t\t\tt.Errorf(\"Expected panic for invalid URL, but did not panic\")\n\t\t\t}\n\t\t}()\n\n\t\toperation.MustNewOperation(http.MethodGet, \":\", nil, nil)\n\t})\n}\n\nfunc TestOperation_IsReachable(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\n\turl := server.URL\n\toperation, _ := operation.NewOperation(http.MethodGet, url, nil, nil)\n\terr := operation.IsReachable()\n\n\tassert.NoError(t, err)\n}\n\nfunc TestOperation_IsReachableWhenNotReachable(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8009\", nil, nil)\n\n\terr := operation.IsReachable()\n\n\tassert.Error(t, err)\n\tassert.Contains(t, err.Error(), \":8009: connect: connection refused\")\n}\n\nfunc TestOperation_IsReachableWhenHTTPs(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodGet, \"https://localhost:443\", nil, nil)\n\n\terr := operation.IsReachable()\n\n\tassert.Error(t, err)\n\tassert.Contains(t, err.Error(), \"connect: connection refused\")\n}\n\nfunc TestOperation_IsReachableWhenHTTPsAndNoPort(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodGet, \"https://localhost\", nil, nil)\n\n\terr := operation.IsReachable()\n\n\tassert.Error(t, err)\n\tassert.Contains(t, err.Error(), \":443: connect: connection refused\")\n}\n\nfunc TestOperation_IsReachableWhenHTTPAndNoPort(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost\", nil, nil)\n\n\terr := operation.IsReachable()\n\n\tassert.Error(t, err)\n\tassert.Contains(t, err.Error(), \":80: connect: connection refused\")\n}\n\nfunc TestOperation_IsReachableWhenUnsupportedScheme(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodGet, \"ftp://localhost\", nil, nil)\n\n\terr := operation.IsReachable()\n\n\tassert.Error(t, err)\n\tassert.Equal(t, \"unsupported scheme: ftp\", err.Error())\n}\n\nfunc TestNewOperationFromRequest(t *testing.T) {\n\tr, _ := request.NewRequest(http.MethodGet, \"http://example.com\", nil, nil)\n\tr.WithHeader(http.Header{\n\t\t\"Content-Type\": []string{\"application/json\"},\n\t})\n\tr.WithCookies([]*http.Cookie{\n\t\t{\n\t\t\tName: \"cookie1\",\n\t\t\tValue: \"value1\",\n\t\t},\n\t})\n\toperation, err := operation.NewOperationFromRequest(r)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, r.HttpRequest.URL.String(), operation.URL.String())\n\tassert.Equal(t, r.HttpRequest.Method, operation.Method)\n\tassert.Equal(t, r.HttpRequest.Header, operation.Header)\n\tassert.Equal(t, r.HttpRequest.Cookies(), operation.Cookies)\n}\n\nfunc TestNewOperationFromRequest_WithBody(t *testing.T) {\n\tbody := strings.NewReader(\"test\")\n\tr, _ := request.NewRequest(http.MethodPost, \"http://example.com\", body, nil)\n\theader := http.Header{}\n\tr.WithHeader(header)\n\tcookies := []*http.Cookie{}\n\tr.WithCookies(cookies)\n\toperation, err := operation.NewOperationFromRequest(r)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, r.HttpRequest.URL.String(), operation.URL.String())\n\tassert.Equal(t, r.HttpRequest.Method, operation.Method)\n\tassert.Equal(t, []byte(\"test\"), operation.Body)\n}\n\nfunc TestOperation_GetSecurityScheme(t *testing.T) {\n\tt.Run(\"NoSecuritySchemes\", func(t *testing.T) {\n\t\toperation := &operation.Operation{}\n\t\texpectedScheme := auth.MustNewNoAuthSecurityScheme()\n\n\t\tscheme := operation.GetSecurityScheme()\n\n\t\tassert.Equal(t, expectedScheme, scheme)\n\t})\n\n\tt.Run(\"WithSecuritySchemes\", func(t *testing.T) {\n\t\texpectedScheme := auth.MustNewNoAuthSecurityScheme()\n\t\toperation := &operation.Operation{\n\t\t\tSecuritySchemes: []*auth.SecurityScheme{expectedScheme},\n\t\t}\n\n\t\tscheme := operation.GetSecurityScheme()\n\n\t\tassert.Equal(t, expectedScheme, scheme)\n\t})\n}\n\nfunc TestOperationCloneWithSecuritySchemes(t *testing.T) {\n\tsecuritySchemes := []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()}\n\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://example.com\", nil, nil)\n\toperation.SetSecuritySchemes(securitySchemes)\n\n\tclonedOperation, err := operation.Clone()\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, operation.URL, clonedOperation.URL)\n\tassert.Equal(t, operation.Method, clonedOperation.Method)\n\tassert.Equal(t, operation.SecuritySchemes, clonedOperation.SecuritySchemes)\n}\n\nfunc TestOperation_WithOpenapiOperation(t *testing.T) {\n\toperation, _ := operation.NewOperation(http.MethodGet, \"http://example.com\", nil, nil)\n\topenapiOperation := &openapi3.Operation{\n\t\tOperationID: \"testOperation\",\n\t}\n\n\toperation.WithOpenapiOperation(\"/\", openapiOperation)\n\n\tassert.Equal(t, openapiOperation.OperationID, operation.GetID())\n}\n\nfunc TestOperation_WithOpenapiOperation_WithoutOperationID(t *testing.T) {\n\toperation, _ := operation.NewOperation(http.MethodGet, \"http://example.com/resource\", nil, nil)\n\topenapiOperation := &openapi3.Operation{}\n\n\toperation.WithOpenapiOperation(\"/resource\", openapiOperation)\n\n\tassert.Equal(t, \"getResource\", operation.GetID())\n}\n\nfunc TestOperation_WithOpenapiOperation_WithoutOperationIDAndParameters(t *testing.T) {\n\toperation, _ := operation.NewOperation(http.MethodGet, \"http://example.com/resource\", nil, nil)\n\topenapiOperation := &openapi3.Operation{}\n\n\toperation.WithOpenapiOperation(\"/resource/{id}\", openapiOperation)\n\n\tassert.Equal(t, \"getResourceId\", operation.GetID())\n}\n\nfunc TestOperation_WithHeader(t *testing.T) {\n\toperation := &operation.Operation{}\n\theader := http.Header{\n\t\t\"Content-Type\": []string{\"application/json\"},\n\t}\n\n\toperation.WithHeader(header)\n\n\tassert.Equal(t, header, operation.Header)\n}\n\nfunc TestOperation_WithCookies(t *testing.T) {\n\toperation := &operation.Operation{}\n\tcookies := []*http.Cookie{{\n\t\tName: \"cookie1\",\n\t\tValue: \"value1\",\n\t}}\n\n\toperation.WithCookies(cookies)\n\n\tassert.Equal(t, cookies, operation.Cookies)\n}\n\nfunc TestOperation_GenerateID(t *testing.T) {\n\ttests := []struct {\n\t\tmethod string\n\t\turl string\n\t\texpected string\n\t}{\n\t\t{http.MethodGet, \"http://example.com/\", \"getRoot\"},\n\t\t{http.MethodGet, \"http://example.com/path/to/resource\", \"getPathToResource\"},\n\t\t{http.MethodPost, \"http://example.com/path/to/resource\", \"postPathToResource\"},\n\t\t{http.MethodPut, \"http://example.com/path/to/resource\", \"putPathToResource\"},\n\t\t{http.MethodDelete, \"http://example.com/path/to/resource\", \"deletePathToResource\"},\n\t\t{http.MethodGet, \"http://example.com/path/to/resource{[]}\", \"getPathToResource\"},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.method+\" \"+tt.url, func(t *testing.T) {\n\t\t\toperation, err := operation.NewOperation(tt.method, tt.url, nil, nil)\n\t\t\tassert.NoError(t, err)\n\n\t\t\toperation.GenerateID()\n\n\t\t\tassert.Equal(t, tt.expected, operation.GetID())\n\t\t})\n\t}\n}\n\nfunc TestOperation_SetId(t *testing.T) {\n\toperation := &operation.Operation{}\n\n\toperation.SetID(\"testOperation\")\n\n\tassert.Equal(t, \"testOperation\", operation.GetID())\n}\n\nfunc TestMarshalJSON(t *testing.T) {\n\toperation, _ := operation.NewOperation(http.MethodGet, \"http://example.com\", nil, nil)\n\n\t_, err := json.Marshal(operation)\n\n\tassert.NoError(t, err)\n}\n" }, { "path": "internal/operation/operations.go", "content": "package operation\n\ntype Operations []*Operation\n\nfunc (o Operations) Len() int { return len(o) }\nfunc (o Operations) Swap(i, j int) { o[i], o[j] = o[j], o[i] }\nfunc (o Operations) Less(i, j int) bool {\n\tif o[i].URL == o[j].URL {\n\t\treturn o[i].Method < o[j].Method\n\t}\n\n\treturn o[i].URL.String() < o[j].URL.String()\n}\n\nfunc (o Operations) GetByID(id string) *Operation {\n\tfor _, op := range o {\n\t\tif op.GetID() == id {\n\t\t\treturn op\n\t\t}\n\t}\n\treturn nil\n}\n" }, { "path": "internal/operation/operations_test.go", "content": "package operation_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestOperations_Less(t *testing.T) {\n\tgetOperation, _ := operation.NewOperation(http.MethodGet, \"http://example.com\", nil, nil)\n\tpostOperation, _ := operation.NewOperation(http.MethodPost, \"http://example.com\", nil, nil)\n\n\ttests := []struct {\n\t\tname string\n\t\tops operation.Operations\n\t\ti, j int\n\t\texpected bool\n\t}{\n\t\t{\n\t\t\tname: \"Different URLs\",\n\t\t\tops: operation.Operations{\n\t\t\t\tgetOperation,\n\t\t\t\tpostOperation,\n\t\t\t},\n\t\t\ti: 0,\n\t\t\tj: 1,\n\t\t\texpected: true,\n\t\t},\n\t\t{\n\t\t\tname: \"Same URLs, different methods\",\n\t\t\tops: operation.Operations{\n\t\t\t\tpostOperation,\n\t\t\t\tgetOperation,\n\t\t\t},\n\t\t\ti: 0,\n\t\t\tj: 1,\n\t\t\texpected: false,\n\t\t},\n\t\t{\n\t\t\tname: \"Same URLs and methods\",\n\t\t\tops: operation.Operations{\n\t\t\t\tgetOperation,\n\t\t\t\tgetOperation,\n\t\t\t},\n\t\t\ti: 0,\n\t\t\tj: 1,\n\t\t\texpected: false,\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tresult := tt.ops.Less(tt.i, tt.j)\n\t\t\tassert.Equal(t, tt.expected, result)\n\t\t})\n\t}\n}\n\nfunc TestOperations_GetByID(t *testing.T) {\n\tgetOperation, _ := operation.NewOperation(http.MethodGet, \"http://example.com\", nil, nil)\n\tgetOperation.SetID(\"1\")\n\tpostOperation, _ := operation.NewOperation(http.MethodPost, \"http://example.com\", nil, nil)\n\tpostOperation.SetID(\"2\")\n\n\ttests := []struct {\n\t\tname string\n\t\tops operation.Operations\n\t\tid string\n\t\texpected *operation.Operation\n\t}{\n\t\t{\n\t\t\tname: \"Existing ID\",\n\t\t\tops: operation.Operations{\n\t\t\t\tgetOperation,\n\t\t\t\tpostOperation,\n\t\t\t},\n\t\t\tid: \"1\",\n\t\t\texpected: getOperation,\n\t\t},\n\t\t{\n\t\t\tname: \"Non-existing ID\",\n\t\t\tops: operation.Operations{\n\t\t\t\tgetOperation,\n\t\t\t\tpostOperation,\n\t\t\t},\n\t\t\tid: \"3\",\n\t\t\texpected: nil,\n\t\t},\n\t\t{\n\t\t\tname: \"Empty ID\",\n\t\t\tops: operation.Operations{\n\t\t\t\tgetOperation,\n\t\t\t\tpostOperation,\n\t\t\t},\n\t\t\tid: \"\",\n\t\t\texpected: nil,\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tresult := tt.ops.GetByID(tt.id)\n\t\t\tassert.Equal(t, tt.expected, result)\n\t\t})\n\t}\n}\n" }, { "path": "internal/request/client.go", "content": "package request\n\nimport (\n\t\"crypto/tls\"\n\t\"net/http\"\n\t\"net/url\"\n\t\"time\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"golang.org/x/time/rate\"\n)\n\nvar rl = rate.NewLimiter(rate.Every(100*time.Millisecond), 1) // 10 req/s default\n\nvar defaultClient *Client = nil\n\nfunc GetDefaultClient() *Client {\n\tif defaultClient == nil {\n\t\tdefaultClient = NewClient(NewClientOptions{})\n\t}\n\n\treturn defaultClient\n}\n\nfunc SetDefaultClient(client *Client) {\n\tdefaultClient = client\n}\n\ntype Client struct {\n\t*http.Client\n\tHeader http.Header\n\tCookies []*http.Cookie\n}\n\ntype NewClientOptions struct {\n\tTimeout time.Duration\n\tRateLimit int // requests per second\n\tProxyURL *url.URL\n\tInsecureSkipVerify bool\n\n\tHeader http.Header\n\tCookies []*http.Cookie\n}\n\nfunc NewClientFromHTTPClient(httpClient *http.Client, limiter *rate.Limiter) *Client {\n\tif limiter != nil {\n\t\trl = limiter\n\t}\n\n\treturn &Client{\n\t\tClient: httpClient,\n\t\tHeader: http.Header{},\n\t\tCookies: []*http.Cookie{},\n\t}\n}\n\nfunc NewClient(opts NewClientOptions) *Client {\n\tvar proxy func(*http.Request) (*url.URL, error)\n\tif opts.ProxyURL != nil && opts.ProxyURL.String() != \"\" {\n\t\tproxy = http.ProxyURL(opts.ProxyURL)\n\t} else {\n\t\tproxy = http.ProxyFromEnvironment\n\t}\n\n\ttransport := &http.Transport{\n\t\tProxy: proxy,\n\n\t\tMaxIdleConns: 100,\n\t\tMaxIdleConnsPerHost: 100,\n\t}\n\tif opts.InsecureSkipVerify {\n\t\t//nolint:gosec\n\t\ttransport.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}\n\t}\n\n\tif opts.Timeout == 0 {\n\t\topts.Timeout = 10 * time.Second\n\t}\n\n\tif opts.RateLimit > 0 {\n\t\trl = rate.NewLimiter(rate.Every(time.Second/time.Duration(opts.RateLimit)), 1)\n\t}\n\n\tif opts.Header == nil {\n\t\topts.Header = http.Header{}\n\t}\n\n\tif opts.Cookies == nil {\n\t\topts.Cookies = []*http.Cookie{}\n\t}\n\n\treturn &Client{\n\t\t&http.Client{\n\t\t\tTimeout: opts.Timeout,\n\t\t\tTransport: transport,\n\t\t},\n\t\topts.Header,\n\t\topts.Cookies,\n\t}\n}\n\nfunc (c *Client) WithHeader(header http.Header) *Client {\n\tc.Header = header\n\treturn c\n}\n\nfunc (c *Client) WithCookies(cookies []*http.Cookie) *Client {\n\tc.Cookies = cookies\n\treturn c\n}\n\nfunc removeCookie(cookies []*http.Cookie, cookie *http.Cookie) []*http.Cookie {\n\tfor i, c := range cookies {\n\t\tif c == cookie {\n\t\t\treturn append(cookies[:i], cookies[i+1:]...)\n\t\t}\n\t}\n\treturn cookies\n}\n\nfunc (c *Client) ClearSecurityScheme(securityScheme *auth.SecurityScheme) *Client {\n\t// delete security schemes headers and cookies when name and value are the same\n\tfor k, v := range securityScheme.GetHeaders() {\n\t\tif c.Header.Get(k) == v[0] {\n\t\t\tc.Header.Del(k)\n\t\t}\n\t}\n\n\tfor _, sc := range securityScheme.GetCookies() {\n\t\tfor _, cookie := range c.Cookies {\n\t\t\tif cookie.Name == sc.Name && cookie.Value == sc.Value {\n\t\t\t\tc.Cookies = removeCookie(c.Cookies, cookie)\n\t\t\t}\n\t\t}\n\t}\n\treturn c\n}\n\nfunc (c *Client) ClearSecuritySchemes(securitySchemes []*auth.SecurityScheme) *Client {\n\tfor _, securityScheme := range securitySchemes {\n\t\tc.ClearSecurityScheme(securityScheme)\n\t}\n\treturn c\n}\n" }, { "path": "internal/request/client_test.go", "content": "package request_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\t\"time\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewClient_DefaultOptions(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{})\n\n\tassert.NotNil(t, client)\n\tassert.Nil(t, client.Transport.(*http.Transport).TLSClientConfig)\n\tassert.Equal(t, 10*time.Second, client.Timeout)\n\tassert.Equal(t, 100, client.Transport.(*http.Transport).MaxIdleConns)\n\tassert.Equal(t, 100, client.Transport.(*http.Transport).MaxIdleConnsPerHost)\n\tassert.Empty(t, client.Header)\n\tassert.Empty(t, client.Cookies)\n}\n\nfunc TestNewClient_CustomOptions(t *testing.T) {\n\theader := http.Header{\"Custom-Header\": []string{\"value\"}}\n\tcookies := []*http.Cookie{{Name: \"test\", Value: \"cookie\"}}\n\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tTimeout: 5 * time.Second,\n\t\tInsecureSkipVerify: true,\n\n\t\tHeader: header,\n\t\tCookies: cookies,\n\t})\n\n\tassert.NotNil(t, client)\n\tassert.Equal(t, 5*time.Second, client.Timeout)\n\tassert.NotNil(t, client.Transport.(*http.Transport).TLSClientConfig)\n\tassert.True(t, client.Transport.(*http.Transport).TLSClientConfig.InsecureSkipVerify)\n\tassert.Equal(t, header, client.Header)\n\tassert.Equal(t, cookies, client.Cookies)\n}\n\nfunc TestGetClient(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\tassert.NotNil(t, client)\n}\n\nfunc TestSetClient(t *testing.T) {\n\tnewClient := request.NewClient(request.NewClientOptions{})\n\trequest.SetDefaultClient(newClient)\n\tassert.Equal(t, newClient, request.GetDefaultClient())\n}\n\nfunc TestClient_WithHeader(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{})\n\theader := http.Header{\"Custom-Header\": []string{\"value\"}}\n\tclient = client.WithHeader(header)\n\n\tassert.Equal(t, header, client.Header)\n}\n\nfunc TestClient_WithCookies(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{})\n\tcookies := []*http.Cookie{{Name: \"test\", Value: \"cookie\"}}\n\tclient = client.WithCookies(cookies)\n\n\tassert.Equal(t, cookies, client.Cookies)\n}\n\nfunc TestClient_ClearHeaderWithSecurityScheme(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{})\n\tclient.Header.Set(\"Authorization\", \"Bearer token\")\n\n\tvalue := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &value)\n\tclient.ClearSecurityScheme(securityScheme)\n\n\tassert.Empty(t, client.Header.Get(\"Authorization\"))\n}\n\n// func TestClient_ClearCookieWithSecurityScheme(t *testing.T) {\n// \tclient := request.NewClient(request.NewClientOptions{})\n// \tclient.Cookies = []*http.Cookie{{Name: \"session\", Value: \"12345\"}}\n\n// \tvalue := \"token\"\n// \tsecurityScheme := &auth.SecurityScheme{\n// \t\tCookies: []*http.Cookie{{Name: \"session\", Value: \"12345\"}},\n// \t}\n// \tclient.ClearSecurityScheme(securityScheme)\n\n// \tassert.Empty(t, client.Header.Get(\"Authorization\"))\n// }\n\nfunc TestClient_ClearSecuritySchemes(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{})\n\tclient.Header.Set(\"Authorization\", \"Bearer token\")\n\tclient.Cookies = []*http.Cookie{{Name: \"session\", Value: \"12345\"}}\n\n\tvalue := \"token\"\n\tsecurityScheme1 := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &value)\n\tsecurityScheme2 := auth.MustNewNoAuthSecurityScheme()\n\n\tclient.ClearSecuritySchemes([]*auth.SecurityScheme{securityScheme1, securityScheme2})\n\n\tassert.Empty(t, client.Header.Get(\"Authorization\"))\n\t// assert.Empty(t, client.Cookies)\n}\n" }, { "path": "internal/request/error.go", "content": "package request\n\nimport \"errors\"\n\nfunc NilResponseError() error {\n\treturn errors.New(\"response is nil\")\n}\n" }, { "path": "internal/request/request.go", "content": "package request\n\nimport (\n\t\"bytes\"\n\t\"context\"\n\t\"io\"\n\t\"net/http\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/google/uuid\"\n)\n\ntype Request struct {\n\tID string\n\tBody []byte\n\n\tClient *Client\n\tHttpRequest *http.Request\n}\n\nfunc getBody(body io.Reader) ([]byte, error) {\n\tif body == nil {\n\t\treturn nil, nil\n\t}\n\n\tif bodyBuffer, ok := body.(*bytes.Buffer); ok {\n\t\tif bodyBuffer == nil {\n\t\t\treturn nil, nil\n\t\t}\n\t\treturn bodyBuffer.Bytes(), nil\n\t}\n\n\treturn io.ReadAll(body)\n}\n\nfunc NewRequest(method string, url string, body io.Reader, client *Client) (*Request, error) {\n\tif client == nil {\n\t\tclient = GetDefaultClient()\n\t}\n\n\tvar bodyBuffer, err = getBody(body)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\treq, err := http.NewRequest(method, url, bytes.NewReader(bodyBuffer))\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tfor k, v := range client.Header {\n\t\treq.Header.Set(k, v[0])\n\t}\n\n\tfor _, c := range client.Cookies {\n\t\treq.AddCookie(c)\n\t}\n\n\treturn &Request{\n\t\tID: uuid.New().String(),\n\t\tBody: bodyBuffer,\n\n\t\tClient: client,\n\t\tHttpRequest: req,\n\t}, nil\n}\n\nfunc (r *Request) WithHeader(header http.Header) *Request {\n\tfor k, v := range header {\n\t\tr.SetHeader(k, v[0])\n\t}\n\treturn r\n}\n\nfunc (r *Request) WithCookies(cookies []*http.Cookie) *Request {\n\tfor _, c := range cookies {\n\t\tr.AddCookie(c)\n\t}\n\treturn r\n}\n\nfunc (r *Request) WithSecurityScheme(securityScheme *auth.SecurityScheme) *Request {\n\tif cookies := securityScheme.GetCookies(); cookies != nil {\n\t\tr.WithCookies(cookies)\n\t}\n\n\tif headers := securityScheme.GetHeaders(); headers != nil {\n\t\tr.WithHeader(headers)\n\t}\n\n\treturn r\n}\n\nfunc (r *Request) GetID() string {\n\treturn r.ID\n}\n\nfunc (r *Request) GetMethod() string {\n\treturn r.HttpRequest.Method\n}\n\nfunc (r *Request) GetHeader() http.Header {\n\treturn r.HttpRequest.Header\n}\n\nfunc (r *Request) SetHeader(key string, value string) *Request {\n\tr.HttpRequest.Header.Set(key, value)\n\treturn r\n}\n\nfunc (r *Request) AddHeader(key string, value string) *Request {\n\tr.HttpRequest.Header.Add(key, value)\n\treturn r\n}\n\nfunc (r *Request) GetCookies() []*http.Cookie {\n\treturn r.HttpRequest.Cookies()\n}\n\nfunc (r *Request) AddCookie(cookie *http.Cookie) *Request {\n\tr.HttpRequest.AddCookie(cookie)\n\treturn r\n}\n\nfunc (r *Request) GetURL() string {\n\treturn r.HttpRequest.URL.String()\n}\n\nfunc (r *Request) GetBody() []byte {\n\tif r.Body == nil {\n\t\treturn nil\n\t}\n\n\treturn r.Body\n}\n\nfunc (r *Request) SetBody(body io.Reader) *Request {\n\tvar bodyBuffer, err = getBody(body)\n\tif err != nil {\n\t\tpanic(err)\n\t}\n\n\tr.Body = bodyBuffer\n\tr.HttpRequest.Body = io.NopCloser(bytes.NewReader(bodyBuffer))\n\n\treturn r\n}\n\nfunc (r *Request) Do() (*Response, error) {\n\tr.SetHeader(\"user-agent\", \"vulnapi\")\n\tr.SetHeader(\"x-vulnapi-request-id\", r.GetID())\n\n\tif err := rl.Wait(context.Background()); err != nil {\n\t\treturn nil, err\n\t}\n\thttpRes, err := r.Client.Do(r.HttpRequest) //nolint:gosec\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tres, err := NewResponse(httpRes)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\treturn res, err\n}\n" }, { "path": "internal/request/request_test.go", "content": "package request_test\n\nimport (\n\t\"bytes\"\n\t\"io\"\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewRequest(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tbody := bytes.NewBuffer([]byte(\"test\"))\n\n\trequest, err := request.NewRequest(method, url, body, nil)\n\n\tassert.NoError(t, err)\n\tassert.NotEqual(t, \"\", request.ID)\n\tassert.Equal(t, method, request.HttpRequest.Method)\n\tassert.Equal(t, url, request.HttpRequest.URL.String())\n\tassert.Equal(t, []byte(\"test\"), request.Body)\n}\n\nfunc TestWithHeader(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\theader := http.Header{\n\t\t\"Content-Type\": []string{\"application/json\"},\n\t}\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\trequest = request.WithHeader(header)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, header.Get(\"Content-Type\"), request.HttpRequest.Header.Get(\"Content-Type\"))\n}\n\nfunc TestWithHTTPCookies(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tcookies := []*http.Cookie{{\n\t\tName: \"cookie1\",\n\t\tValue: \"value1\",\n\t}}\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\trequest = request.WithCookies(cookies)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, cookies[0].Name, request.HttpRequest.Cookies()[0].Name)\n\tassert.Equal(t, cookies[0].Value, request.HttpRequest.Cookies()[0].Value)\n}\n\nfunc TestWithSecurityScheme(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\trequest = request.WithSecurityScheme(securityScheme)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, \"Bearer \"+token, request.HttpRequest.Header.Get(\"Authorization\"))\n}\n\nfunc TestGetID(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\n\tassert.NoError(t, err)\n\tassert.NotEqual(t, \"\", request.GetID())\n\tassert.Equal(t, request.ID, request.GetID())\n}\n\nfunc TestGetMethod(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, method, request.GetMethod())\n}\n\nfunc TestGetMethodWithPost(t *testing.T) {\n\tmethod := http.MethodPost\n\turl := \"http://localhost:8080/\"\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, method, request.GetMethod())\n}\n\nfunc TestGetHeader(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tkey := \"X-Test-Header\"\n\tvalue := \"test-value\"\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\trequest = request.SetHeader(key, value)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, http.Header{\"X-Test-Header\": []string{\"test-value\"}}, request.GetHeader())\n}\n\nfunc TestSetHeader(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tkey := \"X-Test-Header\"\n\tvalue := \"test-value\"\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\trequest = request.SetHeader(key, value)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, value, request.HttpRequest.Header.Get(key))\n}\n\nfunc TestAddHeader(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tkey := \"X-Test-Header\"\n\tvalue1 := \"test-value1\"\n\tvalue2 := \"test-value2\"\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\trequest = request.AddHeader(key, value1)\n\trequest = request.AddHeader(key, value2)\n\n\tassert.NoError(t, err)\n\tassert.Contains(t, request.HttpRequest.Header[key], value1)\n\tassert.Contains(t, request.HttpRequest.Header[key], value2)\n}\n\nfunc TestGetBody(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tbody := bytes.NewBuffer([]byte(\"test body\"))\n\n\trequest, err := request.NewRequest(method, url, body, nil)\n\n\tassert.NoError(t, err)\n\tretrievedBody := request.GetBody()\n\tassert.Equal(t, []byte(\"test body\"), retrievedBody)\n\tassert.Equal(t, \"test body\", string(retrievedBody))\n}\n\nfunc TestSetBody(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tbody := []byte(`{\"key\": \"value\"}`)\n\tmethod := http.MethodPost\n\turl := \"http://localhost:8080/\"\n\treq, _ := request.NewRequest(method, url, nil, client)\n\treq = req.SetBody(bytes.NewBuffer(body))\n\n\thttpmock.RegisterResponder(method, url, func(req *http.Request) (*http.Response, error) {\n\t\treqBody, _ := io.ReadAll(req.Body)\n\n\t\tassert.Equal(t, method, req.Method)\n\t\tassert.Equal(t, url, req.URL.String())\n\t\tassert.Equal(t, body, reqBody)\n\n\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t})\n\n\tresponse, err := req.Do()\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, response)\n\tassert.Equal(t, http.StatusNoContent, response.HttpResponse.StatusCode)\n}\n\nfunc TestGetCookies(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tcookies := []*http.Cookie{\n\t\t{Name: \"cookie1\", Value: \"value1\"},\n\t\t{Name: \"cookie2\", Value: \"value2\"},\n\t}\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\trequest = request.WithCookies(cookies)\n\n\tassert.NoError(t, err)\n\tretrievedCookies := request.GetCookies()\n\tassert.Len(t, retrievedCookies, 2)\n\tassert.Equal(t, cookies[0].Name, retrievedCookies[0].Name)\n\tassert.Equal(t, cookies[0].Value, retrievedCookies[0].Value)\n\tassert.Equal(t, cookies[1].Name, retrievedCookies[1].Name)\n\tassert.Equal(t, cookies[1].Value, retrievedCookies[1].Value)\n}\n\nfunc TestAddCookie(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tcookie := &http.Cookie{\n\t\tName: \"cookie1\",\n\t\tValue: \"value1\",\n\t}\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\trequest = request.AddCookie(cookie)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, cookie.Name, request.HttpRequest.Cookies()[0].Name)\n\tassert.Equal(t, cookie.Value, request.HttpRequest.Cookies()[0].Value)\n}\n\nfunc TestGetURL(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\n\trequest, err := request.NewRequest(method, url, nil, nil)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, url, request.GetURL())\n}\n\nfunc TestGetURLWithQueryParams(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tqueryParams := \"param1=value1¶m2=value2\"\n\tfullURL := url + \"?\" + queryParams\n\n\trequest, err := request.NewRequest(method, fullURL, nil, nil)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, fullURL, request.GetURL())\n}\n\nfunc TestDo(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\trequest, _ := request.NewRequest(method, url, nil, nil)\n\thttpmock.RegisterResponder(method, url, func(req *http.Request) (*http.Response, error) {\n\t\tassert.Equal(t, method, req.Method)\n\t\tassert.Equal(t, url, req.URL.String())\n\t\tassert.Equal(t, \"vulnapi\", req.Header.Get(\"User-Agent\"))\n\t\tassert.Equal(t, request.GetID(), req.Header.Get(\"x-vulnapi-request-id\"))\n\n\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t})\n\n\tresponse, err := request.Do()\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, response)\n\tassert.Equal(t, http.StatusNoContent, response.HttpResponse.StatusCode)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n}\n\nfunc TestDoWithHeaders(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\theader := http.Header{\n\t\t\"X-Test\": []string{\"test\"},\n\t}\n\trequest, _ := request.NewRequest(method, url, nil, nil)\n\trequest = request.WithHeader(header)\n\n\thttpmock.RegisterResponder(method, url, func(req *http.Request) (*http.Response, error) {\n\t\tassert.Equal(t, method, req.Method)\n\t\tassert.Equal(t, url, req.URL.String())\n\t\tassert.Equal(t, \"vulnapi\", req.Header.Get(\"User-Agent\"))\n\t\tassert.Equal(t, header.Get(\"X-Test\"), req.Header.Get(\"X-Test\"))\n\n\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t})\n\n\tresponse, err := request.Do()\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, response)\n}\n\nfunc TestDoWithClientHeaders(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\theader := http.Header{\n\t\t\"X-Test\": []string{\"test\"},\n\t}\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tHeader: header,\n\t})\n\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\trequest, _ := request.NewRequest(method, url, nil, client)\n\trequest = request.WithHeader(header)\n\n\thttpmock.RegisterResponder(method, url, func(req *http.Request) (*http.Response, error) {\n\t\tassert.Equal(t, method, req.Method)\n\t\tassert.Equal(t, url, req.URL.String())\n\t\tassert.Equal(t, \"vulnapi\", req.Header.Get(\"User-Agent\"))\n\t\tassert.Equal(t, request.GetID(), req.Header.Get(\"x-vulnapi-request-id\"))\n\t\tassert.Equal(t, header.Get(\"X-Test\"), req.Header.Get(\"X-Test\"))\n\n\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t})\n\n\tresponse, err := request.Do()\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, response)\n}\n\nfunc TestDoWithBody(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tbody := []byte(`{\"key\": \"value\"}`)\n\tmethod := http.MethodPost\n\turl := \"http://localhost:8080/\"\n\trequest, _ := request.NewRequest(method, url, bytes.NewReader(body), client)\n\n\thttpmock.RegisterResponder(method, url, func(req *http.Request) (*http.Response, error) {\n\t\treqBody, _ := io.ReadAll(req.Body)\n\n\t\tassert.Equal(t, method, req.Method)\n\t\tassert.Equal(t, url, req.URL.String())\n\t\tassert.Equal(t, body, reqBody)\n\n\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t})\n\n\tresponse, err := request.Do()\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, response)\n}\n\nfunc TestDoWithSecuritySchemeHeaders(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\trequest, _ := request.NewRequest(method, url, nil, client)\n\trequest.WithSecurityScheme(securityScheme)\n\n\thttpmock.RegisterResponder(method, url, func(req *http.Request) (*http.Response, error) {\n\t\tassert.Equal(t, method, req.Method)\n\t\tassert.Equal(t, url, req.URL.String())\n\t\tassert.Equal(t, \"vulnapi\", req.Header.Get(\"User-Agent\"))\n\t\tassert.Equal(t, request.GetID(), req.Header.Get(\"x-vulnapi-request-id\"))\n\t\tassert.Equal(t, \"Bearer \"+token, req.Header.Get(\"Authorization\"))\n\n\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t})\n\n\t_, err := request.Do()\n\n\tassert.NoError(t, err)\n}\n\nfunc TestDoWithHeadersSecuritySchemeHeaders(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\theader := http.Header{\n\t\t\"X-Test\": []string{\"test\"},\n\t\t\"Authorization\": []string{\"Bearer othertoken\"},\n\t}\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\trequest, _ := request.NewRequest(method, url, nil, client)\n\trequest = request.WithHeader(header)\n\trequest = request.WithSecurityScheme(securityScheme)\n\n\thttpmock.RegisterResponder(method, url, func(req *http.Request) (*http.Response, error) {\n\t\tassert.Equal(t, method, req.Method)\n\t\tassert.Equal(t, url, req.URL.String())\n\t\tassert.Equal(t, \"vulnapi\", req.Header.Get(\"User-Agent\"))\n\t\tassert.Equal(t, request.GetID(), req.Header.Get(\"x-vulnapi-request-id\"))\n\t\tassert.Equal(t, header.Get(\"X-Test\"), req.Header.Get(\"X-Test\"))\n\t\tassert.Equal(t, \"Bearer \"+token, req.Header.Get(\"Authorization\"))\n\n\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t})\n\n\t_, err := request.Do()\n\n\tassert.NoError(t, err)\n}\n\nfunc TestDoWithCookiesSecuritySchemeHeaders(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tcookies := []*http.Cookie{{\n\t\tName: \"cookie1\",\n\t\tValue: \"value1\",\n\t}}\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\trequest, _ := request.NewRequest(method, url, nil, client)\n\trequest = request.WithCookies(cookies)\n\trequest = request.WithSecurityScheme(securityScheme)\n\n\thttpmock.RegisterResponder(method, url, func(req *http.Request) (*http.Response, error) {\n\t\tassert.Equal(t, method, req.Method)\n\t\tassert.Equal(t, url, req.URL.String())\n\t\tassert.Equal(t, \"vulnapi\", req.Header.Get(\"User-Agent\"))\n\t\tassert.Equal(t, request.GetID(), req.Header.Get(\"x-vulnapi-request-id\"))\n\t\tassert.Equal(t, cookies[0].Name, req.Cookies()[0].Name)\n\t\tassert.Equal(t, cookies[0].Value, req.Cookies()[0].Value)\n\t\tassert.Equal(t, \"Bearer \"+token, req.Header.Get(\"Authorization\"))\n\n\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t})\n\n\t_, err := request.Do()\n\n\tassert.NoError(t, err)\n}\n\nfunc TestDoWithCookies(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tmethod := http.MethodGet\n\turl := \"http://localhost:8080/\"\n\tcookies := []*http.Cookie{{\n\t\tName: \"cookie1\",\n\t\tValue: \"value1\",\n\t}}\n\trequest, _ := request.NewRequest(method, url, nil, client)\n\trequest = request.WithCookies(cookies)\n\n\thttpmock.RegisterResponder(method, url, func(req *http.Request) (*http.Response, error) {\n\t\tassert.Equal(t, method, req.Method)\n\t\tassert.Equal(t, url, req.URL.String())\n\t\tassert.Len(t, req.Cookies(), 1)\n\t\tassert.Equal(t, cookies[0].Name, req.Cookies()[0].Name)\n\t\tassert.Equal(t, cookies[0].Value, req.Cookies()[0].Value)\n\n\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t})\n\n\tresponse, err := request.Do()\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, response)\n}\n" }, { "path": "internal/request/response.go", "content": "package request\n\nimport (\n\t\"bytes\"\n\t\"io\"\n\t\"net/http\"\n)\n\ntype Response struct {\n\tBody *bytes.Buffer\n\tHttpResponse *http.Response\n}\n\nfunc NewResponse(response *http.Response) (*Response, error) {\n\tif response == nil {\n\t\treturn nil, NilResponseError()\n\t}\n\n\tif response.Body == nil {\n\t\treturn &Response{\n\t\t\tBody: nil,\n\t\t\tHttpResponse: response,\n\t\t}, nil\n\t}\n\n\tdefer response.Body.Close()\n\tbody, err := io.ReadAll(response.Body)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\treturn &Response{\n\t\tBody: bytes.NewBuffer(body),\n\t\tHttpResponse: response,\n\t}, nil\n}\n\nfunc (response *Response) GetStatusCode() int {\n\treturn response.HttpResponse.StatusCode\n}\n\nfunc (response *Response) GetBody() *bytes.Buffer {\n\treturn response.Body\n}\n\nfunc (response *Response) GetHeader() http.Header {\n\treturn response.HttpResponse.Header\n}\n\nfunc (response *Response) GetCookies() []*http.Cookie {\n\treturn response.HttpResponse.Cookies()\n}\n" }, { "path": "internal/request/response_test.go", "content": "package request_test\n\nimport (\n\t\"bytes\"\n\t\"io\"\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewResponse(t *testing.T) {\n\tbodyContent := \"test body\"\n\thttpResponse := &http.Response{\n\t\tStatusCode: http.StatusOK,\n\t\tBody: io.NopCloser(bytes.NewBufferString(bodyContent)),\n\t\tHeader: make(http.Header),\n\t}\n\n\tres, err := request.NewResponse(httpResponse)\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, res)\n\tassert.Equal(t, bodyContent, res.Body.String())\n\tassert.Equal(t, http.StatusOK, res.GetStatusCode())\n\tassert.Equal(t, httpResponse.Header, res.GetHeader())\n\tassert.Equal(t, httpResponse.Cookies(), res.GetCookies())\n}\n\nfunc TestNewResponseNil(t *testing.T) {\n\t_, err := request.NewResponse(nil)\n\n\tassert.Error(t, err)\n}\n\nfunc TestNewResponseNilBody(t *testing.T) {\n\thttpResponse := &http.Response{\n\t\tStatusCode: http.StatusOK,\n\t\tHeader: make(http.Header),\n\t}\n\n\tres, err := request.NewResponse(httpResponse)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, http.StatusOK, res.GetStatusCode())\n\tassert.Equal(t, httpResponse.Header, res.GetHeader())\n\tassert.Equal(t, httpResponse.Cookies(), res.GetCookies())\n\tassert.Nil(t, res.Body)\n}\n" }, { "path": "internal/scan/attempt.go", "content": "package scan\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n)\n\ntype IssueScanAttemptStatus string\n\nfunc (attemptStatus IssueScanAttemptStatus) String() string {\n\treturn string(attemptStatus)\n}\n\nconst (\n\tIssueScanAttemptStatusPassed IssueScanAttemptStatus = \"passed\"\n\tIssueScanAttemptStatusFailed IssueScanAttemptStatus = \"failed\"\n\tIssueScanAttemptStatusNone IssueScanAttemptStatus = \"none\"\n)\n\ntype IssueScanAttempt struct {\n\tID string\n\tStatus IssueScanAttemptStatus\n\tRequest *request.Request\n\tResponse *request.Response\n\tErr error\n}\n\nfunc NewIssueScanAttempt(operation *operation.Operation, req *request.Request, res *request.Response, err error) *IssueScanAttempt {\n\treturn &IssueScanAttempt{\n\t\tID: operation.GetID() + \"-\" + req.GetID(),\n\t\tStatus: IssueScanAttemptStatusNone,\n\n\t\tRequest: req,\n\t\tResponse: res,\n\t\tErr: err,\n\t}\n}\n\nfunc (scanAttempt *IssueScanAttempt) WithBooleanStatus(status bool) *IssueScanAttempt {\n\tif status {\n\t\treturn scanAttempt.Pass()\n\t}\n\treturn scanAttempt.Fail()\n}\n\nfunc (scanAttempt *IssueScanAttempt) Fail() *IssueScanAttempt {\n\tscanAttempt.Status = IssueScanAttemptStatusFailed\n\treturn scanAttempt\n}\n\nfunc (scanAttempt *IssueScanAttempt) Pass() *IssueScanAttempt {\n\tscanAttempt.Status = IssueScanAttemptStatusPassed\n\treturn scanAttempt\n}\n\nfunc (scanAttempt *IssueScanAttempt) HasPassed() bool {\n\treturn scanAttempt.Status == IssueScanAttemptStatusPassed\n}\n\nfunc (scanAttempt *IssueScanAttempt) HasFailed() bool {\n\treturn scanAttempt.Status == IssueScanAttemptStatusFailed\n}\n" }, { "path": "internal/scan/attempt_test.go", "content": "package scan\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewIssueScanAttempt(t *testing.T) {\n\treq, _ := request.NewRequest(http.MethodGet, \"http://example.com\", nil, nil)\n\tres := &request.Response{}\n\terr := error(nil)\n\top, _ := operation.NewOperationFromRequest(req)\n\n\tscanAttempt := NewIssueScanAttempt(op, req, res, err)\n\n\tassert.NotNil(t, scanAttempt)\n\tassert.Equal(t, IssueScanAttemptStatusNone, scanAttempt.Status)\n\tassert.Equal(t, req, scanAttempt.Request)\n\tassert.Equal(t, res, scanAttempt.Response)\n\tassert.Equal(t, err, scanAttempt.Err)\n}\n\nfunc TestIssueScanAttempt_WithBooleanStatus(t *testing.T) {\n\treq, _ := request.NewRequest(http.MethodGet, \"http://example.com\", nil, nil)\n\tres := &request.Response{}\n\terr := error(nil)\n\top, _ := operation.NewOperationFromRequest(req)\n\n\tscanAttempt := NewIssueScanAttempt(op, req, res, err)\n\n\tscanAttempt.WithBooleanStatus(true)\n\tassert.Equal(t, IssueScanAttemptStatusPassed, scanAttempt.Status)\n\n\tscanAttempt.WithBooleanStatus(false)\n\tassert.Equal(t, IssueScanAttemptStatusFailed, scanAttempt.Status)\n}\n\nfunc TestIssueScanAttempt_Fail(t *testing.T) {\n\treq, _ := request.NewRequest(http.MethodGet, \"http://example.com\", nil, nil)\n\tres := &request.Response{}\n\terr := error(nil)\n\top, _ := operation.NewOperationFromRequest(req)\n\n\tscanAttempt := NewIssueScanAttempt(op, req, res, err)\n\tscanAttempt.Fail()\n\n\tassert.Equal(t, IssueScanAttemptStatusFailed, scanAttempt.Status)\n}\n\nfunc TestIssueScanAttempt_Pass(t *testing.T) {\n\treq, _ := request.NewRequest(http.MethodGet, \"http://example.com\", nil, nil)\n\tres := &request.Response{}\n\terr := error(nil)\n\top, _ := operation.NewOperationFromRequest(req)\n\n\tscanAttempt := NewIssueScanAttempt(op, req, res, err)\n\tscanAttempt.Pass()\n\n\tassert.Equal(t, IssueScanAttemptStatusPassed, scanAttempt.Status)\n}\n\nfunc TestIssueScanAttempt_HasPassed(t *testing.T) {\n\treq, _ := request.NewRequest(http.MethodGet, \"http://example.com\", nil, nil)\n\tres := &request.Response{}\n\terr := error(nil)\n\top, _ := operation.NewOperationFromRequest(req)\n\n\tscanAttempt := NewIssueScanAttempt(op, req, res, err)\n\tscanAttempt.Pass()\n\n\tassert.True(t, scanAttempt.HasPassed())\n\tassert.False(t, scanAttempt.HasFailed())\n}\n\nfunc TestIssueScanAttempt_HasFailed(t *testing.T) {\n\treq, _ := request.NewRequest(http.MethodGet, \"http://example.com\", nil, nil)\n\tres := &request.Response{}\n\terr := error(nil)\n\top, _ := operation.NewOperationFromRequest(req)\n\n\tscanAttempt := NewIssueScanAttempt(op, req, res, err)\n\tscanAttempt.Fail()\n\n\tassert.True(t, scanAttempt.HasFailed())\n\tassert.False(t, scanAttempt.HasPassed())\n}\n" }, { "path": "internal/scan/scan_url.go", "content": "package scan\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n)\n\nfunc ScanURL(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*IssueScanAttempt, error) {\n\treq, err := operation.NewRequest()\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tif securityScheme != nil {\n\t\treq.WithSecurityScheme(securityScheme)\n\t} else {\n\t\treq.WithSecurityScheme(operation.GetSecurityScheme())\n\t}\n\n\tres, err := req.Do()\n\treturn NewIssueScanAttempt(operation, req, res, err), err\n}\n" }, { "path": "internal/scan/utils.go", "content": "package scan\n\nimport (\n\t\"net/http\"\n\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n)\n\nfunc IsUnauthorizedStatusCodeOrSimilar(res *request.Response) bool {\n\treturn res.GetStatusCode() == http.StatusUnauthorized ||\n\t\tres.GetStatusCode() == http.StatusForbidden ||\n\t\tres.GetStatusCode() == http.StatusBadRequest ||\n\t\tres.GetStatusCode() == http.StatusNotFound ||\n\t\tres.GetStatusCode() == http.StatusInternalServerError\n}\n" }, { "path": "internal/scan/utils_test.go", "content": "package scan_test\n\nimport (\n\t\"bytes\"\n\t\"io\"\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestIsUnauthorizedStatusCodeOrSimilar(t *testing.T) {\n\ttestCases := []struct {\n\t\tstatusCode int\n\t\texpected bool\n\t}{\n\t\t{http.StatusUnauthorized, true},\n\t\t{http.StatusForbidden, true},\n\t\t{http.StatusBadRequest, true},\n\t\t{http.StatusNotFound, true},\n\t\t{http.StatusInternalServerError, true},\n\t\t{http.StatusOK, false},\n\t\t{http.StatusBadGateway, false},\n\t}\n\n\tfor _, tc := range testCases {\n\t\tres, _ := request.NewResponse(&http.Response{\n\t\t\tBody: io.NopCloser(bytes.NewBufferString(\"\")),\n\t\t\tStatusCode: tc.statusCode,\n\t\t})\n\t\tb := scan.IsUnauthorizedStatusCodeOrSimilar(res)\n\t\tassert.Equal(t, tc.expected, b)\n\t}\n}\n" }, { "path": "logo-text-art.txt", "content": ".-----------------------------------------------------------.\n| |\n| ██╗ ██╗██╗ ██╗██╗ ███╗ ██╗ █████╗ ██████╗ ██╗ |\n| ██║ ██║██║ ██║██║ ████╗ ██║██╔══██╗██╔══██╗██║ |\n| ██║ ██║██║ ██║██║ ██╔██╗ ██║███████║██████╔╝██║ |\n| ╚██╗ ██╔╝██║ ██║██║ ██║╚██╗██║██╔══██║██╔═══╝ ██║ |\n| ╚████╔╝ ╚██████╔╝███████╗██║ ╚████║██║ ██║██║ ██║ |\n| ╚═══╝ ╚═════╝ ╚══════╝╚═╝ ╚═══╝╚═╝ ╚═╝╚═╝ ╚═╝ |\n| |\n'-----------------------------------------------------------'" }, { "path": "main.go", "content": "package main\n\nimport \"github.com/cerberauth/vulnapi/cmd\"\n\nvar (\n\tversion = \"dev\"\n\tcommit = \"none\"\n\tdate = \"unknown\"\n)\n\nfunc main() {\n\tcmd.Execute(version, commit, date)\n}\n" }, { "path": "openapi/base_url.go", "content": "package openapi\n\nimport (\n\t\"net/url\"\n)\n\nfunc (openapi *OpenAPI) BaseUrl() *url.URL {\n\tif openapi.baseUrl != nil {\n\t\treturn openapi.baseUrl\n\t}\n\n\tfor _, server := range openapi.Doc.Servers {\n\t\tif server.URL == \"\" {\n\t\t\tcontinue\n\t\t}\n\n\t\tserverUrl, err := url.Parse(server.URL)\n\t\tif err != nil || serverUrl.Host == \"\" || serverUrl.Scheme == \"\" {\n\t\t\tcontinue\n\t\t}\n\n\t\tif serverUrl.Path == \"\" {\n\t\t\tserverUrl.Path = \"/\"\n\t\t}\n\n\t\topenapi.SetBaseUrl(serverUrl)\n\t\treturn serverUrl\n\t}\n\n\treturn nil\n}\n\nfunc (openapi *OpenAPI) SetBaseUrl(baseUrl *url.URL) *OpenAPI {\n\topenapi.baseUrl = baseUrl\n\treturn openapi\n}\n" }, { "path": "openapi/base_url_test.go", "content": "package openapi_test\n\nimport (\n\t\"context\"\n\t\"net/url\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestBaseUrl(t *testing.T) {\n\topenapi, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\texpectedURL, _ := url.Parse(\"http://localhost:8080/\")\n\n\tbaseURL := openapi.BaseUrl()\n\n\tassert.Equal(t, expectedURL, baseURL)\n}\n\nfunc TestBaseUrlWithInvalidURL(t *testing.T) {\n\topenapi, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: invalid-url}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tbaseURL := openapi.BaseUrl()\n\n\tassert.Nil(t, baseURL)\n}\n\nfunc TestBaseUrlWithBasePath(t *testing.T) {\n\topenapi, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080/path'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\texpectedURL, _ := url.Parse(\"http://localhost:8080/path\")\n\n\tbaseURL := openapi.BaseUrl()\n\n\tassert.Equal(t, expectedURL, baseURL)\n}\n" }, { "path": "openapi/loader.go", "content": "package openapi\n\nimport (\n\t\"context\"\n\t\"errors\"\n\t\"net/url\"\n\n\t\"github.com/cerberauth/x/fsx\"\n\t\"github.com/getkin/kin-openapi/openapi3\"\n)\n\nfunc newLoader(ctx context.Context) *openapi3.Loader {\n\tloader := openapi3.Loader{\n\t\tContext: ctx,\n\n\t\tIsExternalRefsAllowed: false,\n\t}\n\n\treturn &loader\n}\n\nfunc LoadFromData(ctx context.Context, data []byte) (*OpenAPI, error) {\n\tdoc, err := newLoader(ctx).LoadFromData(data)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\treturn NewOpenAPI(doc), nil\n}\n\nfunc LoadOpenAPI(ctx context.Context, urlOrPath string) (*OpenAPI, error) {\n\tif urlOrPath == \"\" {\n\t\treturn nil, errors.New(\"url or path must not be empty\")\n\t}\n\n\tif uri, urlerr := url.Parse(urlOrPath); urlerr == nil && uri.Hostname() != \"\" {\n\t\tdoc, err := newLoader(ctx).LoadFromURI(uri)\n\t\tif err != nil {\n\t\t\treturn nil, err\n\t\t}\n\n\t\topenapi := NewOpenAPI(doc)\n\t\tif openapi.BaseUrl() == nil {\n\t\t\tbaseUri := uri\n\t\t\tbaseUri.Path = \"/\"\n\t\t\topenapi.SetBaseUrl(baseUri)\n\t\t}\n\n\t\treturn openapi, nil\n\t}\n\n\tdata, err := fsx.ReadFile(urlOrPath)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tdoc, err := newLoader(ctx).LoadFromDataWithPath(data, &url.URL{Path: urlOrPath})\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\treturn NewOpenAPI(doc), nil\n}\n" }, { "path": "openapi/loader_test.go", "content": "package openapi_test\n\nimport (\n\t\"context\"\n\t\"errors\"\n\t\"net/http\"\n\t\"os\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestLoadOpenAPIWithEmptyURLOrPath(t *testing.T) {\n\t_, err := openapi.LoadOpenAPI(context.Background(), \"\")\n\texpectedErr := errors.New(\"url or path must not be empty\")\n\n\tassert.Equal(t, expectedErr, err)\n}\n\nfunc TestLoadOpenAPIWithInvalidURL(t *testing.T) {\n\tinvalidURL := \"invalid-url\"\n\t_, err := openapi.LoadOpenAPI(context.Background(), invalidURL)\n\n\tassert.ErrorIs(t, err, os.ErrNotExist)\n}\n\nfunc TestLoadOpenAPIWithValidURL(t *testing.T) {\n\thttpmock.Activate()\n\tdefer httpmock.DeactivateAndReset()\n\n\tvalidURL := \"http://example.com/openapi.yaml\"\n\thttpmock.RegisterResponder(http.MethodGet, validURL, httpmock.ResponderFromResponse(\n\t\thttpmock.NewStringResponse(200, \"openapi: 3.0.0\"),\n\t))\n\n\t_, err := openapi.LoadOpenAPI(context.Background(), validURL)\n\n\tassert.NoError(t, err)\n}\n\nfunc TestLoadOpenAPIWithNonExistentFile(t *testing.T) {\n\tnonExistentFile := \"/path/to/nonexistent.yaml\"\n\t_, err := openapi.LoadOpenAPI(context.Background(), nonExistentFile)\n\n\tassert.ErrorIs(t, err, os.ErrNotExist)\n}\n\nfunc TestLoadOpenAPIWithValidFilePath(t *testing.T) {\n\tvalidFilePath := \"../test/stub/simple_http_bearer_jwt.openapi.yaml\"\n\t_, err := openapi.LoadOpenAPI(context.Background(), validFilePath)\n\n\tassert.NoError(t, err)\n}\n" }, { "path": "openapi/openapi.go", "content": "package openapi\n\nimport (\n\t\"net/url\"\n\n\t\"github.com/getkin/kin-openapi/openapi3\"\n\t\"go.opentelemetry.io/otel/attribute\"\n)\n\nconst (\n\totelName = \"github.com/cerberauth/vulnapi/openapi\"\n\n\totelErrorReasonAttributeKey = attribute.Key(\"error_reason\")\n)\n\ntype OpenAPI struct {\n\tbaseUrl *url.URL\n\n\tDoc *openapi3.T\n}\n\nfunc NewOpenAPI(doc *openapi3.T) *OpenAPI {\n\treturn &OpenAPI{Doc: doc}\n}\n" }, { "path": "openapi/operation.go", "content": "package openapi\n\nimport (\n\t\"bytes\"\n\t\"context\"\n\t\"net/http\"\n\t\"path\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\t\"github.com/getkin/kin-openapi/openapi3\"\n\tstduritemplate \"github.com/std-uritemplate/std-uritemplate/go/v2\"\n\t\"go.opentelemetry.io/otel/attribute\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\nconst (\n\totelMethodAttributeKey = attribute.Key(\"method\")\n\totelMediaTypeAttributeKey = attribute.Key(\"media_type\")\n\totelSecuritySchemesTypesAttributeKey = attribute.Key(\"security_schemes\")\n)\n\nfunc getOperationSecuritySchemes(securityRequirements *openapi3.SecurityRequirements, securitySchemes map[string]*auth.SecurityScheme) []*auth.SecurityScheme {\n\toperationsSecuritySchemes := []*auth.SecurityScheme{}\n\tfor _, security := range *securityRequirements {\n\t\tif len(security) == 0 {\n\t\t\tcontinue\n\t\t}\n\n\t\tkeys := make([]string, 0, len(security))\n\t\tfor k := range security {\n\t\t\tkeys = append(keys, k)\n\t\t}\n\n\t\toperationSecurityScheme := securitySchemes[keys[0]]\n\t\tif operationSecurityScheme == nil {\n\t\t\tcontinue\n\t\t}\n\n\t\toperationsSecuritySchemes = append(operationsSecuritySchemes, operationSecurityScheme)\n\t}\n\n\treturn operationsSecuritySchemes\n}\n\nfunc GetOperationPath(p string, params openapi3.Parameters) (string, error) {\n\tsubs := map[string]interface{}{}\n\tfor _, v := range params {\n\t\tif v.Value.In != \"path\" {\n\t\t\tcontinue\n\t\t}\n\t\tsubs[v.Value.Name] = getSchemaValue(v.Value.Schema.Value, 0)\n\t}\n\n\treturn stduritemplate.Expand(p, subs)\n}\n\nfunc (openapi *OpenAPI) Operations(ctx context.Context, client *request.Client, securitySchemes auth.SecuritySchemesMap) (operation.Operations, error) {\n\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\ttelemetryPathCounter, _ := telemetryMeter.Int64Counter(\"openapi.path.counter\")\n\ttelemetryOperationCounter, _ := telemetryMeter.Int64Counter(\"openapi.operation.counter\")\n\ttelemetryOperationErrorCounter, _ := telemetryMeter.Int64Counter(\"openapi.operation.error.counter\")\n\ttelemetryOperationHeadersCounter, _ := telemetryMeter.Int64Counter(\"openapi.operation.headers.counter\")\n\ttelemetryOperationCookiesCounter, _ := telemetryMeter.Int64Counter(\"openapi.operation.cookies.counter\")\n\n\tbaseUrl := openapi.BaseUrl()\n\n\toperations := operation.Operations{}\n\tfor docPath, p := range openapi.Doc.Paths.Map() {\n\t\ttelemetryPathCounter.Add(ctx, 1)\n\n\t\tfor method, o := range p.Operations() {\n\t\t\tvar otelAttributes = []attribute.KeyValue{\n\t\t\t\totelMethodAttributeKey.String(method),\n\t\t\t}\n\n\t\t\toperationPath, err := GetOperationPath(docPath, o.Parameters)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryOperationErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"invalid operation path\"))...))\n\t\t\t\treturn nil, err\n\t\t\t}\n\n\t\t\toperationUrl := *baseUrl\n\t\t\toperationUrl.Path = path.Join(operationUrl.Path, operationPath)\n\n\t\t\theader := http.Header{}\n\t\t\tcookies := []*http.Cookie{}\n\t\t\tfor _, h := range o.Parameters {\n\t\t\t\tif !h.Value.Required {\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\n\t\t\t\tname := h.Value.Name\n\t\t\t\tvalue := getParameterValue(h.Value)\n\n\t\t\t\tswitch h.Value.In {\n\t\t\t\tcase \"header\":\n\t\t\t\t\theader.Add(name, value)\n\t\t\t\tcase \"cookie\":\n\t\t\t\t\tcookies = append(cookies, &http.Cookie{\n\t\t\t\t\t\tName: name,\n\t\t\t\t\t\tValue: value,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t}\n\t\t\ttelemetryOperationHeadersCounter.Add(ctx, int64(len(header)), metric.WithAttributes(otelAttributes...))\n\t\t\ttelemetryOperationCookiesCounter.Add(ctx, int64(len(cookies)), metric.WithAttributes(otelAttributes...))\n\n\t\t\tvar body *bytes.Buffer\n\t\t\tvar mediaType string\n\t\t\tif o.RequestBody != nil {\n\t\t\t\tbody, mediaType, _ = getRequestBodyValue(o.RequestBody.Value)\n\t\t\t}\n\t\t\tif body != nil && mediaType != \"\" {\n\t\t\t\theader.Set(\"Content-Type\", mediaType)\n\t\t\t} else {\n\t\t\t\tbody = bytes.NewBuffer(nil)\n\t\t\t}\n\t\t\totelAttributes = append(otelAttributes, otelMediaTypeAttributeKey.String(mediaType))\n\n\t\t\toperation, err := operation.NewOperation(method, operationUrl.String(), body, client)\n\t\t\tif err != nil {\n\t\t\t\ttelemetryOperationErrorCounter.Add(ctx, 1, metric.WithAttributes(append(otelAttributes, otelErrorReasonAttributeKey.String(\"new operation error\"))...))\n\t\t\t\treturn nil, err\n\t\t\t}\n\t\t\toperation.WithOpenapiOperation(docPath, o)\n\t\t\toperation.WithCookies(cookies).WithHeader(header)\n\n\t\t\tif o.Security != nil {\n\t\t\t\toperation.SetSecuritySchemes(getOperationSecuritySchemes(o.Security, securitySchemes))\n\t\t\t} else if openapi.Doc.Security != nil {\n\t\t\t\toperation.SetSecuritySchemes(getOperationSecuritySchemes(&openapi.Doc.Security, securitySchemes))\n\t\t\t}\n\n\t\t\ttelemetrySecuritySchemesTypes := []string{}\n\t\t\tfor _, v := range operation.GetSecuritySchemes() {\n\t\t\t\ttelemetrySecuritySchemesTypes = append(telemetrySecuritySchemesTypes, string(v.GetType()))\n\t\t\t}\n\t\t\totelAttributes = append(otelAttributes, otelSecuritySchemesTypesAttributeKey.StringSlice(telemetrySecuritySchemesTypes))\n\n\t\t\toperations = append(operations, operation)\n\t\t\ttelemetryOperationCounter.Add(ctx, 1, metric.WithAttributes(otelAttributes...))\n\t\t}\n\t}\n\n\treturn operations, nil\n}\n" }, { "path": "openapi/param.go", "content": "package openapi\n\nimport (\n\t\"bytes\"\n\t\"fmt\"\n\t\"strconv\"\n\n\t\"github.com/brianvoe/gofakeit/v7\"\n\t\"github.com/getkin/kin-openapi/openapi3\"\n)\n\nconst maximumDepth = 4\n\nconst (\n\tFloatParamType = \"float\"\n\tDoubleParamType = \"double\"\n\tInt32ParamFormat = \"int32\"\n\tInt64ParamFormat = \"int64\"\n)\n\nfunc NewErrNoSupportedBodyMediaType() error {\n\treturn fmt.Errorf(\"no supported body media type\")\n}\n\nfunc getParameterValue(param *openapi3.Parameter) string {\n\tif param.Schema != nil {\n\t\tvalue := getSchemaValue(param.Schema.Value, 0)\n\t\tswitch {\n\t\tcase param.Schema.Value.Type.Is(\"string\"):\n\t\t\treturn value.(string)\n\t\tcase param.Schema.Value.Type.Is(\"number\"):\n\t\t\tswitch param.Schema.Value.Format {\n\t\t\tcase FloatParamType:\n\t\t\t\treturn strconv.FormatFloat(value.(float64), 'f', -1, 32)\n\t\t\tcase DoubleParamType:\n\t\t\tdefault:\n\t\t\t\treturn strconv.FormatFloat(value.(float64), 'f', -1, 64)\n\t\t\t}\n\t\tcase param.Schema.Value.Type.Is(\"integer\"):\n\t\t\treturn strconv.FormatInt(value.(int64), 10)\n\t\tcase param.Schema.Value.Type.Is(\"boolean\"):\n\t\t\treturn strconv.FormatBool(value.(bool))\n\t\t}\n\t}\n\treturn \"\"\n}\n\nfunc mapRequestBodyFakeValueToJSON(schema *openapi3.Schema, fakeValue interface{}) *bytes.Buffer {\n\tjsonResponse := []byte(\"{}\")\n\tswitch {\n\tcase schema.Type.Is(\"string\"):\n\t\tjsonResponse = []byte(\"\\\"\" + fakeValue.(string) + \"\\\"\")\n\tcase schema.Type.Is(\"number\"):\n\t\tjsonResponse = []byte(strconv.FormatFloat(fakeValue.(float64), 'f', -1, 64))\n\tcase schema.Type.Is(\"integer\"):\n\t\tjsonResponse = []byte(strconv.FormatInt(fakeValue.(int64), 10))\n\tcase schema.Type.Is(\"boolean\"):\n\t\tjsonResponse = []byte(strconv.FormatBool(fakeValue.(bool)))\n\tcase schema.Type.Is(\"array\"):\n\t\tjsonResponse = []byte(\"[\")\n\t\tfor i, value := range fakeValue.([]interface{}) {\n\t\t\tif i > 0 {\n\t\t\t\tjsonResponse = append(jsonResponse, ',')\n\t\t\t}\n\t\t\tjsonResponse = append(jsonResponse, mapRequestBodyFakeValueToJSON(schema.Items.Value, value).Bytes()...)\n\t\t}\n\t\tjsonResponse = append(jsonResponse, ']')\n\tcase schema.Type.Is(\"object\"):\n\t\tjsonResponse = []byte(\"{\")\n\t\ti := 0\n\t\tfor key, value := range fakeValue.(map[string]interface{}) {\n\t\t\tif i > 0 {\n\t\t\t\tjsonResponse = append(jsonResponse, ',')\n\t\t\t}\n\t\t\tjsonResponse = append(jsonResponse, []byte(\"\\\"\"+key+\"\\\":\")...)\n\t\t\tjsonResponse = append(jsonResponse, mapRequestBodyFakeValueToJSON(schema.Properties[key].Value, value).Bytes()...)\n\t\t\ti++\n\t\t}\n\t\tjsonResponse = append(jsonResponse, '}')\n\t}\n\treturn bytes.NewBuffer(jsonResponse)\n}\n\nfunc getRequestBodyValue(requestBody *openapi3.RequestBody) (*bytes.Buffer, string, error) {\n\tif requestBody == nil || requestBody.Content == nil {\n\t\treturn nil, \"\", nil\n\t}\n\tfor mediaType, mediaTypeValue := range requestBody.Content {\n\t\tif mediaTypeValue.Schema != nil {\n\t\t\tbody := getSchemaValue(mediaTypeValue.Schema.Value, 0)\n\t\t\tif mediaType == \"application/json\" {\n\t\t\t\treturn mapRequestBodyFakeValueToJSON(mediaTypeValue.Schema.Value, body), mediaType, nil\n\t\t\t}\n\t\t}\n\t}\n\treturn nil, \"\", NewErrNoSupportedBodyMediaType()\n}\n\nfunc parseSchemaExample(schema *openapi3.Schema) (interface{}, error) {\n\tvar example interface{}\n\tif schema.Example != nil {\n\t\texample = schema.Example\n\t} else if len(schema.Enum) > 0 {\n\t\texample = schema.Enum[gofakeit.Number(0, len(schema.Enum)-1)]\n\t}\n\tif example == nil {\n\t\treturn nil, nil\n\t}\n\n\tvar ok bool\n\t_, ok = example.(string)\n\tif ok && !schema.Type.Is(\"string\") {\n\t\tswitch {\n\t\tcase schema.Type.Is(\"number\"):\n\t\t\treturn strconv.ParseFloat(example.(string), 64)\n\t\tcase schema.Type.Is(\"integer\"):\n\t\t\treturn strconv.ParseInt(example.(string), 10, 64)\n\t\tcase schema.Type.Is(\"boolean\"):\n\t\t\treturn strconv.ParseBool(example.(string))\n\t\t}\n\t}\n\n\tswitch {\n\tcase schema.Type.Is(\"string\"):\n\t\texample, ok = example.(string)\n\tcase schema.Type.Is(\"number\"):\n\t\texample, ok = example.(float64)\n\tcase schema.Type.Is(\"integer\"):\n\t\tswitch schema.Format {\n\t\tcase Int32ParamFormat:\n\t\t\texample, ok = example.(int32)\n\t\tcase Int64ParamFormat:\n\t\tdefault:\n\t\t\texample, ok = example.(int64)\n\t\t}\n\tcase schema.Type.Is(\"boolean\"):\n\t\texample, ok = example.(bool)\n\tcase schema.Type.Is(\"array\"):\n\t\texample, ok = example.([]interface{})\n\tcase schema.Type.Is(\"object\"):\n\t\texample, ok = example.(map[string]interface{})\n\t}\n\tif !ok {\n\t\treturn nil, fmt.Errorf(\"invalid example type\")\n\t}\n\treturn example, nil\n}\n\nfunc getSchemaValue(schema *openapi3.Schema, depth int) interface{} {\n\texample, err := parseSchemaExample(schema)\n\tif err == nil && example != nil {\n\t\treturn example\n\t}\n\n\t// if there is no example generate random param\n\tswitch {\n\tcase schema.Type.Is(\"number\"):\n\t\treturn gofakeit.Float64()\n\tcase schema.Type.Is(\"integer\"):\n\t\treturn gofakeit.Int64()\n\tcase schema.Type.Is(\"boolean\"):\n\t\treturn gofakeit.Bool()\n\tcase schema.Type.Is(\"array\"):\n\t\tif depth > maximumDepth {\n\t\t\treturn []interface{}{}\n\t\t}\n\t\treturn []interface{}{getSchemaValue(schema.Items.Value, depth+1)}\n\tcase schema.Type.Is(\"object\"):\n\t\tobject := map[string]interface{}{}\n\t\tif depth > maximumDepth {\n\t\t\treturn object\n\t\t}\n\t\tfor key, value := range schema.Properties {\n\t\t\tobject[key] = getSchemaValue(value.Value, depth+1)\n\t\t}\n\t\treturn object\n\tcase schema.Type.Is(\"string\"):\n\t\tswitch schema.Format {\n\t\tcase \"date\":\n\t\t\treturn gofakeit.Date().Format(\"2006-01-02\")\n\t\tcase \"date-time\":\n\t\t\treturn gofakeit.Date().Format(\"2006-01-02T15:04:05Z\")\n\t\tcase \"password\":\n\t\t\treturn gofakeit.Password(true, true, true, true, false, 10)\n\t\tcase \"byte\":\n\t\t\treturn gofakeit.LetterN(10)\n\t\tcase \"binary\":\n\t\t\treturn gofakeit.LetterN(10)\n\t\tcase \"email\":\n\t\t\treturn gofakeit.Email()\n\t\tcase \"uuid\":\n\t\t\treturn gofakeit.UUID()\n\t\tcase \"uri\":\n\t\t\treturn gofakeit.URL()\n\t\tcase \"hostname\":\n\t\t\treturn gofakeit.DomainName()\n\t\tcase \"ipv4\":\n\t\t\treturn gofakeit.IPv4Address()\n\t\tcase \"ipv6\":\n\t\t\treturn gofakeit.IPv6Address()\n\t\tdefault:\n\t\t\treturn gofakeit.Word()\n\t\t}\n\t}\n\n\treturn \"\"\n}\n" }, { "path": "openapi/param_test.go", "content": "package openapi_test\n\nimport (\n\t\"context\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestGetSchemaValue_WhenNoParameters(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 0)\n\tassert.Len(t, operations[0].Cookies, 0)\n}\n\nfunc TestGetSchemaValue_WhenHeaderParametersWithExample(t *testing.T) {\n\texpected := \"example\"\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [{name: param, in: header, required: true, schema: {type: string, example: example}}], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 1)\n\tassert.Equal(t, expected, operations[0].Header.Get(\"param\"))\n\tassert.Len(t, operations[0].Cookies, 0)\n}\n\nfunc TestGetSchemaValue_WhenHeaderParametersWithoutExample(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [{name: param, in: header, required: true, schema: {type: string}}], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 1)\n\tassert.GreaterOrEqual(t, len(operations[0].Header.Get(\"param\")), 1)\n\tassert.NotEqual(t, \"\", operations[0].Header.Get(\"param\"))\n\tassert.Len(t, operations[0].Cookies, 0)\n}\n\nfunc TestGetSchemaValue_WhenHeaderParametersNotRequired(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [{name: param, in: header, schema: {type: string, example: example}}], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 0)\n\tassert.Len(t, operations[0].Cookies, 0)\n}\n\nfunc TestGetSchemaValue_WhenCookieParametersWithExample(t *testing.T) {\n\texpected := \"example\"\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [{name: param, in: cookie, required: true, schema: {type: string, example: example}}], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 0)\n\tassert.Len(t, operations[0].Cookies, 1)\n\tassert.Equal(t, expected, operations[0].Cookies[0].Value)\n}\n\nfunc TestGetSchemaValue_WhenCookieParametersWithoutExample(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [{name: param, in: cookie, required: true, schema: {type: string}}], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 0)\n\tassert.Len(t, operations[0].Cookies, 1)\n\tassert.GreaterOrEqual(t, len(operations[0].Cookies[0].Value), 1)\n\tassert.NotEqual(t, \"\", operations[0].Cookies[0].Value)\n}\n\nfunc TestGetSchemaValue_WhenCookieParametersNotRequired(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [{name: param, in: cookie, schema: {type: string, example: example}}], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 0)\n\tassert.Len(t, operations[0].Cookies, 0)\n}\n\nfunc TestGetSchemaValue_WhenPathParametersWithExample(t *testing.T) {\n\texpected := \"/example\"\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {'/{param}': {get: {parameters: [{name: param, in: path, required: true, schema: {type: string, example: example}}], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 0)\n\tassert.Len(t, operations[0].Cookies, 0)\n\tassert.Equal(t, expected, operations[0].URL.Path)\n}\n\nfunc TestGetSchemaValue_WhenPathParametersWithoutExample(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {'/{param}': {get: {parameters: [{name: param, in: path, required: true, schema: {type: string}}], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 0)\n\tassert.Len(t, operations[0].Cookies, 0)\n\tassert.GreaterOrEqual(t, len(operations[0].URL.Path), 1)\n}\n\nfunc TestGetSchemaValue_WhenRequestBodyParametersWithExample(t *testing.T) {\n\texpected := []byte(\"\\\"example\\\"\")\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: string, example: example}}}}, responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 1)\n\tassert.Equal(t, \"application/json\", operations[0].Header.Get(\"Content-Type\"))\n\tassert.Len(t, operations[0].Cookies, 0)\n\tassert.NotNil(t, operations[0].Body)\n\tassert.Equal(t, expected, operations[0].Body)\n}\n\nfunc TestGetSchemaValue_WhenRequestBodyParametersWithMultiMediaTypes(t *testing.T) {\n\texpected := []byte(\"\\\"example\\\"\")\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/xml': {schema: {type: string, example: example}},'application/json': {schema: {type: string, example: example}}}}, responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, \"application/json\", operations[0].Header.Get(\"Content-Type\"))\n\tassert.NotNil(t, operations[0].Body)\n\tassert.Equal(t, expected, operations[0].Body)\n}\n\nfunc TestGetSchemaValue_WhenRequestBodyParametersWithoutExample(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: string}}}}, responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 1)\n\tassert.Equal(t, \"application/json\", operations[0].Header.Get(\"Content-Type\"))\n\tassert.Len(t, operations[0].Cookies, 0)\n\tassert.NotNil(t, operations[0].Body)\n}\n\nfunc TestGetSchemaValue_WhenRequestBodyParametersIsString(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: string, example: example}}}}, responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, err)\n\tassert.Len(t, operations, 1)\n\tassert.Len(t, operations[0].Header, 1)\n\tassert.Equal(t, \"application/json\", operations[0].Header.Get(\"Content-Type\"))\n\tassert.Len(t, operations[0].Cookies, 0)\n\tassert.NotNil(t, operations[0].Body)\n}\n\nfunc TestGetSchemaValue_RequestBodyParameters(t *testing.T) {\n\ttests := []struct {\n\t\tname string\n\t\tschema string\n\t}{\n\t\t{\n\t\t\tname: \"string\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: string}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"number\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"double\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number, format: double}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"float\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number, format: float}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"integer\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"int32\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number, format: int32}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"int64\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number, format: int64}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"boolean\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: boolean}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"array\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: array, items: {type: string}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"object\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {name: {type: string}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"object with array\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {name: {type: array, items: {type: string}}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"object with array with 10 depth properties\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {name: {type: array, items: {type: object, properties: {subname: {type: array, items: {type: object, properties: {subsubname: {type: array, items: {type: object, properties: {subsubsubname: {type: array, items: {type: object, properties: {subsubsubsubname: {type: array, items: {type: object, properties: {subsubsubsubsubname: {type: array, items: {type: object, properties: {subsubsubsubsubsubname: {type: array, items: {type: object, properties: {subsubsubsubsubsubsubname: {type: array, items: {type: object, properties: {subsubsubsubsubsubsubsubname: {type: array, items: {type: object, properties: {subsubsubsubsubsubsubsubsubname: {type: array, items: {type: string }}} }}} }}} }}} }}} }}} }}} }}} }}} }}}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"object with object\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {name: {type: object, properties: {subname: {type: string}}}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"object with missing properties\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"object with 4 depth properties\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {name: {type: object, properties: {subname: {type: object, properties: {subsubname: {type: object, properties: {subsubsubname: {type: string}}}}}}}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t\t{\n\t\t\tname: \"object with 10 depth properties\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {name: {type: object, properties: {subname: {type: object, properties: {subsubname: {type: object, properties: {subsubsubname: {type: object, properties: {subsubsubsubname: {type: object, properties: {subsubsubsubsubname: {type: object, properties: {subsubsubsubsubsubname: {type: object, properties: {subsubsubsubsubsubsubname: {type: object, properties: {subsubsubsubsubsubsubsubname: {type: object, properties: {subsubsubsubsubsubsubsubsubname: {type: string }}} }}}}}}}}}}}}}}}}}}}}}}}, responses: {'204': {}}}}}}`,\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\topenapiContract, _ := openapi.LoadFromData(\n\t\t\t\tcontext.TODO(),\n\t\t\t\t[]byte(tt.schema),\n\t\t\t)\n\n\t\t\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\t\t\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\t\t\tassert.NoError(t, err)\n\t\t\tassert.NotNil(t, operations[0].Body)\n\t\t})\n\t}\n}\n\nfunc TestGetSchemaValue_RequestBodyParametersAndExample(t *testing.T) {\n\ttests := []struct {\n\t\tname string\n\t\tschema string\n\t\texpected []byte\n\t}{\n\t\t{\n\t\t\tname: \"string\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: string, example: example}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"\\\"example\\\"\"),\n\t\t},\n\t\t{\n\t\t\tname: \"number\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number, example: 1.1}}}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"{\\\"number\\\":1.1}\"),\n\t\t},\n\t\t{\n\t\t\tname: \"double\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number, format: double, example: 1.1}}}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"{\\\"number\\\":1.1}\"),\n\t\t},\n\t\t{\n\t\t\tname: \"float\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number, format: float, example: 1.1}}}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"{\\\"number\\\":1.1}\"),\n\t\t},\n\t\t{\n\t\t\tname: \"integer\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number, example: 1}}}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"{\\\"number\\\":1}\"),\n\t\t},\n\t\t{\n\t\t\tname: \"int32\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number, format: int32, example: 1}}}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"{\\\"number\\\":1}\"),\n\t\t},\n\t\t{\n\t\t\tname: \"int64\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {number: {type: number, format: int64, example: 1}}}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"{\\\"number\\\":1}\"),\n\t\t},\n\t\t{\n\t\t\tname: \"boolean\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: boolean, example: true}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"true\"),\n\t\t},\n\t\t{\n\t\t\tname: \"array\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: array, items: {type: string, example: example}}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"[\\\"example\\\"]\"),\n\t\t},\n\t\t{\n\t\t\tname: \"object\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {name: {type: string, example: example}}}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"{\\\"name\\\":\\\"example\\\"}\"),\n\t\t},\n\t\t{\n\t\t\tname: \"object with array\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {name: {type: array, items: {type: string, example: example}}}}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"{\\\"name\\\":[\\\"example\\\"]}\"),\n\t\t},\n\t\t{\n\t\t\tname: \"object with object\",\n\t\t\tschema: `{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {post: {requestBody: {content: {'application/json': {schema: {type: object, properties: {name: {type: object, properties: {subname: {type: string, example: example}}}}}}}}, responses: {'204': {}}}}}}`,\n\t\t\texpected: []byte(\"{\\\"name\\\":{\\\"subname\\\":\\\"example\\\"}}\"),\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\topenapiContract, _ := openapi.LoadFromData(\n\t\t\t\tcontext.TODO(),\n\t\t\t\t[]byte(tt.schema),\n\t\t\t)\n\n\t\t\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\t\t\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\t\t\tassert.NoError(t, err)\n\t\t\tassert.NotNil(t, operations[0].Body)\n\t\t\tassert.Equal(t, tt.expected, operations[0].Body)\n\t\t})\n\t}\n}\n\nfunc TestRecursiveParameters(t *testing.T) {\n\topenapiContract, operr := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{\"openapi\":\"3.0.2\",\"servers\":[{\"url\":\"http://localhost:8080\"}],\"paths\":{\"/\":{\"post\":{\"summary\":\"Create an item\",\"requestBody\":{\"required\":true,\"content\":{\"application/json\":{\"schema\":{\"$ref\":\"#/components/schemas/Item\"}}}},\"responses\":{\"201\":{\"description\":\"Item created\",\"content\":{\"application/json\":{\"schema\":{\"$ref\":\"#/components/schemas/Item\"}}}}}}}},\"components\":{\"schemas\":{\"Item\":{\"type\":\"object\",\"properties\":{\"details\":{\"type\":\"object\",\"properties\":{\"description\":{\"type\":\"string\"},\"attributes\":{\"type\":\"array\",\"items\":{\"$ref\":\"#/components/schemas/Attribute\"}}}}}},\"Attribute\":{\"type\":\"object\",\"properties\":{\"key\":{\"type\":\"string\"},\"value\":{\"type\":\"string\"},\"subAttributes\":{\"type\":\"array\",\"items\":{\"$ref\":\"#/components/schemas/Attribute\"}}}}}}}}`),\n\t)\n\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, err := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\tassert.NoError(t, operr)\n\tassert.NoError(t, err)\n\tassert.NotNil(t, operations[0].Body)\n}\n" }, { "path": "openapi/security_scheme.go", "content": "package openapi\n\nimport (\n\t\"context\"\n\t\"fmt\"\n\t\"strings\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\t\"github.com/getkin/kin-openapi/openapi3\"\n\t\"go.opentelemetry.io/otel/attribute\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\nconst (\n\tHttpSchemeType string = \"http\"\n\tOAuth2SchemeType string = \"oauth2\"\n\tOpenIdConnectSchemeType string = \"openidconnect\"\n\tApiKeySchemeType string = \"apikey\"\n\n\tBasicScheme string = \"basic\"\n\tBearerScheme string = \"bearer\"\n\t// DigestScheme string = \"digest\"\n\t// OAuthScheme string = \"oauth\"\n\t// PrivateToken string = \"privateToken\"\n\n\t// NoneScheme string = \"none\"\n\t// UnknownScheme string = \"unknown\"\n)\n\nconst (\n\totelSchemeTypeAttributeKey = attribute.Key(\"scheme_type\")\n\totelSchemeSchemeAttributeKey = attribute.Key(\"scheme_scheme\")\n\totelSchemeInAttributeKey = attribute.Key(\"scheme_in\")\n\totelSchemeBearerFormatKey = attribute.Key(\"scheme_bearer_format\")\n)\n\nfunc NewErrUnsupportedBearerFormat(bearerFormat string) error {\n\treturn fmt.Errorf(\"unsupported bearer format: %s\", bearerFormat)\n}\n\nfunc NewErrUnsupportedScheme(scheme string) error {\n\treturn fmt.Errorf(\"unsupported scheme: %s\", scheme)\n}\n\nfunc NewErrUnsupportedSecuritySchemeType(schemeType string) error {\n\treturn fmt.Errorf(\"unsupported security scheme type: %s\", schemeType)\n}\n\nfunc mapHTTPSchemeType(name string, scheme *openapi3.SecuritySchemeRef, securitySchemeValue *string) (*auth.SecurityScheme, error) {\n\tswitch schemeScheme := strings.ToLower(scheme.Value.Scheme); schemeScheme {\n\tcase BearerScheme:\n\t\tsecurityScheme, err := auth.NewAuthorizationBearerSecurityScheme(name, securitySchemeValue)\n\t\tif err != nil {\n\t\t\treturn nil, err\n\t\t}\n\n\t\tswitch bearerFormat := strings.ToLower(scheme.Value.BearerFormat); bearerFormat {\n\t\tcase \"\":\n\t\t\treturn securityScheme, nil\n\t\tcase \"jwt\":\n\t\t\terr := securityScheme.SetTokenFormat(auth.JWTTokenFormat)\n\t\t\tif err != nil {\n\t\t\t\treturn nil, err\n\t\t\t}\n\t\t\treturn securityScheme, nil\n\t\tdefault:\n\t\t\treturn nil, NewErrUnsupportedBearerFormat(bearerFormat)\n\t\t}\n\tcase BasicScheme:\n\t\treturn auth.NewAuthorizationBasicSecurityScheme(name, nil)\n\tdefault:\n\t\treturn nil, NewErrUnsupportedScheme(schemeScheme)\n\t}\n}\n\nfunc mapAPIKeySchemeType(name string, scheme *openapi3.SecuritySchemeRef, securitySchemeValue *string) (*auth.SecurityScheme, error) {\n\treturn auth.NewAPIKeySecurityScheme(name, auth.SchemeIn(scheme.Value.In), securitySchemeValue)\n}\n\nfunc mapOAuth2SchemeType(name string, scheme *openapi3.SecuritySchemeRef, securitySchemeValue *auth.OAuthValue) (*auth.SecurityScheme, error) {\n\tif scheme.Value.Flows == nil {\n\t\treturn auth.NewOAuthSecurityScheme(name, nil, securitySchemeValue, nil)\n\t}\n\n\tvar cfg *auth.OAuthConfig\n\tswitch {\n\tcase scheme.Value.Flows.AuthorizationCode != nil:\n\t\tcfg = &auth.OAuthConfig{\n\t\t\tTokenURL: scheme.Value.Flows.AuthorizationCode.TokenURL,\n\t\t\tRefreshURL: scheme.Value.Flows.AuthorizationCode.RefreshURL,\n\t\t}\n\tcase scheme.Value.Flows.Implicit != nil:\n\t\tcfg = &auth.OAuthConfig{\n\t\t\tTokenURL: scheme.Value.Flows.Implicit.TokenURL,\n\t\t\tRefreshURL: scheme.Value.Flows.Implicit.RefreshURL,\n\t\t}\n\tcase scheme.Value.Flows.ClientCredentials != nil:\n\t\tcfg = &auth.OAuthConfig{\n\t\t\tTokenURL: scheme.Value.Flows.ClientCredentials.TokenURL,\n\t\t\tRefreshURL: scheme.Value.Flows.ClientCredentials.RefreshURL,\n\t\t}\n\t}\n\n\treturn auth.NewOAuthSecurityScheme(name, nil, securitySchemeValue, cfg)\n}\n\nfunc (openapi *OpenAPI) SecuritySchemeMap(ctx context.Context, values *SecuritySchemeValues) (auth.SecuritySchemesMap, error) {\n\tif openapi.Doc.Components == nil || openapi.Doc.Components.SecuritySchemes == nil {\n\t\treturn nil, nil\n\t}\n\n\tvar err error\n\tvar securitySchemeValue interface{}\n\n\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\ttelemetrySecuritySchemeCounter, _ := telemetryMeter.Int64Counter(\"openapi.security_scheme.counter\")\n\ttelemetryUnsupportedSecuritySchemeCounter, _ := telemetryMeter.Int64Counter(\"openapi.security_scheme.unsupported.counter\")\n\ttelemetrySecuritySchemeErrorCounter, _ := telemetryMeter.Int64Counter(\"openapi.security_scheme.error.counter\")\n\n\tsecuritySchemes := map[string]*auth.SecurityScheme{}\n\tfor name, scheme := range openapi.Doc.Components.SecuritySchemes {\n\t\tsecuritySchemeValue = values.Get(name)\n\n\t\tvar value *string\n\t\tif securitySchemeValue != nil {\n\t\t\tvalue, _ = securitySchemeValue.(*string)\n\t\t}\n\n\t\tschemeType := strings.ToLower(scheme.Value.Type)\n\t\tattributes := []attribute.KeyValue{\n\t\t\totelSchemeTypeAttributeKey.String(schemeType),\n\t\t\totelSchemeSchemeAttributeKey.String(strings.ToLower(scheme.Value.Scheme)),\n\t\t\totelSchemeInAttributeKey.String(strings.ToLower(scheme.Value.In)),\n\t\t\totelSchemeBearerFormatKey.String(strings.ToLower(scheme.Value.BearerFormat)),\n\t\t}\n\n\t\tswitch schemeType {\n\t\tcase HttpSchemeType:\n\t\t\tsecuritySchemes[name], err = mapHTTPSchemeType(name, scheme, value)\n\t\tcase OAuth2SchemeType, OpenIdConnectSchemeType:\n\t\t\tvar oauthValue *auth.OAuthValue\n\t\t\tif value != nil {\n\t\t\t\toauthValue = auth.NewOAuthValue(*value, nil, nil, nil)\n\t\t\t}\n\t\t\tsecuritySchemes[name], err = mapOAuth2SchemeType(name, scheme, oauthValue)\n\t\tcase ApiKeySchemeType:\n\t\t\tsecuritySchemes[name], err = mapAPIKeySchemeType(name, scheme, value)\n\t\tdefault:\n\t\t\ttelemetryUnsupportedSecuritySchemeCounter.Add(ctx, 1, metric.WithAttributes(attributes...))\n\t\t\terr = NewErrUnsupportedSecuritySchemeType(schemeType)\n\t\t}\n\n\t\tif err != nil {\n\t\t\ttelemetrySecuritySchemeErrorCounter.Add(ctx, 1, metric.WithAttributes(attributes...))\n\t\t\treturn nil, err\n\t\t}\n\n\t\ttelemetrySecuritySchemeCounter.Add(ctx, 1, metric.WithAttributes(attributes...))\n\t}\n\n\treturn securitySchemes, nil\n}\n" }, { "path": "openapi/security_scheme_test.go", "content": "package openapi_test\n\nimport (\n\t\"testing\"\n\n\tjwtop \"github.com/cerberauth/jwtop/jwt\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestSecuritySchemeMap_WithoutSecurityComponents(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.NoError(t, err)\n\tassert.Nil(t, result)\n}\n\nfunc TestSecuritySchemeMap_WithUnknownSchemeType(t *testing.T) {\n\texpectedErr := openapi.NewErrUnsupportedSecuritySchemeType(\"other\")\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{bearer_auth: []}]}}}, components: {securitySchemes: {bearer_auth: {type: other}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.Error(t, err)\n\tassert.Equal(t, expectedErr, err)\n\tassert.Nil(t, result)\n}\n\nfunc TestSecuritySchemeMap_WithUnknownScheme(t *testing.T) {\n\texpectedErr := openapi.NewErrUnsupportedScheme(\"other\")\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{bearer_auth: []}]}}}, components: {securitySchemes: {bearer_auth: {type: http, scheme: other}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.Error(t, err)\n\tassert.Equal(t, expectedErr, err)\n\tassert.Nil(t, result)\n}\n\nfunc TestSecuritySchemeMap_WithUnknownBearerFormat(t *testing.T) {\n\texpectedErr := openapi.NewErrUnsupportedBearerFormat(\"other\")\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{bearer_auth: []}]}}}, components: {securitySchemes: {bearer_auth: {type: http, scheme: bearer, bearerFormat: other}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.Error(t, err)\n\tassert.Equal(t, expectedErr, err)\n\tassert.Nil(t, result)\n}\n\nfunc TestSecuritySchemeMap_WithHTTPJWTBearer(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{bearer_auth: []}]}}}, components: {securitySchemes: {bearer_auth: {type: http, scheme: bearer, bearerFormat: JWT}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, result)\n\tassert.Equal(t, auth.HttpType, result[\"bearer_auth\"].GetType())\n\tassert.Equal(t, auth.BearerScheme, result[\"bearer_auth\"].GetScheme())\n\tassert.Equal(t, auth.JWTTokenFormat, *result[\"bearer_auth\"].GetTokenFormat())\n}\n\nfunc TestSecuritySchemeMap_WithHTTPBearer(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{bearer_auth: []}]}}}, components: {securitySchemes: {bearer_auth: {type: http, scheme: bearer}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, result)\n\tassert.Equal(t, auth.HttpType, result[\"bearer_auth\"].GetType())\n\tassert.Equal(t, auth.BearerScheme, result[\"bearer_auth\"].GetScheme())\n}\n\nfunc TestSecuritySchemeMap_WithoutHTTPJWTBearerAndDefaultValue(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{bearer_auth: []}]}}}, components: {securitySchemes: {bearer_auth: {type: http, scheme: bearer, bearerFormat: JWT}}}}`),\n\t)\n\n\ttoken, err := jwtop.CreateWithSecret(jwtop.CreateOptions{Algorithm: \"HS256\"}, []byte(\"\"))\n\trequire.NoError(t, err)\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues().WithDefault(&token))\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, result)\n\tassert.Equal(t, auth.HttpType, result[\"bearer_auth\"].GetType())\n\tassert.Equal(t, auth.BearerScheme, result[\"bearer_auth\"].GetScheme())\n\tassert.Equal(t, auth.JWTTokenFormat, *result[\"bearer_auth\"].GetTokenFormat())\n}\n\nfunc TestSecuritySchemeMap_WithAPIKeyInHeader(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [{name: 'Authorization', in: header, required: true, schema: {type: string}}], responses: {'204': {description: successful operation}}, security: [{api_key_auth: []}]}}}, components: {securitySchemes: {api_key_auth: {type: apiKey, in: header, name: X-API-KEY}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, result)\n\tassert.Equal(t, auth.ApiKey, result[\"api_key_auth\"].GetType())\n\tassert.Equal(t, auth.InHeader, *result[\"api_key_auth\"].In)\n}\n\nfunc TestSecuritySchemeMap_WithInvalidValueType(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{bearer_auth: []}]}}}, components: {securitySchemes: {bearer_auth: {type: http, scheme: bearer, bearerFormat: JWT}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues().WithDefault(\"\"))\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, result)\n\tassert.Equal(t, auth.HttpType, result[\"bearer_auth\"].GetType())\n\tassert.Equal(t, auth.BearerScheme, result[\"bearer_auth\"].GetScheme())\n\tassert.Equal(t, auth.JWTTokenFormat, *result[\"bearer_auth\"].GetTokenFormat())\n}\n\nfunc TestSecuritySchemeMap_WithOAuth(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{oauth_auth: []}]}}}, components: {securitySchemes: {oauth_auth: {type: oauth2}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, result)\n\tassert.Equal(t, auth.OAuth2, result[\"oauth_auth\"].GetType())\n\tassert.Equal(t, auth.OAuthScheme, result[\"oauth_auth\"].GetScheme())\n}\n\nfunc TestSecuritySchemeMap_WithOAuthAndAuthorizationCodeFlow(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{oauth_auth: []}]}}}, components: {securitySchemes: {oauth_auth: {type: oauth2, flows: {authorizationCode: {tokenUrl: 'http://localhost:8080/token', refreshUrl: 'http://localhost:8080/refresh'}}}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, result)\n\tassert.Equal(t, auth.OAuth2, result[\"oauth_auth\"].GetType())\n\tassert.Equal(t, auth.OAuthScheme, result[\"oauth_auth\"].GetScheme())\n\tassert.Equal(t, &auth.OAuthConfig{\n\t\tTokenURL: \"http://localhost:8080/token\",\n\t\tRefreshURL: \"http://localhost:8080/refresh\",\n\t}, result[\"oauth_auth\"].GetConfig())\n}\n\nfunc TestSecuritySchemeMap_WithOAuthAndImplicitFlow(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{oauth_auth: []}]}}}, components: {securitySchemes: {oauth_auth: {type: oauth2, flows: {implicit: {tokenUrl: 'http://localhost:8080/token', refreshUrl: 'http://localhost:8080/refresh'}}}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, result)\n\tassert.Equal(t, auth.OAuth2, result[\"oauth_auth\"].GetType())\n\tassert.Equal(t, auth.OAuthScheme, result[\"oauth_auth\"].GetScheme())\n\tassert.Equal(t, &auth.OAuthConfig{\n\t\tTokenURL: \"http://localhost:8080/token\",\n\t\tRefreshURL: \"http://localhost:8080/refresh\",\n\t}, result[\"oauth_auth\"].GetConfig())\n}\n\nfunc TestSecuritySchemeMap_WithOAuthAndClientCredentialsFlow(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{oauth_auth: []}]}}}, components: {securitySchemes: {oauth_auth: {type: oauth2, flows: {clientCredentials: {tokenUrl: 'http://localhost:8080/token', refreshUrl: 'http://localhost:8080/refresh'}}}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, result)\n\tassert.Equal(t, auth.OAuth2, result[\"oauth_auth\"].GetType())\n\tassert.Equal(t, auth.OAuthScheme, result[\"oauth_auth\"].GetScheme())\n\tassert.Equal(t, &auth.OAuthConfig{\n\t\tTokenURL: \"http://localhost:8080/token\",\n\t\tRefreshURL: \"http://localhost:8080/refresh\",\n\t}, result[\"oauth_auth\"].GetConfig())\n}\n\nfunc TestSecuritySchemeMap_WithOpenIDConnect(t *testing.T) {\n\topenapiContract, _ := openapi.LoadFromData(\n\t\tt.Context(),\n\t\t[]byte(`{openapi: 3.0.2, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {parameters: [], responses: {'204': {description: successful operation}}, security: [{oidc_auth: []}]}}}, components: {securitySchemes: {oidc_auth: {type: openIdConnect}}}}`),\n\t)\n\n\tresult, err := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\n\tassert.NoError(t, err)\n\tassert.NotNil(t, result)\n\tassert.Equal(t, auth.OAuth2, result[\"oidc_auth\"].GetType())\n\tassert.Equal(t, auth.OAuthScheme, result[\"oidc_auth\"].GetScheme())\n\tassert.Nil(t, result[\"oidc_auth\"].GetConfig())\n}\n" }, { "path": "openapi/security_scheme_values.go", "content": "package openapi\n\ntype SecuritySchemeValues struct {\n\tDefault interface{}\n\tValues map[string]interface{}\n}\n\nfunc NewSecuritySchemeValues(values map[string]interface{}) *SecuritySchemeValues {\n\treturn &SecuritySchemeValues{\n\t\tDefault: nil,\n\t\tValues: values,\n\t}\n}\n\nfunc NewEmptySecuritySchemeValues() *SecuritySchemeValues {\n\tvalues := make(map[string]interface{})\n\treturn NewSecuritySchemeValues(values)\n}\n\nfunc (s *SecuritySchemeValues) WithDefault(defaultValue interface{}) *SecuritySchemeValues {\n\ts.Default = defaultValue\n\treturn s\n}\n\nfunc (s *SecuritySchemeValues) GetDefault() interface{} {\n\treturn s.Default\n}\n\nfunc (s *SecuritySchemeValues) Get(key string) interface{} {\n\tif value, ok := s.Values[key]; ok {\n\t\treturn value\n\t}\n\treturn s.Default\n}\n\nfunc (s *SecuritySchemeValues) Set(key string, value interface{}) {\n\ts.Values[key] = value\n}\n" }, { "path": "openapi/security_scheme_values_test.go", "content": "package openapi_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewSecuritySchemeValues(t *testing.T) {\n\tvalues := map[string]interface{}{\n\t\t\"key\": \"value\",\n\t}\n\tsecuritySchemeValues := openapi.NewSecuritySchemeValues(values)\n\n\tassert.Nil(t, securitySchemeValues.Default)\n\tassert.NotNil(t, securitySchemeValues.Values)\n\tassert.Equal(t, values, securitySchemeValues.Values)\n}\n\nfunc TestNewEmptySecuritySchemeValues(t *testing.T) {\n\tsecuritySchemeValues := openapi.NewEmptySecuritySchemeValues()\n\n\tassert.Nil(t, securitySchemeValues.Default)\n\tassert.NotNil(t, securitySchemeValues.Values)\n\tassert.Empty(t, securitySchemeValues.Values)\n}\n\nfunc TestSecuritySchemeValues_WithDefault(t *testing.T) {\n\tsecuritySchemeValues := openapi.NewEmptySecuritySchemeValues()\n\tsecuritySchemeValues.WithDefault(\"default\")\n\n\tassert.Equal(t, \"default\", securitySchemeValues.Default)\n}\n\nfunc TestSecuritySchemeValues_GetDefault(t *testing.T) {\n\tsecuritySchemeValues := openapi.NewEmptySecuritySchemeValues()\n\tsecuritySchemeValues.WithDefault(\"default\")\n\n\tassert.Equal(t, \"default\", securitySchemeValues.GetDefault())\n}\n\nfunc TestSecuritySchemeValues_Get(t *testing.T) {\n\tsecuritySchemeValues := openapi.NewEmptySecuritySchemeValues()\n\tsecuritySchemeValues.WithDefault(\"default\")\n\tsecuritySchemeValues.Set(\"key\", \"value\")\n\n\tassert.Equal(t, \"value\", securitySchemeValues.Get(\"key\"))\n}\n\nfunc TestSecuritySchemeValues_Get_WhenNotExist(t *testing.T) {\n\tsecuritySchemeValues := openapi.NewEmptySecuritySchemeValues()\n\tsecuritySchemeValues.WithDefault(\"default\")\n\n\tassert.Equal(t, \"default\", securitySchemeValues.Get(\"key\"))\n}\n\nfunc TestSecuritySchemeValues_Set(t *testing.T) {\n\tsecuritySchemeValues := openapi.NewEmptySecuritySchemeValues()\n\tsecuritySchemeValues.Set(\"key\", \"value\")\n\n\tassert.Equal(t, \"value\", securitySchemeValues.Get(\"key\"))\n}\n" }, { "path": "openapi/validate.go", "content": "package openapi\n\nimport (\n\t\"context\"\n\t\"fmt\"\n)\n\nfunc (openapi *OpenAPI) Validate(ctx context.Context) error {\n\tif openapi.BaseUrl() == nil {\n\t\treturn fmt.Errorf(\"no valid base url has been found in OpenAPI file\")\n\t}\n\n\treturn nil\n}\n" }, { "path": "openapi/validate_test.go", "content": "package openapi_test\n\nimport (\n\t\"context\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestValidate(t *testing.T) {\n\topenapi, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, info: {title: API, version: '1.0', contact: {}}, servers: [{url: 'http://localhost:8080'}], paths: {/: {get: {responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\terr := openapi.Validate(context.Background())\n\n\tassert.NoError(t, err)\n}\n\nfunc TestValidateWithoutServers(t *testing.T) {\n\topenapi, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, info: {title: API, version: '1.0', contact: {}}, paths: {/: {get: {responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\terr := openapi.Validate(context.Background())\n\n\tassert.Error(t, err)\n\tassert.EqualError(t, err, \"no valid base url has been found in OpenAPI file\")\n}\n\nfunc TestValidateWithInvalidBaseUrl(t *testing.T) {\n\topenapi, _ := openapi.LoadFromData(\n\t\tcontext.Background(),\n\t\t[]byte(`{openapi: 3.0.2, info: {title: API, version: '1.0', contact: {}}, servers: [{url: 'invalid-url'}], paths: {/: {get: {responses: {'204': {description: successful operation}}}}}}`),\n\t)\n\n\terr := openapi.Validate(context.Background())\n\n\tassert.Error(t, err)\n\tassert.EqualError(t, err, \"no valid base url has been found in OpenAPI file\")\n}\n" }, { "path": "renovate.json", "content": "{\n \"extends\": [\n \"github>cerberauth/renovate-config\"\n ]\n}" }, { "path": "report/capec.go", "content": "package report\n\ntype CAPEC string\n\nconst (\n\tCAPEC_31_Manipulating_HTTP_Cookies CAPEC = \"CAPEC-31: Accessing/Intercepting/Modifying HTTP Cookies\"\n)\n" }, { "path": "report/curl_report.go", "content": "package report\n\nimport (\n\t\"net/http\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n)\n\ntype CurlReport struct {\n\tMethod string `json:\"method\" yaml:\"method\"`\n\tURL string `json:\"url\" yaml:\"url\"`\n\tData interface{} `json:\"data,omitempty\" yaml:\"data,omitempty\"`\n\tHeader http.Header `json:\"headers,omitempty\" yaml:\"headers,omitempty\"`\n\tCookies []*http.Cookie `json:\"cookies,omitempty\" yaml:\"cookies,omitempty\"`\n\n\tSecuritySchemes []OperationSecurityScheme `json:\"securitySchemes\" yaml:\"securitySchemes\"`\n\n\tIssues []*IssueReport `json:\"issues\" yaml:\"issues\"`\n}\n\nfunc NewCurlReport(method string, url string, data interface{}, header http.Header, cookies []*http.Cookie, securitySchemes []*auth.SecurityScheme) *CurlReport {\n\treportSecuritySchemes := []OperationSecurityScheme{}\n\tfor _, securityScheme := range securitySchemes {\n\t\treportSecuritySchemes = append(reportSecuritySchemes, NewOperationSecurityScheme(securityScheme))\n\t}\n\n\treturn &CurlReport{\n\t\tMethod: method,\n\t\tURL: url,\n\t\tData: data,\n\t\tHeader: header,\n\t\tCookies: cookies,\n\n\t\tSecuritySchemes: reportSecuritySchemes,\n\n\t\tIssues: []*IssueReport{},\n\t}\n}\n\nfunc (cr *CurlReport) AddReport(r *ScanReport) {\n\tif r.HasFailedIssueReport() {\n\t\tcr.Issues = append(cr.Issues, r.GetFailedIssueReports()...)\n\t}\n}\n" }, { "path": "report/curl_report_test.go", "content": "package report_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\tjwtop \"github.com/cerberauth/jwtop/jwt\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestNewCurlReport(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://example.com\"\n\tdata := map[string]interface{}{\"key\": \"value\"}\n\theader := http.Header{\"Content-Type\": []string{\"application/json\"}}\n\tcookies := []*http.Cookie{{Name: \"session_id\", Value: \"abc123\"}}\n\tvalue, err := jwtop.CreateWithSecret(jwtop.CreateOptions{Algorithm: \"HS256\"}, []byte(\"\"))\n\trequire.NoError(t, err)\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &value)\n\tsecuritySchemes := []*auth.SecurityScheme{securityScheme}\n\n\tcurlReport := report.NewCurlReport(method, url, data, header, cookies, securitySchemes)\n\n\tassert.Equal(t, method, curlReport.Method)\n\tassert.Equal(t, url, curlReport.URL)\n\tassert.Equal(t, data, curlReport.Data)\n\tassert.Equal(t, header, curlReport.Header)\n\tassert.Equal(t, cookies, curlReport.Cookies)\n\tassert.Len(t, curlReport.SecuritySchemes, len(securitySchemes))\n\tassert.Equal(t, auth.HttpType, curlReport.SecuritySchemes[0].Type)\n\tassert.Equal(t, auth.InHeader, *curlReport.SecuritySchemes[0].In)\n\tassert.Equal(t, \"token\", curlReport.SecuritySchemes[0].Name)\n\tassert.Empty(t, curlReport.Issues)\n}\n\nfunc Test_CurlReport_AddReport(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://example.com\"\n\tdata := map[string]interface{}{\"key\": \"value\"}\n\theader := http.Header{\"Content-Type\": []string{\"application/json\"}}\n\tcookies := []*http.Cookie{{Name: \"session_id\", Value: \"abc123\"}}\n\tsecuritySchemes := []*auth.SecurityScheme{}\n\n\tcurlReport := report.NewCurlReport(method, url, data, header, cookies, securitySchemes)\n\n\toperation := operation.MustNewOperation(method, url, nil, nil)\n\tscanReport := report.NewScanReport(\"id\", \"test\", operation)\n\tfirstIssue := report.Issue{\n\t\tName: \"issue 1\",\n\t}\n\tsecondIssue := report.Issue{\n\t\tName: \"issue 2\",\n\t}\n\tfirstIssueReport := report.NewIssueReport(firstIssue).Fail()\n\tsecondIssueReport := report.NewIssueReport(secondIssue).Fail()\n\tscanReport.AddIssueReport(firstIssueReport).AddIssueReport(secondIssueReport)\n\n\tcurlReport.AddReport(scanReport)\n\n\tassert.Len(t, curlReport.Issues, 2)\n\tassert.Equal(t, firstIssue.Name, curlReport.Issues[0].Name)\n\tassert.Equal(t, secondIssue.Name, curlReport.Issues[1].Name)\n}\n\nfunc TestAddReport_WhenScanReportHasNoFailedIssueReport(t *testing.T) {\n\tmethod := http.MethodGet\n\turl := \"http://example.com\"\n\tdata := map[string]interface{}{\"key\": \"value\"}\n\theader := http.Header{\"Content-Type\": []string{\"application/json\"}}\n\tcookies := []*http.Cookie{{Name: \"session_id\", Value: \"abc123\"}}\n\tsecuritySchemes := []*auth.SecurityScheme{}\n\n\tcurlReport := report.NewCurlReport(method, url, data, header, cookies, securitySchemes)\n\n\toperation := operation.MustNewOperation(method, url, nil, nil)\n\tscanReport := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"issue 1\",\n\t}\n\tissueReport := report.NewIssueReport(issue).Pass()\n\tscanReport.AddIssueReport(issueReport)\n\n\tcurlReport.AddReport(scanReport)\n\n\tassert.Empty(t, curlReport.Issues)\n}\n" }, { "path": "report/cwe.go", "content": "package report\n\ntype CWE string\n\nconst (\n\tCWE_16_Configuration CWE = \"CWE-16: Configuration\"\n\n\tCWE_287_Improper_Authentication CWE = \"CWE-287: Improper Authentication\"\n\tCWE_345_Insufficient_Verification_Authenticity CWE = \"CWE-345: Insufficient Verification of Data Authenticity\"\n\tCWE_489_Active_Debug_Code CWE = \"CWE-489: Active Debug Code\"\n\tCWE_613_Insufficient_Session_Expiration CWE = \"CWE-613: Insufficient Session Expiration\"\n\tCWE_614_Sensitive_Cookie_Without_Secure_Flag CWE = \"CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute\"\n\tCWE_942_Overly_Permissive_CORS_Policy CWE = \"CWE-942: Permissive Cross-domain Policy with Untrusted Domains\"\n\tCWE_1004_Sensitive_Cookie_Without_Http_Only CWE = \"CWE-1004: Sensitive Cookie Without 'HttpOnly' Flag\"\n\tCWE_1021_Improper_Restriction_Rendered_UI CWE = \"CWE-1021: Improper Restriction of Rendered UI Layers or Frames\"\n\tCWE_1275_Sensitive_Cookie_With_Improper_SameSite CWE = \"CWE-1275: Sensitive Cookie with Improper SameSite Attribute\"\n)\n" }, { "path": "report/graphql_report.go", "content": "package report\n\nimport \"github.com/cerberauth/vulnapi/internal/auth\"\n\ntype GraphQLOperationReport struct {\n\tID string `json:\"id\" yaml:\"id\"`\n\tTags []string `json:\"tags\" yaml:\"tags\"`\n\n\tSecuritySchemes []OperationSecurityScheme `json:\"securitySchemes\" yaml:\"securitySchemes\"`\n\tIssues []*IssueReport `json:\"issues\" yaml:\"issues\"`\n}\n\nfunc NewGraphQLOperationReport() GraphQLOperationReport {\n\treturn GraphQLOperationReport{\n\t\tSecuritySchemes: []OperationSecurityScheme{}, // TODO\n\n\t\tIssues: []*IssueReport{},\n\t}\n}\n\ntype GraphQLOperationsMethods map[string]GraphQLOperationReport\ntype GraphQLReport struct {\n\tURL string `json:\"url\" yaml:\"url\"`\n\n\tQueries GraphQLOperationsMethods `json:\"queries\" yaml:\"queries\"`\n\tMutations GraphQLOperationsMethods `json:\"mutations\" yaml:\"mutations\"`\n}\n\nfunc NewGraphQLReport(url string, securitySchemes []*auth.SecurityScheme) *GraphQLReport {\n\tqueries := GraphQLOperationsMethods{}\n\tmutations := GraphQLOperationsMethods{}\n\n\treturn &GraphQLReport{\n\t\tURL: url,\n\n\t\tQueries: queries,\n\t\tMutations: mutations,\n\t}\n}\n\nfunc (gr *GraphQLReport) AddReport(r *ScanReport) {\n\tfor _, operation := range gr.Queries {\n\t\tif operation.ID == r.Operation.ID {\n\t\t\toperation.Issues = append(operation.Issues, r.Issues...)\n\t\t}\n\t}\n\n\tfor _, operation := range gr.Mutations {\n\t\tif operation.ID == r.Operation.ID {\n\t\t\toperation.Issues = append(operation.Issues, r.Issues...)\n\t\t}\n\t}\n}\n" }, { "path": "report/issue.go", "content": "package report\n\ntype Classifications struct {\n\tOWASP OWASP `json:\"owasp,omitempty\" yaml:\"owasp,omitempty\"`\n\tCWE CWE `json:\"cwe,omitempty\" yaml:\"cwe,omitempty\"`\n\tCAPEC CAPEC `json:\"capec,omitempty\" yaml:\"capec,omitempty\"`\n}\n\ntype CVSS struct {\n\tVersion float64 `json:\"version\" yaml:\"version\"`\n\tVector string `json:\"vector\" yaml:\"vector\"`\n\tScore float64 `json:\"score\" yaml:\"score\"`\n}\n\ntype Issue struct {\n\tID string `json:\"id\" yaml:\"id\"`\n\tName string `json:\"name\" yaml:\"name\"`\n\tURL string `json:\"url,omitempty\" yaml:\"url,omitempty\"`\n\tCVSS CVSS `json:\"cvss\" yaml:\"cvss\"`\n\n\tClassifications *Classifications `json:\"classifications,omitempty\" yaml:\"classifications,omitempty\"`\n}\n" }, { "path": "report/issue_report.go", "content": "package report\n\nimport (\n\t\"context\"\n\t\"fmt\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\t\"go.opentelemetry.io/otel/attribute\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\ntype IssueReportStatus string\n\nfunc (vrs IssueReportStatus) String() string {\n\treturn string(vrs)\n}\n\nconst (\n\tIssueReportStatusPassed IssueReportStatus = \"passed\"\n\tIssueReportStatusFailed IssueReportStatus = \"failed\"\n\tIssueReportStatusSkipped IssueReportStatus = \"skipped\"\n\tIssueReportStatusNone IssueReportStatus = \"none\"\n)\n\nvar IssueReportStatuses = []IssueReportStatus{\n\tIssueReportStatusPassed,\n\tIssueReportStatusFailed,\n\tIssueReportStatusSkipped,\n\tIssueReportStatusNone,\n}\n\ntype IssueScanReport struct {\n\tID string `json:\"id\" yaml:\"id\"`\n\tStatus *scan.IssueScanAttemptStatus `json:\"status\" yaml:\"status\"`\n}\n\nfunc NewIssueScanReport(id string, status *scan.IssueScanAttemptStatus) *IssueScanReport {\n\treturn &IssueScanReport{\n\t\tID: id,\n\t\tStatus: status,\n\t}\n}\n\nfunc (issueScanReport *IssueScanReport) GetStatus() scan.IssueScanAttemptStatus {\n\treturn *issueScanReport.Status\n}\n\nfunc (issueScanReport *IssueScanReport) HasFailed() bool {\n\treturn *issueScanReport.Status == scan.IssueScanAttemptStatusFailed\n}\n\nfunc (issueScanReport *IssueScanReport) HasPassed() bool {\n\treturn *issueScanReport.Status == scan.IssueScanAttemptStatusPassed\n}\n\ntype IssueReport struct {\n\tIssue `json:\",inline\" yaml:\",inline\"`\n\tStatus IssueReportStatus `json:\"status\" yaml:\"status\"`\n\n\tScans []*IssueScanReport `json:\"scans\" yaml:\"scans\"`\n\tOperation *operation.Operation `json:\"-\" yaml:\"-\"`\n\tSecurityScheme *auth.SecurityScheme `json:\"-\" yaml:\"-\"`\n\n\ttelemetryIssueStatusCounter metric.Int64Counter\n}\n\nconst (\n\totelIssueIdAttribute = attribute.Key(\"issue_id\")\n\totelIssueReportStatusAttribute = attribute.Key(\"issue_report_status\")\n)\n\nfunc NewIssueReport(issue Issue) *IssueReport {\n\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\ttelemetryIssueStatusCounter, _ := telemetryMeter.Int64Counter(\"report.issue_status.counter\")\n\n\treturn &IssueReport{\n\t\tIssue: issue,\n\t\tStatus: IssueReportStatusNone,\n\t\tScans: []*IssueScanReport{},\n\n\t\ttelemetryIssueStatusCounter: telemetryIssueStatusCounter,\n\t}\n}\n\nfunc (vr *IssueReport) WithOperation(operation *operation.Operation) *IssueReport {\n\tvr.Operation = operation\n\treturn vr\n}\n\nfunc (vr *IssueReport) WithSecurityScheme(securityScheme *auth.SecurityScheme) *IssueReport {\n\tvr.SecurityScheme = securityScheme\n\treturn vr\n}\n\nfunc (vr *IssueReport) WithStatus(status IssueReportStatus) *IssueReport {\n\tvr.Status = status\n\tvr.telemetryIssueStatusCounter.Add(context.Background(), 1, metric.WithAttributes(\n\t\totelIssueIdAttribute.String(vr.ID),\n\t\totelIssueReportStatusAttribute.String(vr.Status.String()),\n\t))\n\treturn vr\n}\n\nfunc (vr *IssueReport) WithBooleanStatus(status bool) *IssueReport {\n\tif status {\n\t\treturn vr.Pass()\n\t}\n\treturn vr.Fail()\n}\n\nfunc (vr *IssueReport) Fail() *IssueReport {\n\treturn vr.WithStatus(IssueReportStatusFailed)\n}\n\nfunc (vr *IssueReport) HasFailed() bool {\n\treturn vr.Status == IssueReportStatusFailed\n}\n\nfunc (vr *IssueReport) Pass() *IssueReport {\n\treturn vr.WithStatus(IssueReportStatusPassed)\n}\n\nfunc (vr *IssueReport) HasPassed() bool {\n\treturn vr.Status == IssueReportStatusPassed\n}\n\nfunc (vr *IssueReport) Skip() *IssueReport {\n\treturn vr.WithStatus(IssueReportStatusSkipped)\n}\n\nfunc (vr *IssueReport) HasBeenSkipped() bool {\n\treturn vr.Status == IssueReportStatusSkipped\n}\n\nfunc (vr *IssueReport) IsInfoRiskSeverity() bool {\n\treturn vr.CVSS.Score == 0\n}\n\nfunc (vr *IssueReport) IsLowRiskSeverity() bool {\n\treturn vr.CVSS.Score < 4 && vr.CVSS.Score > 0\n}\n\nfunc (vr *IssueReport) IsMediumRiskSeverity() bool {\n\treturn vr.CVSS.Score > 4 && vr.CVSS.Score < 7\n}\n\nfunc (vr *IssueReport) IsHighRiskSeverity() bool {\n\treturn vr.CVSS.Score > 7 && vr.CVSS.Score < 9\n}\n\nfunc (vr *IssueReport) IsCriticalRiskSeverity() bool {\n\treturn vr.CVSS.Score > 9\n}\n\nfunc (vr *IssueReport) WithScanAttempt(attempt *scan.IssueScanAttempt) *IssueReport {\n\treturn vr.AddScanAttempt(attempt)\n}\n\nfunc (vr *IssueReport) AddScanAttempt(attempt *scan.IssueScanAttempt) *IssueReport {\n\tvr.Scans = append(vr.Scans, NewIssueScanReport(attempt.ID, &attempt.Status))\n\treturn vr\n}\n\nfunc (vr *IssueReport) String() string {\n\treturn fmt.Sprintf(\"[%s] %s\", vr.SeverityLevelString(), vr.Name)\n}\n\nfunc (vr *IssueReport) SeverityLevelString() string {\n\tswitch {\n\tcase vr.IsCriticalRiskSeverity():\n\t\treturn \"Critical\"\n\tcase vr.IsHighRiskSeverity():\n\t\treturn \"High\"\n\tcase vr.IsMediumRiskSeverity():\n\t\treturn \"Medium\"\n\tcase vr.IsLowRiskSeverity():\n\t\treturn \"Low\"\n\tcase vr.IsInfoRiskSeverity():\n\t\treturn \"Info\"\n\tdefault:\n\t\treturn \"None\"\n\t}\n}\n\nfunc (vr *IssueReport) Clone() *IssueReport {\n\treturn NewIssueReport(vr.Issue).WithOperation(vr.Operation).WithSecurityScheme(vr.SecurityScheme).WithStatus(vr.Status)\n}\n" }, { "path": "report/issue_report_test.go", "content": "package report_test\n\nimport (\n\t\"testing\"\n\n\tjwtop \"github.com/cerberauth/jwtop/jwt\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestNewIssueScanReport(t *testing.T) {\n\tstatus := scan.IssueScanAttemptStatusFailed\n\n\tissueScanReport := report.NewIssueScanReport(\"scan-id\", &status)\n\n\tassert.Equal(t, \"scan-id\", issueScanReport.ID)\n\tassert.Equal(t, status, *issueScanReport.Status)\n}\n\nfunc TestIssueScanReport_GetStatus(t *testing.T) {\n\tstatus := scan.IssueScanAttemptStatusPassed\n\n\tissueScanReport := report.NewIssueScanReport(\"scan-id\", &status)\n\n\tassert.Equal(t, status, issueScanReport.GetStatus())\n}\n\nfunc TestIssueScanReport_HasFailed(t *testing.T) {\n\tstatus := scan.IssueScanAttemptStatusFailed\n\n\tissueScanReport := report.NewIssueScanReport(\"scan-id\", &status)\n\n\tassert.True(t, issueScanReport.HasFailed())\n}\n\nfunc TestIssueScanReport_HasPassed(t *testing.T) {\n\tstatus := scan.IssueScanAttemptStatusPassed\n\n\tissueScanReport := report.NewIssueScanReport(\"scan-id\", &status)\n\n\tassert.True(t, issueScanReport.HasPassed())\n}\n\nfunc TestNewIssueReport(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tassert.Equal(t, \"id\", vr.ID)\n\tassert.Equal(t, \"Test Vulnerability\", vr.Name)\n\tassert.Equal(t, \"http://test.com\", vr.URL)\n\tassert.Equal(t, 7.5, vr.CVSS.Score)\n}\n\nfunc TestIssueReport_WithOperation(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\toperation := operation.MustNewOperation(\"GET\", \"/api/v1/\", nil, nil)\n\tvr.WithOperation(operation)\n\tassert.Equal(t, \"GET\", vr.Operation.Method)\n\tassert.Equal(t, \"/api/v1/\", vr.Operation.URL.Path)\n}\n\nfunc TestIssueReport_WithSecurityScheme(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tvalue, err := jwtop.CreateWithSecret(jwtop.CreateOptions{Algorithm: \"HS256\"}, []byte(\"\"))\n\trequire.NoError(t, err)\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &value)\n\tvr.WithSecurityScheme(securityScheme)\n\tassert.Equal(t, value, vr.SecurityScheme.GetValidValue())\n}\n\nfunc TestIssueReport_WithStatus(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tvr.WithStatus(report.IssueReportStatusFailed)\n\tassert.Equal(t, report.IssueReportStatusFailed, vr.Status)\n}\n\nfunc TestIssueReport_WithBooleanStatus_WhenFalse(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tvr.WithBooleanStatus(false)\n\tassert.Equal(t, report.IssueReportStatusFailed, vr.Status)\n}\n\nfunc TestIssueReport_WithBooleanStatus_WhenTrue(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tvr.WithBooleanStatus(true)\n\tassert.Equal(t, report.IssueReportStatusPassed, vr.Status)\n}\n\nfunc TestIssueReport_Fail(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tvr.Fail()\n\tassert.Equal(t, report.IssueReportStatusFailed, vr.Status)\n}\n\nfunc TestIssueReport_HasFailed(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tvr.Fail()\n\tassert.True(t, vr.HasFailed())\n}\n\nfunc TestIssueReport_Pass(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tvr.Pass()\n\tassert.Equal(t, report.IssueReportStatusPassed, vr.Status)\n}\n\nfunc TestIssueReport_HasPassed(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tvr.Pass()\n\tassert.True(t, vr.HasPassed())\n}\n\nfunc TestIssueReport_Skip(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tvr.Skip()\n\tassert.Equal(t, report.IssueReportStatusSkipped, vr.Status)\n}\n\nfunc TestIssueReport_HasBeenSkipped(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tvr.Skip()\n\tassert.True(t, vr.HasBeenSkipped())\n}\n\nfunc TestIssueReport_IsInfoRiskSeverity(t *testing.T) {\n\tvr := report.NewIssueReport(report.Issue{\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 0,\n\t\t},\n\t})\n\tassert.True(t, vr.IsInfoRiskSeverity())\n}\n\nfunc TestIssueReport_IsLowRiskSeverity(t *testing.T) {\n\tvr := report.NewIssueReport(report.Issue{\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 3.5,\n\t\t},\n\t})\n\tassert.True(t, vr.IsLowRiskSeverity())\n}\n\nfunc TestIssueReport_IsMediumRiskSeverity(t *testing.T) {\n\tvr := report.NewIssueReport(report.Issue{\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 5.5,\n\t\t},\n\t})\n\tassert.True(t, vr.IsMediumRiskSeverity())\n}\n\nfunc TestIssueReport_IsHighRiskSeverity(t *testing.T) {\n\tvr := report.NewIssueReport(report.Issue{\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 8.5,\n\t\t},\n\t})\n\tassert.True(t, vr.IsHighRiskSeverity())\n}\n\nfunc TestIssueReport_IsCriticalRiskSeverity(t *testing.T) {\n\tvr := report.NewIssueReport(report.Issue{\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 9.5,\n\t\t},\n\t})\n\tassert.True(t, vr.IsCriticalRiskSeverity())\n}\n\nfunc TestIssueReport_WithScanAttempt(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tattempt := &scan.IssueScanAttempt{\n\t\tID: \"scan-id\",\n\t\tStatus: scan.IssueScanAttemptStatusPassed,\n\t}\n\tvr.WithScanAttempt(attempt)\n\tassert.Equal(t, 1, len(vr.Scans))\n\tassert.Equal(t, \"scan-id\", vr.Scans[0].ID)\n\tassert.Equal(t, scan.IssueScanAttemptStatusPassed, *vr.Scans[0].Status)\n}\n\nfunc TestIssueReport_AddScanAttempt(t *testing.T) {\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t}\n\tvr := report.NewIssueReport(issue)\n\tattempt := &scan.IssueScanAttempt{\n\t\tID: \"scan-id\",\n\t\tStatus: scan.IssueScanAttemptStatusFailed,\n\t}\n\tvr.AddScanAttempt(attempt)\n\tassert.Equal(t, 1, len(vr.Scans))\n\tassert.Equal(t, \"scan-id\", vr.Scans[0].ID)\n\tassert.Equal(t, scan.IssueScanAttemptStatusFailed, *vr.Scans[0].Status)\n}\n\nfunc TestIssueReport_String(t *testing.T) {\n\tvr := report.NewIssueReport(report.Issue{\n\t\tName: \"Test Vulnerability\",\n\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t})\n\texpected := \"[High] Test Vulnerability\"\n\tassert.Equal(t, expected, vr.String())\n}\n\nfunc TestIssueReport_SeverityLevelString(t *testing.T) {\n\tvr := report.NewIssueReport(report.Issue{\n\t\tCVSS: report.CVSS{},\n\t})\n\n\t// Test case for severity level >= 9\n\tvr.Issue.CVSS.Score = 9.5\n\tassert.Equal(t, \"Critical\", vr.SeverityLevelString())\n\n\t// Test case for severity level < 9 and >= 7\n\tvr.Issue.CVSS.Score = 7.5\n\tassert.Equal(t, \"High\", vr.SeverityLevelString())\n\n\t// Test case for severity level < 7 and >= 4\n\tvr.Issue.CVSS.Score = 4.5\n\tassert.Equal(t, \"Medium\", vr.SeverityLevelString())\n\n\t// Test case for severity level < 4 and >= 0.1\n\tvr.Issue.CVSS.Score = 0.5\n\tassert.Equal(t, \"Low\", vr.SeverityLevelString())\n\n\t// Test case for severity level < 0.1\n\tvr.Issue.CVSS.Score = -1\n\tassert.Equal(t, \"None\", vr.SeverityLevelString())\n}\n\nfunc TestIssueReport_Clone(t *testing.T) {\n\tvr := report.NewIssueReport(report.Issue{\n\t\tName: \"Test Vulnerability\",\n\t\tURL: \"http://test.com\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.5,\n\t\t},\n\t})\n\tclone := vr.Clone()\n\tassert.Equal(t, vr.ID, clone.ID)\n\tassert.Equal(t, vr.Name, clone.Name)\n\tassert.Equal(t, vr.URL, clone.URL)\n\tassert.Equal(t, vr.Issue.ID, clone.Issue.ID)\n\tassert.Equal(t, vr.Issue.Name, clone.Issue.Name)\n\tassert.Equal(t, vr.CVSS.Score, clone.CVSS.Score)\n\tassert.Equal(t, vr.Operation, clone.Operation)\n\tassert.Equal(t, vr.SecurityScheme, clone.SecurityScheme)\n}\n" }, { "path": "report/openapi_report.go", "content": "package report\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/getkin/kin-openapi/openapi3\"\n)\n\nfunc findOperationByMethodAndPath(operations operation.Operations, method string, path string) *operation.Operation {\n\tfor _, operation := range operations {\n\t\tif operation.Method == method && operation.GetOpenAPIDocPath() != nil && *operation.GetOpenAPIDocPath() == path {\n\t\t\treturn operation\n\t\t}\n\t}\n\n\treturn nil\n}\n\ntype OpenAPIReportOperation struct {\n\tID string `json:\"operationId\" yaml:\"operationId\"`\n\tTags []string `json:\"tags,omitempty\" yaml:\"tags,omitempty\"`\n\n\tSecuritySchemes []OperationSecurityScheme `json:\"securitySchemes\" yaml:\"securitySchemes\"`\n\n\tIssues []*IssueReport `json:\"issues\" yaml:\"issues\"`\n}\n\nfunc NewOpenAPIReportOperation(operation *openapi3.Operation, requestOperation *operation.Operation) OpenAPIReportOperation {\n\treportSecuritySchemes := []OperationSecurityScheme{}\n\tfor _, ss := range requestOperation.GetSecuritySchemes() {\n\t\treportSecuritySchemes = append(reportSecuritySchemes, NewOperationSecurityScheme(ss))\n\t}\n\n\treturn OpenAPIReportOperation{\n\t\tID: requestOperation.GetID(),\n\t\tTags: operation.Tags,\n\n\t\tSecuritySchemes: reportSecuritySchemes,\n\n\t\tIssues: []*IssueReport{},\n\t}\n}\n\ntype OpenAPIReportMethods map[string]OpenAPIReportOperation\ntype OpenAPIReportPaths map[string]OpenAPIReportMethods\ntype OpenAPIReport struct {\n\tPaths OpenAPIReportPaths `json:\"paths\" yaml:\"paths\"`\n}\n\nfunc NewOpenAPIReport(doc *openapi3.T, operations operation.Operations) *OpenAPIReport {\n\tpaths := OpenAPIReportPaths{}\n\tfor docPath, p := range doc.Paths.Map() {\n\t\tpaths[docPath] = OpenAPIReportMethods{}\n\t\tfor method, o := range p.Operations() {\n\t\t\tvar requestOperation *operation.Operation\n\t\t\tif o.OperationID != \"\" {\n\t\t\t\trequestOperation = operations.GetByID(o.OperationID)\n\t\t\t}\n\n\t\t\tif requestOperation == nil {\n\t\t\t\trequestOperation = findOperationByMethodAndPath(operations, method, docPath)\n\t\t\t}\n\n\t\t\tif requestOperation == nil {\n\t\t\t\tcontinue\n\t\t\t}\n\n\t\t\topenAPIOperation := NewOpenAPIReportOperation(o, requestOperation)\n\t\t\tpaths[docPath][method] = openAPIOperation\n\t\t}\n\t}\n\n\treturn &OpenAPIReport{\n\t\tPaths: paths,\n\t}\n}\n\nfunc (or *OpenAPIReport) AddReport(r *ScanReport) {\n\tif r == nil || !r.HasFailedIssueReport() || r.Operation == nil {\n\t\treturn\n\t}\n\n\tfor path, methods := range or.Paths {\n\t\tfor method, operationReport := range methods {\n\t\t\tif operationReport.ID == r.Operation.ID {\n\t\t\t\toperationReport.Issues = append(operationReport.Issues, r.GetFailedIssueReports()...)\n\t\t\t\tor.Paths[path][method] = operationReport\n\t\t\t}\n\t\t}\n\t}\n}\n" }, { "path": "report/openapi_report_test.go", "content": "package report_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewOpenAPIReportOperation(t *testing.T) {\n\tdoc, _ := openapi.LoadOpenAPI(t.Context(), \"../test/stub/simple_http_bearer.openapi.json\")\n\tsecuritySchemesMap, _ := doc.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, _ := doc.Operations(t.Context(), nil, securitySchemesMap)\n\tsecuritySchemes := operations[0].GetSecuritySchemes()\n\n\to := operations.GetByID(\"getRoot\")\n\n\tr := report.NewOpenAPIReportOperation(doc.Doc.Paths.Map()[\"/\"].Get, o)\n\n\tassert.NotNil(t, r)\n\tassert.Equal(t, \"getRoot\", r.ID)\n\tassert.Equal(t, report.NewOperationSecurityScheme(securitySchemes[0]), r.SecuritySchemes[0])\n\tassert.Equal(t, []*report.IssueReport{}, r.Issues)\n}\n\nfunc TestNewOpenAPIReport(t *testing.T) {\n\tdoc, _ := openapi.LoadOpenAPI(t.Context(), \"../test/stub/simple_http_bearer.openapi.json\")\n\tsecuritySchemesMap, _ := doc.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, _ := doc.Operations(t.Context(), nil, securitySchemesMap)\n\n\tr := report.NewOpenAPIReport(doc.Doc, operations)\n\n\tassert.NotNil(t, r)\n\tassert.Contains(t, r.Paths, \"/\")\n\tassert.Contains(t, r.Paths[\"/\"], http.MethodGet)\n\tassert.Equal(t, \"getRoot\", r.Paths[\"/\"][http.MethodGet].ID)\n\tassert.Equal(t, []*report.IssueReport{}, r.Paths[\"/\"][http.MethodGet].Issues)\n}\n\nfunc Test_OpenAPIReport_AddReport(t *testing.T) {\n\tdoc, _ := openapi.LoadOpenAPI(t.Context(), \"../test/stub/simple_http_bearer.openapi.json\")\n\tsecuritySchemesMap, _ := doc.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, _ := doc.Operations(t.Context(), nil, securitySchemesMap)\n\n\tr := report.NewOpenAPIReport(doc.Doc, operations)\n\n\tscanReport := report.NewScanReport(\"id\", \"test\", operations[0])\n\tissue := report.Issue{\n\t\tName: \"issue 1\",\n\t}\n\tissueReport := report.NewIssueReport(issue).Fail()\n\tscanReport.AddIssueReport(issueReport)\n\tr.AddReport(scanReport)\n\n\tassert.NotNil(t, r)\n\tassert.Contains(t, r.Paths, \"/\")\n\tassert.Contains(t, r.Paths[\"/\"], http.MethodGet)\n\tassert.Equal(t, \"getRoot\", r.Paths[\"/\"][http.MethodGet].ID)\n\tassert.Equal(t, 1, len(r.Paths[\"/\"][http.MethodGet].Issues))\n\tassert.Equal(t, issueReport, r.Paths[\"/\"][http.MethodGet].Issues[0])\n}\n\nfunc Test_OpenAPIReport_AddReport_NoFailedIssue(t *testing.T) {\n\tdoc, _ := openapi.LoadOpenAPI(t.Context(), \"../test/stub/simple_http_bearer.openapi.json\")\n\tsecuritySchemesMap, _ := doc.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, _ := doc.Operations(t.Context(), nil, securitySchemesMap)\n\n\tr := report.NewOpenAPIReport(doc.Doc, operations)\n\n\tscanReport := report.NewScanReport(\"id\", \"test\", operations[0])\n\tissue := report.Issue{\n\t\tName: \"issue 1\",\n\t}\n\tissueReport := report.NewIssueReport(issue).Pass()\n\tscanReport.AddIssueReport(issueReport)\n\tr.AddReport(scanReport)\n\n\tassert.NotNil(t, r)\n\tassert.Contains(t, r.Paths, \"/\")\n\tassert.Contains(t, r.Paths[\"/\"], http.MethodGet)\n\tassert.Equal(t, \"getRoot\", r.Paths[\"/\"][http.MethodGet].ID)\n\tassert.Equal(t, 0, len(r.Paths[\"/\"][http.MethodGet].Issues))\n}\n" }, { "path": "report/options_report.go", "content": "package report\n\ntype OptionsReport struct{} // TODO\n\nfunc NewOptionsReport() OptionsReport {\n\treturn OptionsReport{}\n}\n" }, { "path": "report/owasp.go", "content": "package report\n\ntype OWASP string\n\nconst (\n\tOWASP_2023_BOLA OWASP = \"API1:2023 Broken Object Level Authorization\"\n\tOWASP_2023_BrokenAuthentication OWASP = \"API2:2023 Broken Authentication\"\n\tOWASP_2023_BOPL OWASP = \"API3:2023 Broken Object Property Level Authorization\"\n\tOWASP_2023_UnrestrictedResourceConsumption OWASP = \"API4:2023 Unrestricted Resource Consumption\"\n\tOWASP_2023_BFLA OWASP = \"API5:2023 Broken Function Level Authorization\"\n\tOWASP_2023_UnrestrictedAccessBusiness OWASP = \"API6:2023 Unrestricted Access to Sensitive Business Flows\"\n\tOWASP_2023_SSRF OWASP = \"API7:2023 Server Side Request Forgery\"\n\tOWASP_2023_SecurityMisconfiguration OWASP = \"API8:2023 Security Misconfiguration\"\n\tOWASP_2023_ImproperInventory OWASP = \"API9:2023 Improper Inventory Management\"\n\tOWASP_2023_UnsafeConsumption OWASP = \"API10:2023 Unsafe Consumption of APIs\"\n)\n" }, { "path": "report/report.go", "content": "package report\n\nimport (\n\t\"context\"\n\t\"net/http\"\n\t\"time\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\t\"go.opentelemetry.io/otel/attribute\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\ntype OperationSecurityScheme struct {\n\tType auth.Type `json:\"type\" yaml:\"type\"`\n\tScheme auth.SchemeName `json:\"scheme\" yaml:\"scheme\"`\n\tIn *auth.SchemeIn `json:\"in\" yaml:\"in\"`\n\tTokenFormat auth.TokenFormat `json:\"tokenFormat\" yaml:\"tokenFormat\"`\n\n\tName string `json:\"name\" yaml:\"name\"`\n}\n\nfunc NewOperationSecurityScheme(securityScheme *auth.SecurityScheme) OperationSecurityScheme {\n\ttokenFormat := auth.NoneTokenFormat\n\tif securityScheme.GetTokenFormat() != nil {\n\t\ttokenFormat = *securityScheme.GetTokenFormat()\n\t}\n\n\treturn OperationSecurityScheme{\n\t\tType: securityScheme.GetType(),\n\t\tScheme: securityScheme.GetScheme(),\n\t\tIn: securityScheme.GetIn(),\n\t\tTokenFormat: tokenFormat,\n\n\t\tName: securityScheme.GetName(),\n\t}\n}\n\ntype ScanReportRequest struct {\n\tID string `json:\"id\" yaml:\"id\"`\n\tMethod string `json:\"method\" yaml:\"method\"`\n\tURL string `json:\"url\" yaml:\"url\"`\n\tBody *string `json:\"body,omitempty\" yaml:\"body,omitempty\"`\n\tCookies []*http.Cookie `json:\"cookies,omitempty\" yaml:\"cookies,omitempty\"`\n\tHeader http.Header `json:\"headers,omitempty\" yaml:\"headers,omitempty\"`\n}\n\ntype ScanReportResponse struct {\n\tStatusCode int `json:\"statusCode\" yaml:\"statusCode\"`\n\tBody *string `json:\"body,omitempty\" yaml:\"body,omitempty\"`\n\tCookies []*http.Cookie `json:\"cookies,omitempty\" yaml:\"cookies,omitempty\"`\n\tHeader http.Header `json:\"headers,omitempty\" yaml:\"headers,omitempty\"`\n}\n\ntype ScanReportScan struct {\n\tID string `json:\"id\" yaml:\"id\"`\n\tRequest *ScanReportRequest `json:\"request,omitempty\" yaml:\"request,omitempty\"`\n\tResponse *ScanReportResponse `json:\"response,omitempty\" yaml:\"response,omitempty\"`\n\tErr error `json:\"error,omitempty\" yaml:\"error,omitempty\"`\n}\n\ntype ScanReportOperation struct {\n\tID string `json:\"id\" yaml:\"id\"`\n}\n\ntype ScanReport struct {\n\tID string `json:\"id\" yaml:\"id\"`\n\tName string `json:\"name\" yaml:\"name\"`\n\tStartTime time.Time `json:\"startTime\" yaml:\"startTime\"`\n\tEndTime time.Time `json:\"endTime,omitempty\" yaml:\"endTime,omitempty\"`\n\n\tOperation *ScanReportOperation `json:\"operation,omitempty\" yaml:\"operation,omitempty\"`\n\n\tData interface{} `json:\"data,omitempty\" yaml:\"data,omitempty\"`\n\tScans []ScanReportScan `json:\"scans\" yaml:\"scans\"`\n\tIssues []*IssueReport `json:\"issues\" yaml:\"issues\"`\n\n\ttelemetryScanAttemptsCounter metric.Int64Counter\n\ttelemetryErrorsCounter metric.Int64Counter\n\ttelemetryIssuesCounter metric.Int64Counter\n\ttelemetryAverageDurationHistogram metric.Int64Histogram\n}\n\nconst (\n\totelName = \"github.com/cerberauth/vulnapi/report\"\n\n\totelScanReportIdAttribute = attribute.Key(\"id\")\n)\n\nfunc NewScanReport(id string, name string, operation *operation.Operation) *ScanReport {\n\tvar scanOperation *ScanReportOperation\n\tif operation != nil && operation.ID != \"\" {\n\t\tscanOperation = &ScanReportOperation{\n\t\t\tID: operation.ID,\n\t\t}\n\t}\n\n\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\ttelemetryScanAttemptsCounter, _ := telemetryMeter.Int64Counter(\"report.scan_attempts.counter\")\n\ttelemetryErrorsCounter, _ := telemetryMeter.Int64Counter(\"report.errors.counter\")\n\ttelemetryIssuesCounter, _ := telemetryMeter.Int64Counter(\"report.issues.counter\")\n\ttelemetryAverageDurationHistogram, _ := telemetryMeter.Int64Histogram(\"report.average_duration.histogram\")\n\n\treturn &ScanReport{\n\t\tID: id,\n\t\tName: name,\n\t\tStartTime: time.Now(),\n\n\t\tOperation: scanOperation,\n\n\t\tScans: []ScanReportScan{},\n\t\tIssues: []*IssueReport{},\n\n\t\ttelemetryScanAttemptsCounter: telemetryScanAttemptsCounter,\n\t\ttelemetryErrorsCounter: telemetryErrorsCounter,\n\t\ttelemetryIssuesCounter: telemetryIssuesCounter,\n\t\ttelemetryAverageDurationHistogram: telemetryAverageDurationHistogram,\n\t}\n}\n\nfunc (r *ScanReport) Start() *ScanReport {\n\tr.StartTime = time.Now()\n\treturn r\n}\n\nfunc (r *ScanReport) End() *ScanReport {\n\tr.EndTime = time.Now()\n\tr.telemetryAverageDurationHistogram.Record(context.Background(), int64(r.EndTime.Sub(r.StartTime).Milliseconds()), metric.WithAttributes(otelScanReportIdAttribute.String(r.ID)))\n\treturn r\n}\n\nfunc (r *ScanReport) WithData(data interface{}) *ScanReport {\n\tr.Data = data\n\treturn r\n}\n\nfunc (r *ScanReport) GetData() interface{} {\n\treturn r.Data\n}\n\nfunc (r *ScanReport) HasData() bool {\n\treturn r.Data != nil\n}\n\nfunc (r *ScanReport) AddScanAttempt(attempt *scan.IssueScanAttempt) *ScanReport {\n\tvar reportRequest *ScanReportRequest = nil\n\tif attempt.Request != nil {\n\t\treportRequest = &ScanReportRequest{\n\t\t\tID: attempt.Request.GetID(),\n\t\t\tMethod: attempt.Request.GetMethod(),\n\t\t\tURL: attempt.Request.GetURL(),\n\t\t\tCookies: attempt.Request.GetCookies(),\n\t\t\tHeader: attempt.Request.GetHeader(),\n\t\t}\n\t}\n\n\tvar reportResponse *ScanReportResponse = nil\n\tif attempt.Response != nil {\n\t\tvar body string\n\t\tif attempt.Response.GetBody() != nil {\n\t\t\tbody = attempt.Response.GetBody().String()\n\t\t}\n\n\t\treportResponse = &ScanReportResponse{\n\t\t\tStatusCode: attempt.Response.GetStatusCode(),\n\t\t\tBody: &body,\n\t\t\tCookies: attempt.Response.GetCookies(),\n\t\t\tHeader: attempt.Response.GetHeader(),\n\t\t}\n\t}\n\n\tr.Scans = append(r.Scans, ScanReportScan{\n\t\tID: attempt.ID,\n\t\tRequest: reportRequest,\n\t\tResponse: reportResponse,\n\t\tErr: attempt.Err,\n\t})\n\n\tattributes := metric.WithAttributes(\n\t\totelScanReportIdAttribute.String(r.ID),\n\t)\n\tr.telemetryScanAttemptsCounter.Add(context.Background(), 1, attributes)\n\tif attempt.Err != nil {\n\t\tr.telemetryErrorsCounter.Add(context.Background(), 1, attributes)\n\t}\n\n\treturn r\n}\n\nfunc (r *ScanReport) GetScanAttempts() []ScanReportScan {\n\treturn r.Scans\n}\n\nfunc (r *ScanReport) AddIssueReport(vr *IssueReport) *ScanReport {\n\tr.Issues = append(r.Issues, vr)\n\tr.telemetryIssuesCounter.Add(context.Background(), 1, metric.WithAttributes(\n\t\totelScanReportIdAttribute.String(r.ID),\n\t\totelIssueIdAttribute.String(vr.ID),\n\t))\n\treturn r\n}\n\nfunc (r *ScanReport) GetIssueReports() []*IssueReport {\n\treturn r.Issues\n}\n\nfunc (r *ScanReport) GetErrors() []error {\n\tvar errors []error\n\tfor _, sa := range r.GetScanAttempts() {\n\t\tif sa.Err != nil {\n\t\t\terrors = append(errors, sa.Err)\n\t\t}\n\t}\n\treturn errors\n}\n\nfunc (r *ScanReport) GetFailedIssueReports() []*IssueReport {\n\tvar failedReports []*IssueReport\n\tfor _, vr := range r.GetIssueReports() {\n\t\tif vr.HasFailed() {\n\t\t\tfailedReports = append(failedReports, vr)\n\t\t}\n\t}\n\treturn failedReports\n}\n\nfunc (r *ScanReport) HasFailedIssueReport() bool {\n\treturn len(r.GetFailedIssueReports()) > 0\n}\n" }, { "path": "report/report_test.go", "content": "package report_test\n\nimport (\n\t\"encoding/json\"\n\t\"errors\"\n\t\"net/http\"\n\t\"testing\"\n\t\"time\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewOperationSecurityScheme(t *testing.T) {\n\tinHeader := auth.InHeader\n\tvalue := \"test\"\n\tnoneTokenFormat := auth.NoneTokenFormat\n\n\ttests := []struct {\n\t\tname string\n\t\tsecurityScheme *auth.SecurityScheme\n\t\twant report.OperationSecurityScheme\n\t}{\n\t\t{\n\t\t\tname: \"No Auth\",\n\t\t\tsecurityScheme: auth.MustNewNoAuthSecurityScheme(),\n\t\t\twant: report.OperationSecurityScheme{\n\t\t\t\tType: auth.None,\n\t\t\t\tScheme: auth.NoneScheme,\n\t\t\t\tIn: nil,\n\t\t\t\tTokenFormat: noneTokenFormat,\n\t\t\t\tName: \"no_auth\",\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tname: \"Bearer Token\",\n\t\t\tsecurityScheme: auth.MustNewAuthorizationBearerSecurityScheme(\"test\", &value),\n\t\t\twant: report.OperationSecurityScheme{\n\t\t\t\tType: auth.HttpType,\n\t\t\t\tScheme: auth.BearerScheme,\n\t\t\t\tIn: &inHeader,\n\t\t\t\tTokenFormat: noneTokenFormat,\n\t\t\t\tName: \"test\",\n\t\t\t},\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tgot := report.NewOperationSecurityScheme(tt.securityScheme)\n\t\t\tassert.Equal(t, tt.want, got)\n\t\t})\n\t}\n}\n\nfunc TestNewScanReport(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tassert.NotNil(t, sr)\n\tassert.Equal(t, \"id\", sr.ID)\n\tassert.Equal(t, \"test\", sr.Name)\n\tassert.NotZero(t, sr.StartTime)\n}\n\nfunc TestScanReport_Start(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tstartTime := sr.StartTime\n\ttime.Sleep(1 * time.Second)\n\tsr.Start()\n\tassert.NotEqual(t, startTime, sr.StartTime)\n}\n\nfunc TestScanReport_End(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tendTime := sr.EndTime\n\ttime.Sleep(1 * time.Second)\n\tsr.End()\n\tassert.NotEqual(t, endTime, sr.EndTime)\n}\n\nfunc TestScanReport_WithData(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tdata := map[string]string{\n\t\t\"test\": \"test\",\n\t}\n\tsr.WithData(data)\n\tassert.Equal(t, data, sr.Data)\n}\n\nfunc TestScanReport_GetData(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tdata := map[string]string{\n\t\t\"test\": \"test\",\n\t}\n\tsr.WithData(data)\n\tassert.Equal(t, data, sr.GetData())\n}\n\nfunc TestScanReport_HasData(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tassert.False(t, sr.HasData())\n\n\tdata := map[string]string{\n\t\t\"test\": \"test\",\n\t}\n\tsr.WithData(data)\n\tassert.True(t, sr.HasData())\n}\n\nfunc TestScanReport_AddScanAttempt(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\treq, _ := request.NewRequest(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tres, _ := request.NewResponse(&http.Response{\n\t\tStatusCode: http.StatusOK,\n\t})\n\terr := error(nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\n\tsr.AddScanAttempt(&scan.IssueScanAttempt{\n\t\tID: \"test\",\n\t\tRequest: req,\n\t\tResponse: res,\n\t\tErr: err,\n\t})\n\n\tassert.Equal(t, 1, len(sr.GetScanAttempts()))\n\tassert.Equal(t, \"test\", sr.GetScanAttempts()[0].ID)\n\tassert.Equal(t, http.MethodPost, sr.GetScanAttempts()[0].Request.Method)\n\tassert.Equal(t, \"http://localhost:8080/\", sr.GetScanAttempts()[0].Request.URL)\n\tassert.Equal(t, http.StatusOK, sr.GetScanAttempts()[0].Response.StatusCode)\n\tassert.Nil(t, sr.GetScanAttempts()[0].Err)\n}\n\nfunc TestScanReport_AddIssueReport(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tIssueReport := report.NewIssueReport(report.Issue{Name: \"test\"})\n\tsr.AddIssueReport(IssueReport)\n\tassert.Equal(t, 1, len(sr.GetIssueReports()))\n\tassert.Equal(t, IssueReport, sr.GetIssueReports()[0])\n}\n\nfunc TestScanReport_HasFailedIssueReport(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tassert.False(t, sr.HasFailedIssueReport())\n\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\tassert.True(t, sr.HasFailedIssueReport())\n}\n\nfunc TestScanReport_HasOnlyFailedIssueReport(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tassert.False(t, sr.HasFailedIssueReport())\n\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\tassert.True(t, sr.HasFailedIssueReport())\n}\n\nfunc TestScanReport_HasOnlyPassedIssueReport(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tassert.False(t, sr.HasFailedIssueReport())\n\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t}\n\tIssueReport := report.NewIssueReport(issue).Pass()\n\tsr.AddIssueReport(IssueReport)\n\tassert.False(t, sr.HasFailedIssueReport())\n}\n\nfunc TestScanReport_GetErrors(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tassert.Empty(t, sr.GetErrors())\n\n\tsr.AddScanAttempt(&scan.IssueScanAttempt{\n\t\tErr: errors.New(\"test\"),\n\t})\n\tassert.NotEmpty(t, sr.GetErrors())\n\tassert.Equal(t, 1, len(sr.GetErrors()))\n}\n\nfunc TestMarshalJSON(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tscanAttempt := &scan.IssueScanAttempt{\n\t\tErr: nil,\n\t}\n\tsr.AddScanAttempt(scanAttempt)\n\tIssueReport := report.NewIssueReport(report.Issue{Name: \"test\"})\n\tsr.AddIssueReport(IssueReport)\n\n\t_, err := json.Marshal(sr)\n\n\tassert.NoError(t, err)\n}\n\nfunc TestScanReport_GetIssueReports(t *testing.T) {\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tassert.Empty(t, sr.GetIssueReports())\n\n\tissueReport1 := report.NewIssueReport(report.Issue{})\n\tissueReport2 := report.NewIssueReport(report.Issue{})\n\tsr.AddIssueReport(issueReport1)\n\tsr.AddIssueReport(issueReport2)\n\n\tissueReports := sr.GetIssueReports()\n\tassert.Equal(t, 2, len(issueReports))\n\tassert.Equal(t, issueReport1, issueReports[0])\n\tassert.Equal(t, issueReport2, issueReports[1])\n}\n" }, { "path": "report/reporter.go", "content": "package report\n\nimport (\n\t\"net/http\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/getkin/kin-openapi/openapi3\"\n)\n\nconst reporterSchema = \"https://schemas.cerberauth.com/vulnapi/draft/2024-10/report.schema.json\"\n\ntype Reporter struct {\n\tSchema string `json:\"$schema\" yaml:\"$schema\"`\n\n\tOptions OptionsReport `json:\"options\" yaml:\"options\"`\n\tCurl *CurlReport `json:\"curl,omitempty\" yaml:\"curl,omitempty\"`\n\tOpenAPI *OpenAPIReport `json:\"openapi,omitempty\" yaml:\"openapi,omitempty\"`\n\tGraphQL *GraphQLReport `json:\"graphql,omitempty\" yaml:\"graphql,omitempty\"`\n\tScanReports []*ScanReport `json:\"reports\" yaml:\"reports\"`\n}\n\nfunc NewReporter() *Reporter {\n\treturn &Reporter{\n\t\tSchema: reporterSchema,\n\n\t\tOptions: NewOptionsReport(),\n\t\tScanReports: []*ScanReport{},\n\t}\n}\n\nfunc NewReporterWithCurl(method string, url string, data interface{}, header http.Header, cookies []*http.Cookie, securitySchemes []*auth.SecurityScheme) *Reporter {\n\treturn &Reporter{\n\t\tSchema: reporterSchema,\n\n\t\tOptions: NewOptionsReport(),\n\t\tCurl: NewCurlReport(method, url, data, header, cookies, securitySchemes),\n\t\tScanReports: []*ScanReport{},\n\t}\n}\n\nfunc NewReporterWithOpenAPIDoc(openapi *openapi3.T, operations operation.Operations) *Reporter {\n\treturn &Reporter{\n\t\tSchema: reporterSchema,\n\n\t\tOptions: NewOptionsReport(),\n\t\tOpenAPI: NewOpenAPIReport(openapi, operations),\n\t\tScanReports: []*ScanReport{},\n\t}\n}\n\nfunc NewReporterWithGraphQL(url string, securitySchemes []*auth.SecurityScheme) *Reporter {\n\treturn &Reporter{\n\t\tSchema: reporterSchema,\n\n\t\tOptions: NewOptionsReport(),\n\t\tGraphQL: NewGraphQLReport(url, securitySchemes),\n\t\tScanReports: []*ScanReport{},\n\t}\n}\n\nfunc (rr *Reporter) AddReport(r *ScanReport) {\n\trr.ScanReports = append(rr.ScanReports, r)\n\n\tif rr.Curl != nil {\n\t\trr.Curl.AddReport(r)\n\t}\n\n\tif rr.OpenAPI != nil {\n\t\trr.OpenAPI.AddReport(r)\n\t}\n}\n\nfunc (rr *Reporter) GetScanReports() []*ScanReport {\n\treturn rr.ScanReports\n}\n\nfunc (rr *Reporter) GetScanReportByID(id string) *ScanReport {\n\tfor _, r := range rr.GetScanReports() {\n\t\tif r.ID == id {\n\t\t\treturn r\n\t\t}\n\t}\n\n\treturn nil\n}\n\nfunc (rr *Reporter) GetReportsByIssueStatus(status IssueReportStatus) []*ScanReport {\n\tvar reports []*ScanReport\n\tfor _, r := range rr.GetScanReports() {\n\t\tfor _, ir := range r.GetIssueReports() {\n\t\t\tif ir.Status == status {\n\t\t\t\treports = append(reports, r)\n\t\t\t\tbreak\n\t\t\t}\n\t\t}\n\t}\n\n\treturn reports\n}\n\nfunc (rr *Reporter) GetErrors() []error {\n\tvar errors []error\n\tfor _, r := range rr.GetScanReports() {\n\t\terrors = append(errors, r.GetErrors()...)\n\t}\n\n\treturn errors\n}\n\nfunc (rr *Reporter) HasIssue() bool {\n\tfor _, r := range rr.GetScanReports() {\n\t\tif r.HasFailedIssueReport() {\n\t\t\treturn true\n\t\t}\n\t}\n\n\treturn false\n}\n\nfunc (rr *Reporter) GetIssueReports() []*IssueReport {\n\tvar reports []*IssueReport\n\tfor _, r := range rr.GetScanReports() {\n\t\treports = append(reports, r.GetIssueReports()...)\n\t}\n\treturn reports\n}\n\nfunc (rr *Reporter) GetFailedIssueReports() []*IssueReport {\n\tvar reports []*IssueReport\n\tfor _, r := range rr.GetScanReports() {\n\t\treports = append(reports, r.GetFailedIssueReports()...)\n\t}\n\treturn reports\n}\n\nfunc (rr *Reporter) HasHighRiskOrHigherSeverityIssue() bool {\n\tfor _, r := range rr.GetFailedIssueReports() {\n\t\tif r.IsHighRiskSeverity() || r.IsCriticalRiskSeverity() {\n\t\t\treturn true\n\t\t}\n\t}\n\n\treturn false\n}\n\nfunc (rr *Reporter) HasHigherThanSeverityThresholdIssue(threshold float64) bool {\n\tfor _, r := range rr.GetFailedIssueReports() {\n\t\tif r.CVSS.Score >= threshold {\n\t\t\treturn true\n\t\t}\n\t}\n\n\treturn false\n}\n" }, { "path": "report/reporter_test.go", "content": "package report_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\topenapilib \"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewReporterWithCurl(t *testing.T) {\n\tmethod := http.MethodPost\n\turl := \"http://localhost:8080/\"\n\tdata := map[string]string{\"key\": \"value\"}\n\theader := http.Header{\"Content-Type\": []string{\"application/json\"}}\n\tcookies := []*http.Cookie{{Name: \"session_id\", Value: \"abc123\"}}\n\ttoken := \"abc123\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\tsecuritySchemes := []*auth.SecurityScheme{securityScheme}\n\n\treportSecuritySchemes := []report.OperationSecurityScheme{\n\t\t{\n\t\t\tType: securityScheme.GetType(),\n\t\t\tScheme: securityScheme.GetScheme(),\n\t\t\tIn: securityScheme.GetIn(),\n\t\t\tTokenFormat: *securityScheme.GetTokenFormat(),\n\t\t\tName: securityScheme.GetName(),\n\t\t},\n\t}\n\n\treporter := report.NewReporterWithCurl(method, url, data, header, cookies, securitySchemes)\n\n\tassert.NotNil(t, reporter)\n\tassert.NotNil(t, reporter.Curl)\n\tassert.Equal(t, method, reporter.Curl.Method)\n\tassert.Equal(t, url, reporter.Curl.URL)\n\tassert.Equal(t, data, reporter.Curl.Data)\n\tassert.Equal(t, header, reporter.Curl.Header)\n\tassert.Equal(t, cookies, reporter.Curl.Cookies)\n\tassert.Equal(t, reportSecuritySchemes, reporter.Curl.SecuritySchemes)\n\tassert.Empty(t, reporter.ScanReports)\n}\n\nfunc TestNewReporterWithCurl_AddReport(t *testing.T) {\n\tmethod := http.MethodPost\n\turl := \"http://localhost:8080/\"\n\tdata := map[string]string{\"key\": \"value\"}\n\theader := http.Header{\"Content-Type\": []string{\"application/json\"}}\n\tcookies := []*http.Cookie{{Name: \"session_id\", Value: \"abc123\"}}\n\ttoken := \"abc123\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\tsecuritySchemes := []*auth.SecurityScheme{securityScheme}\n\n\treporter := report.NewReporterWithCurl(method, url, data, header, cookies, securitySchemes)\n\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"test\",\n\t}\n\tsr := report.NewScanReport(\"id\", \"test\", nil).AddIssueReport(report.NewIssueReport(issue).Fail())\n\treporter.AddReport(sr)\n\texpectedIssue := report.NewIssueReport(issue).WithStatus(report.IssueReportStatusFailed)\n\n\tassert.NotEmpty(t, reporter.ScanReports)\n\tassert.Equal(t, 1, len(reporter.ScanReports))\n\tassert.Equal(t, sr, reporter.ScanReports[0])\n\tassert.NotEmpty(t, reporter.Curl.Issues)\n\tassert.Equal(t, 1, len(reporter.Curl.Issues))\n\tassert.Equal(t, expectedIssue, reporter.Curl.Issues[0])\n}\n\nfunc TestNewReporterWithOpenAPIDoc(t *testing.T) {\n\topenapiContract, _ := openapilib.LoadOpenAPI(t.Context(), \"../test/stub/simple_http_bearer.openapi.json\")\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, _ := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\n\treporter := report.NewReporterWithOpenAPIDoc(openapiContract.Doc, operations)\n\n\tassert.NotNil(t, reporter)\n\tassert.NotNil(t, reporter.OpenAPI)\n\tassert.Empty(t, reporter.ScanReports)\n}\n\nfunc TestReporterWithOpenAPIDoc_AddReport(t *testing.T) {\n\topenapiContract, _ := openapilib.LoadOpenAPI(t.Context(), \"../test/stub/simple_http_bearer.openapi.json\")\n\tsecuritySchemesMap, _ := openapiContract.SecuritySchemeMap(t.Context(), openapi.NewEmptySecuritySchemeValues())\n\toperations, _ := openapiContract.Operations(t.Context(), nil, securitySchemesMap)\n\treporter := report.NewReporterWithOpenAPIDoc(openapiContract.Doc, operations)\n\n\tissue := report.Issue{\n\t\tID: \"id\",\n\t\tName: \"test\",\n\t}\n\tsr := report.NewScanReport(\"id\", \"test\", operations[0]).AddIssueReport(report.NewIssueReport(issue).Fail())\n\treporter.AddReport(sr)\n\texpectedIssue := report.NewIssueReport(issue).WithStatus(report.IssueReportStatusFailed)\n\n\tassert.NotEmpty(t, reporter.ScanReports)\n\tassert.Equal(t, 1, len(reporter.ScanReports))\n\tassert.Equal(t, sr, reporter.ScanReports[0])\n\tassert.NotEmpty(t, reporter.OpenAPI.Paths[\"/\"][http.MethodGet].Issues)\n\tassert.Equal(t, 1, len(reporter.OpenAPI.Paths[\"/\"][http.MethodGet].Issues))\n\tassert.Equal(t, expectedIssue, reporter.OpenAPI.Paths[\"/\"][http.MethodGet].Issues[0])\n}\n\nfunc TestReporter_NoHasHighRiskOrHigherSeverityVulnerability_WhenNoReport(t *testing.T) {\n\treporter := report.NewReporter()\n\tassert.False(t, reporter.HasHighRiskOrHigherSeverityIssue())\n}\n\nfunc TestReporter_NoHasVulnerability_WhenNoFailedReport(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t}\n\tIssueReport := report.NewIssueReport(issue).Pass()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\tassert.False(t, reporter.HasIssue())\n}\n\nfunc TestReporter_HasVulnerability_WhenFailedReport(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\tassert.True(t, reporter.HasIssue())\n}\n\nfunc TestReporters_HasHighRiskOrHigherSeverityVulnerability_WhenLowRiskReport(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 0.1,\n\t\t},\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\tassert.False(t, reporter.HasHighRiskOrHigherSeverityIssue())\n}\n\nfunc TestReporters_HasHighRiskOrHigherSeverityVulnerability_WhenHighRiskReport(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 8,\n\t\t},\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\tassert.True(t, reporter.HasHighRiskOrHigherSeverityIssue())\n}\n\nfunc TestReporters_HasHighRiskOrHigherSeverityVulnerability_WhenCriticalRiskReport(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 9.8,\n\t\t},\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\tassert.True(t, reporter.HasHighRiskOrHigherSeverityIssue())\n}\n\nfunc TestReporter_HasHigherThanSeverityThresholdIssue_WhenNoReports(t *testing.T) {\n\treporter := report.NewReporter()\n\tassert.False(t, reporter.HasHigherThanSeverityThresholdIssue(5.0))\n}\n\nfunc TestReporter_HasHigherThanSeverityThresholdIssue_WhenBelowThreshold(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 4.0,\n\t\t},\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\tassert.False(t, reporter.HasHigherThanSeverityThresholdIssue(5.0))\n}\n\nfunc TestReporter_HasHigherThanSeverityThresholdIssue_WhenAtThreshold(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 5.0,\n\t\t},\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\tassert.True(t, reporter.HasHigherThanSeverityThresholdIssue(5.0))\n}\n\nfunc TestReporter_HasHigherThanSeverityThresholdIssue_WhenAboveThreshold(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t\tCVSS: report.CVSS{\n\t\t\tScore: 7.0,\n\t\t},\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\tassert.True(t, reporter.HasHigherThanSeverityThresholdIssue(5.0))\n}\n\nfunc TestReporter_GetReportsByIssueStatus_NoReports(t *testing.T) {\n\treporter := report.NewReporter()\n\treports := reporter.GetReportsByIssueStatus(report.IssueReportStatusFailed)\n\tassert.Empty(t, reports)\n}\n\nfunc TestReporter_GetReportsByIssueStatus_NoMatchingStatus(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t}\n\tIssueReport := report.NewIssueReport(issue).Pass()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\treports := reporter.GetReportsByIssueStatus(report.IssueReportStatusFailed)\n\tassert.Empty(t, reports)\n}\n\nfunc TestReporter_GetReportsByIssueStatus_MatchingStatus(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\treports := reporter.GetReportsByIssueStatus(report.IssueReportStatusFailed)\n\tassert.NotEmpty(t, reports)\n\tassert.Equal(t, 1, len(reports))\n\tassert.Equal(t, \"id\", reports[0].ID)\n}\n\nfunc TestReporter_GetReportsByIssueStatus_MultipleReports(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr1 := report.NewScanReport(\"id1\", \"test1\", operation)\n\tissue1 := report.Issue{\n\t\tName: \"test1\",\n\t}\n\tIssueReport1 := report.NewIssueReport(issue1).Fail()\n\tsr1.AddIssueReport(IssueReport1)\n\treporter.AddReport(sr1)\n\n\tsr2 := report.NewScanReport(\"id2\", \"test2\", operation)\n\tissue2 := report.Issue{\n\t\tName: \"test2\",\n\t}\n\tIssueReport2 := report.NewIssueReport(issue2).Fail()\n\tsr2.AddIssueReport(IssueReport2)\n\treporter.AddReport(sr2)\n\n\treports := reporter.GetReportsByIssueStatus(report.IssueReportStatusFailed)\n\tassert.NotEmpty(t, reports)\n\tassert.Equal(t, 2, len(reports))\n\tassert.Equal(t, \"id1\", reports[0].ID)\n\tassert.Equal(t, \"id2\", reports[1].ID)\n}\n\nfunc TestReporter_GetIssueReports_NoReports(t *testing.T) {\n\treporter := report.NewReporter()\n\treports := reporter.GetIssueReports()\n\tassert.Empty(t, reports)\n}\n\nfunc TestReporter_GetIssueReports_SingleReport(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\tissue := report.Issue{\n\t\tName: \"test\",\n\t}\n\tIssueReport := report.NewIssueReport(issue).Fail()\n\tsr.AddIssueReport(IssueReport)\n\treporter.AddReport(sr)\n\n\treports := reporter.GetIssueReports()\n\tassert.NotEmpty(t, reports)\n\tassert.Equal(t, 1, len(reports))\n\tassert.Equal(t, \"test\", reports[0].Issue.Name)\n}\n\nfunc TestReporter_GetIssueReports_MultipleReports(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr1 := report.NewScanReport(\"id1\", \"test1\", operation)\n\tissue1 := report.Issue{\n\t\tName: \"test1\",\n\t}\n\tIssueReport1 := report.NewIssueReport(issue1).Fail()\n\tsr1.AddIssueReport(IssueReport1)\n\treporter.AddReport(sr1)\n\n\tsr2 := report.NewScanReport(\"id2\", \"test2\", operation)\n\tissue2 := report.Issue{\n\t\tName: \"test2\",\n\t}\n\tIssueReport2 := report.NewIssueReport(issue2).Fail()\n\tsr2.AddIssueReport(IssueReport2)\n\treporter.AddReport(sr2)\n\n\treports := reporter.GetIssueReports()\n\tassert.NotEmpty(t, reports)\n\tassert.Equal(t, 2, len(reports))\n\tassert.Equal(t, \"test1\", reports[0].Issue.Name)\n\tassert.Equal(t, \"test2\", reports[1].Issue.Name)\n}\n\nfunc TestReporter_GetScanReportByID_NoReports(t *testing.T) {\n\treporter := report.NewReporter()\n\treport := reporter.GetScanReportByID(\"nonexistent_id\")\n\tassert.Nil(t, report)\n}\n\nfunc TestReporter_GetScanReportByID_SingleReport(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\treporter.AddReport(sr)\n\n\treport := reporter.GetScanReportByID(\"id\")\n\tassert.NotNil(t, report)\n\tassert.Equal(t, \"id\", report.ID)\n}\n\nfunc TestReporter_GetScanReportByID_MultipleReports(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr1 := report.NewScanReport(\"id1\", \"test1\", operation)\n\tsr2 := report.NewScanReport(\"id2\", \"test2\", operation)\n\treporter.AddReport(sr1)\n\treporter.AddReport(sr2)\n\n\treport1 := reporter.GetScanReportByID(\"id1\")\n\treport2 := reporter.GetScanReportByID(\"id2\")\n\n\tassert.NotNil(t, report1)\n\tassert.Equal(t, \"id1\", report1.ID)\n\tassert.NotNil(t, report2)\n\tassert.Equal(t, \"id2\", report2.ID)\n}\n\nfunc TestReporter_GetScanReportByID_NonexistentID(t *testing.T) {\n\treporter := report.NewReporter()\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, nil)\n\tsr := report.NewScanReport(\"id\", \"test\", operation)\n\treporter.AddReport(sr)\n\n\treport := reporter.GetScanReportByID(\"nonexistent_id\")\n\tassert.Nil(t, report)\n}\n" }, { "path": "report/test/issue.yaml", "content": "id: expectedID\nname: expectedName\nurl: expectedURL\n\ncvss:\n version: 4.0\n vector: AV:N/AC:L/Au:N/C:P/I:N/A:N\n score: 7.5\n\nclassifications:\n owasp: \"API1:2023 Broken Object Level Authorization\"\n cwe: \"CWE-16: Configuration\"\n capec: \"CAPEC-31: Accessing/Intercepting/Modifying HTTP Cookies\"\n" }, { "path": "report/test/issue_nil_classifications.yaml", "content": "id: expectedID\nname: expectedName\nurl: expectedURL\n\ncvss:\n version: 4.0\n vector: AV:N/AC:L/Au:N/C:P/I:N/A:N\n score: 7.5\n\n" }, { "path": "scan/broken_authentication/authentication_bypass/authentication_bypass.go", "content": "package authenticationbypass\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tAcceptsUnauthenticatedOperationScanID = \"generic.accept_unauthenticated_operation\"\n\tAcceptsUnauthenticatedOperationScanName = \"Accept Unauthenticated Operation\"\n)\n\nvar issue = report.Issue{\n\tID: \"broken_authentication.authentication_bypass\",\n\tName: \"Authentication is expected but can be bypassed\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_BrokenAuthentication,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 9.3,\n\t},\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\n\tr := report.NewScanReport(AcceptsUnauthenticatedOperationScanID, AcceptsUnauthenticatedOperationScanName, op)\n\tif securityScheme.GetType() == auth.None {\n\t\treturn r.AddIssueReport(vulnReport.Skip()).End(), nil\n\t}\n\n\tnoAuthSecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\tvsa, err := scan.ScanURL(op, noAuthSecurityScheme)\n\tif err != nil {\n\t\treturn r, err\n\t}\n\tvsa.WithBooleanStatus(scan.IsUnauthorizedStatusCodeOrSimilar(vsa.Response))\n\tvulnReport.WithBooleanStatus(vsa.HasPassed()).AddScanAttempt(vsa)\n\tr.AddIssueReport(vulnReport).AddScanAttempt(vsa).End()\n\n\treturn r, nil\n}\n" }, { "path": "scan/broken_authentication/authentication_bypass/authentication_bypass_test.go", "content": "package authenticationbypass_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\tauthenticationbypass \"github.com/cerberauth/vulnapi/scan/broken_authentication/authentication_bypass\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestAuthenticationByPassScanHandler_Skipped_WhenNoAuthSecurityScheme(t *testing.T) {\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := authenticationbypass.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestAuthenticationByPassScanHandler_Failed_WhenAuthIsByPassed(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\n\treport, err := authenticationbypass.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n\nfunc TestAuthenticationByPassScanHandler_Passed_WhenAuthIsNotByPassed(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := authenticationbypass.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n" }, { "path": "scan/broken_authentication/jwt/alg_none/alg_none.go", "content": "package algnone\n\nimport (\n\t\"strings\"\n\n\t\"github.com/cerberauth/jwtop/jwt/editor\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\tjwtlib \"github.com/golang-jwt/jwt/v5\"\n)\n\ntype AlgNoneData struct {\n\tAlg string `json:\"alg\"`\n}\n\nconst (\n\tAlgNoneJwtScanID = \"jwt.alg_none\"\n\tAlgNoneJwtScanName = \"JWT None Algorithm\"\n)\n\nvar issue = report.Issue{\n\tID: \"broken_authentication.alg_none\",\n\tName: \"JWT Algorithm None is accepted\",\n\tURL: \"https://www.cerberauth.com/docs/vulnapi/vulnerabilities/broken-authentication/jwt-alg-none?utm_source=vulnapi-report\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_BrokenAuthentication,\n\t\tCWE: report.CWE_345_Insufficient_Verification_Authenticity,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 9.3,\n\t},\n}\n\nfunc ShouldBeScanned(securityScheme *auth.SecurityScheme) bool {\n\treturn securityScheme != nil && securityScheme.GetType() != auth.None && securityScheme.GetTokenFormat() != nil && *securityScheme.GetTokenFormat() == auth.JWTTokenFormat\n}\n\nvar algs = []string{\n\t\"none\",\n\t\"NONE\",\n\t\"None\",\n\t\"nOnE\",\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tissueReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(AlgNoneJwtScanID, AlgNoneJwtScanName, op)\n\tr.AddIssueReport(issueReport)\n\n\tif !ShouldBeScanned(securityScheme) {\n\t\tissueReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\tvar valueWriter *editor.TokenEditor\n\tvar err error\n\tif securityScheme.HasValidValue() {\n\t\tvalueWriter, err = editor.NewTokenEditor(securityScheme.GetToken())\n\t} else {\n\t\tvalueWriter, err = editor.NewEmptyTokenEditor()\n\t}\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tif valueWriter.GetToken().Method.Alg() == jwtlib.SigningMethodNone.Alg() {\n\t\tissueReport.Fail()\n\t\treturn r.End(), nil\n\t}\n\tvalueWriter = editor.NewTokenEditorWithValidClaims(valueWriter)\n\n\tmethod := &signingMethodNone{}\n\tfor _, alg := range algs {\n\t\tmethod.SetAlg(alg)\n\t\tvsa, err := scanWithAlg(method, valueWriter, securityScheme, op)\n\t\tif err != nil {\n\t\t\treturn r.End(), err\n\t\t}\n\t\tvsa.WithBooleanStatus(scan.IsUnauthorizedStatusCodeOrSimilar(vsa.Response))\n\t\tissueReport.AddScanAttempt(vsa)\n\t\tr.AddScanAttempt(vsa)\n\n\t\tif vsa.HasFailed() {\n\t\t\tissueReport.Fail()\n\t\t\tr.WithData(&AlgNoneData{Alg: strings.Clone(alg)})\n\t\t\tbreak\n\t\t}\n\t}\n\n\tif !issueReport.HasFailed() {\n\t\tissueReport.Pass()\n\t}\n\treturn r.End(), nil\n}\n\nfunc scanWithAlg(method jwtlib.SigningMethod, valueWriter *editor.TokenEditor, securityScheme *auth.SecurityScheme, op *operation.Operation) (*scan.IssueScanAttempt, error) {\n\tnewToken, err := valueWriter.SignWithMethodAndKey(method, jwtlib.UnsafeAllowNoneSignatureType)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tif err = securityScheme.SetAttackValue(newToken); err != nil {\n\t\treturn nil, err\n\t}\n\n\tvsa, err := scan.ScanURL(op, securityScheme)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\treturn vsa, nil\n}\n" }, { "path": "scan/broken_authentication/jwt/alg_none/alg_none_test.go", "content": "package algnone_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\talgnone \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/alg_none\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestAlgNoneJwtScanHandler_WithoutSecurityScheme(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := algnone.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 0, len(report.GetScanAttempts()))\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestAlgNoneJwtScanHandler_Skipped_WhenNoJWT(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", nil)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := algnone.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 0, len(report.GetScanAttempts()))\n\tassert.Nil(t, report.GetData())\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestAlgNoneJwtScanHandler_Passed_WhenUnauthorizedResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := algnone.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 4, len(report.GetScanAttempts()))\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestAlgNoneJwtScanHandler_Failed_WhenValidValueUseNoneAlg(t *testing.T) {\n\ttoken := \"eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJleHAiOjE3MzE4NjkwNTEsImlhdCI6MTczMTg2NTQ1MSwibmFtZSI6IkpvaG4gRG9lIiwic3ViIjoiMmNiMzA3YmEtYmI0Ni00MTk0LTg1NGYtNDc3NDA0NmQ5YzliIn0.\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := algnone.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 0, len(report.GetScanAttempts()))\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n\nfunc TestAlgNoneJwtScanHandler_Failed_WhenOKResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\n\treport, err := algnone.ScanHandler(operation, securityScheme)\n\tdata, _ := report.GetData().(*algnone.AlgNoneData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, len(report.GetScanAttempts()))\n\tassert.NotNil(t, data)\n\tassert.Equal(t, \"none\", data.Alg)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n\nfunc TestAlgNoneJwtScanHandler_Failed_WhenOKResponseAndAlgNone(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), func(req *http.Request) (*http.Response, error) {\n\t\tswitch req.Header.Get(\"Authorization\") {\n\t\tcase \"Bearer eyJhbGciOiJOb25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.\":\n\t\t\treturn httpmock.NewBytesResponder(http.StatusOK, nil)(req)\n\t\tdefault:\n\t\t\treturn httpmock.NewBytesResponder(http.StatusUnauthorized, nil)(req)\n\t\t}\n\t})\n\n\treport, err := algnone.ScanHandler(operation, securityScheme)\n\tdata, _ := report.GetData().(*algnone.AlgNoneData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 3, len(report.GetScanAttempts()))\n\tassert.NotNil(t, data)\n\tassert.Equal(t, \"None\", data.Alg)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/broken_authentication/jwt/alg_none/methods.go", "content": "package algnone\n\ntype signingMethodNone struct {\n\talg string\n}\n\nfunc (m *signingMethodNone) SetAlg(alg string) {\n\tm.alg = alg\n}\n\nfunc (m *signingMethodNone) Alg() string {\n\treturn m.alg\n}\nfunc (m *signingMethodNone) Verify(signingString string, sig []byte, key interface{}) (err error) {\n\treturn nil\n}\nfunc (m *signingMethodNone) Sign(signingString string, key interface{}) ([]byte, error) {\n\treturn []byte{}, nil\n}\n" }, { "path": "scan/broken_authentication/jwt/blank_secret/blank_secret.go", "content": "package blanksecret\n\nimport (\n\t\"github.com/cerberauth/jwtop/jwt/editor\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tBlankSecretVulnerabilityScanID = \"jwt.blank_secret\"\n\tBlankSecretVulnerabilityScanName = \"JWT Blank Secret\"\n)\n\nvar issue = report.Issue{\n\tID: \"broken_authentication.blank_secret\",\n\tName: \"JWT Secret used for signing is blank\",\n\tURL: \"https://www.cerberauth.com/docs/vulnapi/vulnerabilities/broken-authentication/jwt-blank-secret?utm_source=vulnapi-report\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_BrokenAuthentication,\n\t\tCWE: report.CWE_345_Insufficient_Verification_Authenticity,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 9.3,\n\t},\n}\n\nfunc ShouldBeScanned(securityScheme *auth.SecurityScheme) bool {\n\treturn securityScheme != nil && securityScheme.GetType() != auth.None && securityScheme.GetTokenFormat() != nil && *securityScheme.GetTokenFormat() == auth.JWTTokenFormat\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(BlankSecretVulnerabilityScanID, BlankSecretVulnerabilityScanName, op)\n\tr.AddIssueReport(vulnReport)\n\n\tif !ShouldBeScanned(securityScheme) {\n\t\tvulnReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\tvar valueWriter *editor.TokenEditor\n\tvar err error\n\tif securityScheme.HasValidValue() {\n\t\tvalueWriter, err = editor.NewTokenEditor(securityScheme.GetToken())\n\t} else {\n\t\tvalueWriter, err = editor.NewEmptyTokenEditor()\n\t}\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tnewToken, err := valueWriter.SignWithKey([]byte(\"\"))\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tif err = securityScheme.SetAttackValue(newToken); err != nil {\n\t\treturn r.End(), err\n\t}\n\tvsa, err := scan.ScanURL(op, securityScheme)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tvsa.WithBooleanStatus(scan.IsUnauthorizedStatusCodeOrSimilar(vsa.Response))\n\tvulnReport.WithBooleanStatus(vsa.HasPassed()).AddScanAttempt(vsa)\n\tr.AddScanAttempt(vsa)\n\n\treturn r.End(), nil\n}\n" }, { "path": "scan/broken_authentication/jwt/blank_secret/blank_secret_test.go", "content": "package blanksecret_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\tblanksecret \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/blank_secret\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestBlankSecretScanHandler_WithoutSecurityScheme(t *testing.T) {\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := blanksecret.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestBlankSecretScanHandler_Skipped_WhenNoJWT(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", nil)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := blanksecret.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 0, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestBlankSecretScanHandler_Passed_WhenUnauthorizedResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := blanksecret.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestBlankSecretScanHandler_Failed_WhenOKResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\n\treport, err := blanksecret.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/broken_authentication/jwt/kid_injection/kid_injection.go", "content": "package kidinjection\n\nimport (\n\t\"github.com/cerberauth/jwtop/jwt/exploit\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tKidInjectionScanID = \"jwt.kid_injection\"\n\tKidInjectionScanName = \"JWT KID Injection\"\n)\n\ntype KidInjectionType string\n\nconst (\n\tKidInjectionTypeSQLInjection KidInjectionType = \"sql_injection\"\n\tKidInjectionTypePathTraversal KidInjectionType = \"path_traversal\"\n)\n\ntype KidInjectionData struct {\n\tType KidInjectionType `json:\"type\"`\n}\n\nvar issue = report.Issue{\n\tID: \"broken_authentication.kid_injection\",\n\tName: \"JWT KID Header Injection\",\n\tURL: \"https://www.cerberauth.com/docs/vulnapi/vulnerabilities/broken-authentication/jwt-kid-injection?utm_source=vulnapi-report\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_BrokenAuthentication,\n\t\tCWE: report.CWE_345_Insufficient_Verification_Authenticity,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 9.3,\n\t},\n}\n\nfunc ShouldBeScanned(securityScheme *auth.SecurityScheme) bool {\n\treturn securityScheme != nil && securityScheme.GetType() != auth.None && securityScheme.GetTokenFormat() != nil && *securityScheme.GetTokenFormat() == auth.JWTTokenFormat\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(KidInjectionScanID, KidInjectionScanName, op)\n\tr.AddIssueReport(vulnReport)\n\n\tif !ShouldBeScanned(securityScheme) {\n\t\tvulnReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\ttokenString := securityScheme.GetToken()\n\n\tsqlToken, err := exploit.KidSQLInjection(tokenString, exploit.DefaultKidSQLPayload, []byte(\"secret\")) //nolint:gosec\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tif err = securityScheme.SetAttackValue(sqlToken); err != nil {\n\t\treturn r.End(), err\n\t}\n\tvsaSQL, err := scan.ScanURL(op, securityScheme)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tvsaSQL.WithBooleanStatus(scan.IsUnauthorizedStatusCodeOrSimilar(vsaSQL.Response))\n\tvulnReport.AddScanAttempt(vsaSQL)\n\tr.AddScanAttempt(vsaSQL)\n\n\tif vsaSQL.HasFailed() {\n\t\tvulnReport.Fail()\n\t\tr.WithData(&KidInjectionData{Type: KidInjectionTypeSQLInjection})\n\t\treturn r.End(), nil\n\t}\n\n\tpathToken, err := exploit.KidPathTraversal(tokenString, exploit.DefaultKidPathTraversalPayload, []byte(\"\")) //nolint:gosec\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tif err = securityScheme.SetAttackValue(pathToken); err != nil {\n\t\treturn r.End(), err\n\t}\n\tvsaPath, err := scan.ScanURL(op, securityScheme)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tvsaPath.WithBooleanStatus(scan.IsUnauthorizedStatusCodeOrSimilar(vsaPath.Response))\n\tvulnReport.AddScanAttempt(vsaPath)\n\tr.AddScanAttempt(vsaPath)\n\n\tif vsaPath.HasFailed() {\n\t\tvulnReport.Fail()\n\t\tr.WithData(&KidInjectionData{Type: KidInjectionTypePathTraversal})\n\t\treturn r.End(), nil\n\t}\n\n\tvulnReport.Pass()\n\treturn r.End(), nil\n}\n" }, { "path": "scan/broken_authentication/jwt/kid_injection/kid_injection_test.go", "content": "package kidinjection_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\tkidinjection \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/kid_injection\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestKidInjectionScanHandler_WithoutSecurityScheme(t *testing.T) {\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := kidinjection.ScanHandler(op, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestKidInjectionScanHandler_Skipped_WhenNoJWT(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", nil)\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := kidinjection.ScanHandler(op, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 0, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestKidInjectionScanHandler_Passed_WhenUnauthorizedResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := kidinjection.ScanHandler(op, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 2, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestKidInjectionScanHandler_Failed_WhenSQLInjectionOKResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\n\treport, err := kidinjection.ScanHandler(op, securityScheme)\n\tdata, _ := report.GetData().(*kidinjection.KidInjectionData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.NotNil(t, data)\n\tassert.Equal(t, kidinjection.KidInjectionTypeSQLInjection, data.Type)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n\nfunc TestKidInjectionScanHandler_Failed_WhenPathTraversalOKResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.ResponderFromMultipleResponses(\n\t\t[]*http.Response{\n\t\t\thttpmock.NewBytesResponse(http.StatusUnauthorized, nil),\n\t\t\thttpmock.NewBytesResponse(http.StatusOK, nil),\n\t\t}, t.Log),\n\t)\n\n\treport, err := kidinjection.ScanHandler(op, securityScheme)\n\tdata, _ := report.GetData().(*kidinjection.KidInjectionData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 2, httpmock.GetTotalCallCount())\n\tassert.NotNil(t, data)\n\tassert.Equal(t, kidinjection.KidInjectionTypePathTraversal, data.Type)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/broken_authentication/jwt/not_verified/not_verified.go", "content": "package notverified\n\nimport (\n\t\"github.com/cerberauth/jwtop/jwt/editor\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tNotVerifiedJwtScanID = \"jwt.not_verified\"\n\tNotVerifiedJwtScanName = \"JWT Not Verified\"\n)\n\nvar issue = report.Issue{\n\tID: \"broken_authentication.not_verified\",\n\tName: \"JWT Token is not verified\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_BrokenAuthentication,\n\t\tCWE: report.CWE_345_Insufficient_Verification_Authenticity,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 9.3,\n\t},\n}\n\nfunc ShouldBeScanned(securityScheme *auth.SecurityScheme) bool {\n\treturn securityScheme != nil && securityScheme.GetType() != auth.None && securityScheme.GetTokenFormat() != nil && *securityScheme.GetTokenFormat() == auth.JWTTokenFormat\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(NotVerifiedJwtScanID, NotVerifiedJwtScanName, op)\n\tr.AddIssueReport(vulnReport)\n\n\tif !ShouldBeScanned(securityScheme) {\n\t\tvulnReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\tvar valueWriter *editor.TokenEditor\n\tvar err error\n\tif securityScheme.HasValidValue() {\n\t\tvalueWriter, err = editor.NewTokenEditor(securityScheme.GetToken())\n\t} else {\n\t\tvalueWriter, err = editor.NewEmptyTokenEditor()\n\t}\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tnewToken, err := valueWriter.SignWithMethodAndRandomKey(valueWriter.GetToken().Method)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tif err = securityScheme.SetAttackValue(securityScheme.GetValidValue()); err != nil {\n\t\treturn r.End(), err\n\t}\n\tattemptOne, err := scan.ScanURL(op, securityScheme)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tvulnReport.AddScanAttempt(attemptOne)\n\tr.AddScanAttempt(attemptOne)\n\n\tif !scan.IsUnauthorizedStatusCodeOrSimilar(attemptOne.Response) {\n\t\tvulnReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\tif err = securityScheme.SetAttackValue(newToken); err != nil {\n\t\treturn r.End(), err\n\t}\n\tattemptTwo, err := scan.ScanURL(op, securityScheme)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tvulnReport.AddScanAttempt(attemptTwo)\n\tr.AddScanAttempt(attemptTwo)\n\n\tattemptTwo.WithBooleanStatus(attemptOne.Response.GetStatusCode() == attemptTwo.Response.GetStatusCode())\n\tvulnReport.WithBooleanStatus(attemptTwo.HasPassed())\n\n\treturn r.End(), nil\n}\n" }, { "path": "scan/broken_authentication/jwt/not_verified/not_verified_test.go", "content": "package notverified_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\tnotverified \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/not_verified\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestNotVerifiedScanHandler_WithoutSecurityScheme(t *testing.T) {\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := notverified.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestNotVerifiedScanHandler_Skipped_WhenNoJWTAndUnauthorizedResponse(t *testing.T) {\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", nil)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := notverified.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestNotVerifiedScanHandler_Failed_WhenUnauthorizedThenOK(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.ResponderFromMultipleResponses(\n\t\t[]*http.Response{\n\t\t\thttpmock.NewBytesResponse(http.StatusUnauthorized, nil),\n\t\t\thttpmock.NewBytesResponse(http.StatusOK, nil),\n\t\t}, t.Log),\n\t)\n\treport, err := notverified.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 2, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n\nfunc TestNotVerifiedScanHandler_Skipped_WhenOKFirstRequest(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.ResponderFromMultipleResponses(\n\t\t[]*http.Response{\n\t\t\thttpmock.NewBytesResponse(http.StatusOK, nil),\n\t\t\thttpmock.NewBytesResponse(http.StatusOK, nil),\n\t\t}, t.Log),\n\t)\n\treport, err := notverified.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestNotVerifiedScanHandler_Failed_WhenUnauthorizedThenUnauthorized(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.ResponderFromMultipleResponses(\n\t\t[]*http.Response{\n\t\t\thttpmock.NewBytesResponse(http.StatusUnauthorized, nil),\n\t\t\thttpmock.NewBytesResponse(http.StatusUnauthorized, nil),\n\t\t}, t.Log),\n\t)\n\treport, err := notverified.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 2, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n" }, { "path": "scan/broken_authentication/jwt/null_signature/null_signature.go", "content": "package nullsignature\n\nimport (\n\t\"github.com/cerberauth/jwtop/jwt/editor\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tNullSignatureScanID = \"jwt.null_signature\"\n\tNullSignatureScanName = \"JWT Null Signature\"\n)\n\nvar issue = report.Issue{\n\tID: \"broken_authentication.null_signature\",\n\tName: \"JWT Token has a null signature\",\n\tURL: \"https://www.cerberauth.com/docs/vulnapi/vulnerabilities/broken-authentication/jwt-null-signature?utm_source=vulnapi-report\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_BrokenAuthentication,\n\t\tCWE: report.CWE_345_Insufficient_Verification_Authenticity,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 9.3,\n\t},\n}\n\nfunc ShouldBeScanned(securityScheme *auth.SecurityScheme) bool {\n\treturn securityScheme != nil && securityScheme.GetType() != auth.None && securityScheme.GetTokenFormat() != nil && *securityScheme.GetTokenFormat() == auth.JWTTokenFormat\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(NullSignatureScanID, NullSignatureScanName, op)\n\tr.AddIssueReport(vulnReport)\n\n\tif !ShouldBeScanned(securityScheme) {\n\t\tvulnReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\tvar valueWriter *editor.TokenEditor\n\tvar err error\n\tif securityScheme.HasValidValue() {\n\t\tvalueWriter, err = editor.NewTokenEditor(securityScheme.GetToken())\n\t} else {\n\t\tvalueWriter, err = editor.NewEmptyTokenEditor()\n\t}\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tnewToken, err := valueWriter.WithoutSignature()\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tif err = securityScheme.SetAttackValue(newToken); err != nil {\n\t\treturn r.End(), err\n\t}\n\tvsa, err := scan.ScanURL(op, securityScheme)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tvsa.WithBooleanStatus(scan.IsUnauthorizedStatusCodeOrSimilar(vsa.Response))\n\tvulnReport.WithBooleanStatus(vsa.HasPassed()).WithScanAttempt(vsa)\n\tr.AddScanAttempt(vsa)\n\n\treturn r.End(), nil\n}\n" }, { "path": "scan/broken_authentication/jwt/null_signature/null_signature_test.go", "content": "package nullsignature_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\tnullsignature \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/null_signature\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestNullSignatureScanHandler_WithoutSecurityScheme(t *testing.T) {\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := nullsignature.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestNullSignatureScanHandler_Skipped_WhenNoJWT(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", nil)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := nullsignature.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 0, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestNullSignatureScanHandler_Passed_WhenUnauthorizedResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := nullsignature.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestNullSignatureScanHandler_Failed_WhenOKResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\n\treport, err := nullsignature.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/broken_authentication/jwt/weak_secret/weak_secret.go", "content": "package weaksecret\n\nimport (\n\t\"github.com/cerberauth/jwtop/jwt/editor\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/seclist\"\n)\n\ntype WeakSecretData struct {\n\tSecret *string `json:\"secret,omitempty\"` //nolint:gosec\n}\n\nconst (\n\tWeakSecretVulnerabilityScanID = \"jwt.weak_secret\"\n\tWeakSecretVulnerabilityScanName = \"JWT Weak Secret\"\n)\n\nvar issue = report.Issue{\n\tID: \"broken_authentication.weak_secret\",\n\tName: \"JWT Secret used for signing is weak\",\n\tURL: \"https://www.cerberauth.com/docs/vulnapi/vulnerabilities/broken-authentication/jwt-weak-secret?utm_source=vulnapi-report\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_BrokenAuthentication,\n\t\tCWE: report.CWE_345_Insufficient_Verification_Authenticity,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 9.3,\n\t},\n}\n\nfunc ShouldBeScanned(securityScheme *auth.SecurityScheme) bool {\n\tif securityScheme == nil || securityScheme.GetType() == auth.None || securityScheme.GetTokenFormat() == nil || *securityScheme.GetTokenFormat() != auth.JWTTokenFormat {\n\t\treturn false\n\t}\n\n\tvalueWriter, err := editor.NewTokenEditor(securityScheme.GetToken())\n\tif err != nil {\n\t\treturn false\n\t}\n\n\treturn valueWriter.IsHMACAlg()\n}\n\nvar defaultJwtSecretDictionary = []string{\"secret\", \"password\", \"123456\", \"changeme\", \"admin\", \"token\"}\n\n// From https://raw.githubusercontent.com/danielmiessler/SecLists/master/Passwords/scraped-JWT-secrets.txt\nconst jwtSecretDictionarySeclistUrl = \"https://raw.githubusercontent.com/cerberauth/vulnapi/main/seclist/lists/jwt-secrets.txt\"\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(WeakSecretVulnerabilityScanID, WeakSecretVulnerabilityScanName, op)\n\tr.AddIssueReport(vulnReport)\n\n\tif !ShouldBeScanned(securityScheme) {\n\t\tvulnReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\tjwtSecretDictionary := defaultJwtSecretDictionary\n\tif secretDictionnaryFromSeclist, err := seclist.NewSecListFromURL(\"JWT Secrets Dictionnary\", jwtSecretDictionarySeclistUrl); err == nil {\n\t\tjwtSecretDictionary = secretDictionnaryFromSeclist.Items\n\t}\n\n\tvalueWriter, err := editor.NewTokenEditor(securityScheme.GetToken())\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tcurrentToken := valueWriter.GetToken().Raw\n\tsecret, err := bruteForceSecret(currentToken, jwtSecretDictionary, valueWriter)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tif secret != \"\" {\n\t\tr.WithData(&WeakSecretData{Secret: &secret})\n\t\tvulnReport.Fail()\n\t} else {\n\t\tvulnReport.Pass()\n\t}\n\tr.AddIssueReport(vulnReport)\n\n\treturn r.End(), nil\n}\n\nfunc bruteForceSecret(currentToken string, jwtSecretDictionary []string, valueWriter *editor.TokenEditor) (string, error) {\n\ttype result struct {\n\t\tsecret string\n\t\terr error\n\t}\n\n\tresults := make(chan result, len(jwtSecretDictionary))\n\tlocalValueWriter := valueWriter.Clone()\n\n\tfor _, secret := range jwtSecretDictionary {\n\t\tgo func(secret string) {\n\t\t\tif secret == \"\" {\n\t\t\t\tresults <- result{\"\", nil}\n\t\t\t\treturn\n\t\t\t}\n\n\t\t\tnewToken, err := localValueWriter.SignWithKey([]byte(secret))\n\t\t\tif err != nil {\n\t\t\t\tresults <- result{\"\", err}\n\t\t\t\treturn\n\t\t\t}\n\n\t\t\tif newToken != currentToken {\n\t\t\t\tresults <- result{\"\", nil}\n\t\t\t\treturn\n\t\t\t}\n\n\t\t\tresults <- result{secret, nil}\n\t\t}(secret)\n\t}\n\n\tfor range jwtSecretDictionary {\n\t\tres := <-results\n\t\tif res.err != nil {\n\t\t\treturn \"\", res.err\n\t\t}\n\t\tif res.secret != \"\" {\n\t\t\treturn res.secret, nil\n\t\t}\n\t}\n\n\treturn \"\", nil\n}\n" }, { "path": "scan/broken_authentication/jwt/weak_secret/weak_secret_test.go", "content": "package weaksecret_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\tweaksecret \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/weak_secret\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestWeakHMACSecretScanHandler_WithoutSecurityScheme(t *testing.T) {\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := weaksecret.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestWeakHMACSecretScanHandler_WithJWTUsingOtherAlg(t *testing.T) {\n\ttoken := \"eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJhYmMxMjMifQ.vLBmArLmAKEshqJa3px6qYfrkAfiwBrKPs5dCMxqj9bdiEKR5W4o0Srxt6VHZKzsxIGMTTsqpW21lKnYsLw5DA\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := weaksecret.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestWeakHMACSecretScanHandler_WithoutJWT(t *testing.T) {\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", nil)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := weaksecret.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasBeenSkipped())\n}\n\nfunc TestWeakHMACSecretScanHandler_Failed_WithWeakJWT(t *testing.T) {\n\tsecret := \"secret\"\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e30.t-IDcSemACt8x4iTMCda8Yhe3iZaWbvV5XKSTbuAn0M\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := weaksecret.ScanHandler(operation, securityScheme)\n\n\tassert.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.NotNil(t, report.Data)\n\tassert.Equal(t, &secret, report.Data.(*weaksecret.WeakSecretData).Secret)\n}\n\nfunc TestWeakHMACSecretScanHandler_Failed_WithExpiredJWTSignedWithWeakSecret(t *testing.T) {\n\tsecret := \"secret\"\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE1MTYyMzkwMjJ9.7BbIenT4-HobiMHaMUQdNcJ6lD_QQkKnImP9IprJFvU\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := weaksecret.ScanHandler(operation, securityScheme)\n\n\tassert.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.NotNil(t, report.Data)\n\tassert.Equal(t, &secret, report.Data.(*weaksecret.WeakSecretData).Secret)\n}\n\nfunc TestWeakHMACSecretScanHandler_Passed_WithStrongerJWT(t *testing.T) {\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e30.MWUarT7Q4e5DqnZbdr7VKw3rx9VW-CrvoVkfpllS4CY\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := weaksecret.ScanHandler(operation, securityScheme)\n\n\tassert.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasPassed())\n\tassert.Nil(t, report.Data)\n}\n\nfunc TestWeakHMACSecretScanHandler_Failed_WithUnorderedClaims(t *testing.T) {\n\tsecret := \"secret\"\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyLCJuYmYiOjIwMTYyMzkwMjJ9.ymnE0GznV0dMkjANTQl8IqBSlTi9RFWfBeT42jBNrU4\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"token\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := weaksecret.ScanHandler(operation, securityScheme)\n\n\tassert.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.NotNil(t, report.Data)\n\tassert.Equal(t, &secret, report.Data.(*weaksecret.WeakSecretData).Secret)\n}\n" }, { "path": "scan/discover/accept_unauthenticated/accept_unauthenticated_operation.go", "content": "package acceptunauthenticated\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tNoAuthOperationScanID = \"discover.accept_unauthenticated\"\n\tNoAuthOperationScanName = \"Accept Unauthenticated Operation\"\n)\n\nvar issue = report.Issue{\n\tID: \"discover.accept_unauthenticated_operation\",\n\tName: \"Operation May Accepts Unauthenticated Requests\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(NoAuthOperationScanID, NoAuthOperationScanName, op)\n\tr.AddIssueReport(vulnReport.WithBooleanStatus(securityScheme.GetType() != auth.None))\n\n\treturn r.End(), nil\n}\n" }, { "path": "scan/discover/accept_unauthenticated/accept_unauthenticated_operation_test.go", "content": "package acceptunauthenticated_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\tacceptunauthenticated \"github.com/cerberauth/vulnapi/scan/discover/accept_unauthenticated\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestAcceptUnauthenticatedScanHandler_Failed_WhenNoAuthSecurityScheme(t *testing.T) {\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := acceptunauthenticated.ScanHandler(op, securityScheme)\n\n\tassert.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n\nfunc TestCheckNoAuthOperationScanHandler_Passed_WhenAuthConfigured(t *testing.T) {\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\n\treport, err := acceptunauthenticated.ScanHandler(op, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n" }, { "path": "scan/discover/discoverable_graphql/discoverable_graphql.go", "content": "package discoverablegraphql\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan/discover\"\n)\n\nconst (\n\tDiscoverableGraphQLPathScanID = \"discover.graphql\"\n\tDiscoverableGraphQLPathScanName = \"Discoverable GraphQL Path\"\n)\n\ntype DiscoverableGraphQLPathData = discover.DiscoverData\n\nvar issue = report.Issue{\n\tID: \"discover.discoverable_graphql\",\n\tName: \"Discoverable GraphQL Endpoint\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SSRF,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar graphqlSeclistUrl = \"https://raw.githubusercontent.com/cerberauth/vulnapi/main/seclist/lists/graphql.txt\"\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(DiscoverableGraphQLPathScanID, DiscoverableGraphQLPathScanName, op)\n\tr.AddIssueReport(vulnReport)\n\treturn discover.DownloadAndScanURLs(\"GraphQL\", graphqlSeclistUrl, r, vulnReport, op, securityScheme)\n}\n" }, { "path": "scan/discover/discoverable_graphql/discoverable_graphql_test.go", "content": "package discoverablegraphql_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\tdiscoverablegraphql \"github.com/cerberauth/vulnapi/scan/discover/discoverable_graphql\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestDiscoverableScanner_Passed_WhenNoDiscoverableGraphqlPathFound(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tRateLimit: 500,\n\t})\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterNoResponder(httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\n\treport, err := discoverablegraphql.ScanHandler(op, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Greater(t, httpmock.GetTotalCallCount(), 7)\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestDiscoverableScanner_Failed_WhenOneGraphQLPathFound(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tRateLimit: 500,\n\t})\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/graphql\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\thttpmock.RegisterNoResponder(httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\n\treport, err := discoverablegraphql.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Greater(t, httpmock.GetTotalCallCount(), 0)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/discover/discoverable_openapi/discoverable_openapi.go", "content": "package discoverableopenapi\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan/discover\"\n)\n\nconst (\n\tDiscoverableOpenAPIScanID = \"discover.discoverable_openapi\"\n\tDiscoverableOpenAPIScanName = \"Discoverable OpenAPI\"\n)\n\ntype DiscoverableOpenAPIData = discover.DiscoverData\n\nvar issue = report.Issue{\n\tID: \"discover.discoverable_openapi\",\n\tName: \"Discoverable OpenAPI Path\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SSRF,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar openapiSeclistUrl = \"https://raw.githubusercontent.com/cerberauth/vulnapi/main/seclist/lists/swagger.txt\"\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(DiscoverableOpenAPIScanID, DiscoverableOpenAPIScanName, op)\n\tr.AddIssueReport(vulnReport)\n\treturn discover.DownloadAndScanURLs(\"OpenAPI\", openapiSeclistUrl, r, vulnReport, op, securityScheme)\n}\n" }, { "path": "scan/discover/discoverable_openapi/discoverable_openapi_test.go", "content": "package discoverableopenapi_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\tdiscoverableopenapi \"github.com/cerberauth/vulnapi/scan/discover/discoverable_openapi\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestDiscoverableScanner_Passed_WhenNoDiscoverableGraphqlPathFound(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tRateLimit: 500,\n\t})\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil).HeaderAdd(http.Header{\"Server\": []string{\"Apache/2.4.29 (Ubuntu)\"}}))\n\thttpmock.RegisterNoResponder(httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\n\treport, err := discoverableopenapi.ScanHandler(op, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Greater(t, httpmock.GetTotalCallCount(), 10)\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestDiscoverableScanner_Failed_WhenOneOpenAPIFound(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tRateLimit: 500,\n\t})\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/swagger/v1/swagger.json\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\thttpmock.RegisterNoResponder(httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\n\treport, err := discoverableopenapi.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Greater(t, httpmock.GetTotalCallCount(), 0)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/discover/exposed_files/exposed_files.go", "content": "package exposedfiles\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan/discover\"\n)\n\nconst (\n\tDiscoverableFilesScanID = \"discover.exposed_files\"\n\tDiscoverableFilesScanName = \"Discoverable exposed files\"\n)\n\ntype DiscoverableFilesData = discover.DiscoverData\n\nvar issue = report.Issue{\n\tID: \"discover.exposed_files\",\n\tName: \"Discoverable exposed files\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SSRF,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar discoverableFilesSeclistUrl = \"https://raw.githubusercontent.com/cerberauth/vulnapi/main/seclist/lists/exposed-paths.txt\"\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(DiscoverableFilesScanID, DiscoverableFilesScanName, op)\n\tr.AddIssueReport(vulnReport)\n\treturn discover.DownloadAndScanURLs(\"Exposed Files\", discoverableFilesSeclistUrl, r, vulnReport, op, securityScheme)\n}\n" }, { "path": "scan/discover/exposed_files/exposed_files_test.go", "content": "package exposedfiles_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\texposedfiles \"github.com/cerberauth/vulnapi/scan/discover/exposed_files\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestDiscoverableScanner_Passed_WhenNoDiscoverableGraphqlPathFound(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tRateLimit: 500,\n\t})\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterNoResponder(httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\n\treport, err := exposedfiles.ScanHandler(op, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Greater(t, httpmock.GetTotalCallCount(), 7)\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestDiscoverableScanner_Failed_WhenOneGraphQLPathFound(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tRateLimit: 500,\n\t})\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/.aws/credentials\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\thttpmock.RegisterNoResponder(httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\n\treport, err := exposedfiles.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Greater(t, httpmock.GetTotalCallCount(), 0)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/discover/fingerprint/fingerprint.go", "content": "package fingerprint\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\twappalyzer \"github.com/projectdiscovery/wappalyzergo\"\n)\n\nconst (\n\tDiscoverFingerPrintScanID = \"discover.server_signature\"\n\tDiscoverFingerPrintScanName = \"Server Signature Discovery\"\n)\n\ntype FingerPrintApp struct {\n\tName string `json:\"name\" yaml:\"name\"`\n\tVersion *string `json:\"version,omitempty\"`\n}\n\ntype FingerPrintData struct {\n\tCertificateAuthority []FingerPrintApp `json:\"certificate_authority\" yaml:\"certificate_authority\"`\n\tHosting []FingerPrintApp `json:\"hosting\" yaml:\"hosting\"`\n\tOS []FingerPrintApp `json:\"os\" yaml:\"os\"`\n\tSoftwares []FingerPrintApp `json:\"softwares\" yaml:\"softwares\"`\n\tDatabases []FingerPrintApp `json:\"databases\" yaml:\"databases\"`\n\tServers []FingerPrintApp `json:\"servers\" yaml:\"servers\"`\n\tServerExtensions []FingerPrintApp `json:\"server_extensions\" yaml:\"server_extensions\"`\n\tAuthServices []FingerPrintApp `json:\"auth_services\" yaml:\"auth_services\"`\n\tCDNs []FingerPrintApp `json:\"cdns\" yaml:\"cdns\"`\n\tCaching []FingerPrintApp `json:\"cache\" yaml:\"cache\"`\n\tLanguages []FingerPrintApp `json:\"languages\" yaml:\"languages\"`\n\tFrameworks []FingerPrintApp `json:\"frameworks\" yaml:\"frameworks\"`\n\tSecurityServices []FingerPrintApp `json:\"security_services\" yaml:\"security_services\"`\n}\n\nvar issue = report.Issue{\n\tID: \"discover.fingerprint\",\n\tName: \"Service Fingerprinting\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nfunc appendIfMissing(slice []FingerPrintApp, app FingerPrintApp) []FingerPrintApp {\n\tfor _, element := range slice {\n\t\tif element.Name == app.Name {\n\t\t\treturn slice\n\t\t}\n\t}\n\treturn append(slice, app)\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(DiscoverFingerPrintScanID, DiscoverFingerPrintScanName, op)\n\n\tattempt, err := scan.ScanURL(op, securityScheme)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tr.AddScanAttempt(attempt)\n\tif attempt.Err != nil {\n\t\treturn r.AddIssueReport(vulnReport.AddScanAttempt(attempt).Skip()).End(), attempt.Err\n\t}\n\n\twappalyzerClient, err := wappalyzer.New()\n\tif err != nil {\n\t\treturn r.AddIssueReport(vulnReport.AddScanAttempt(attempt).Skip()).End(), err\n\t}\n\n\tfingerprints := wappalyzerClient.FingerprintWithInfo(attempt.Response.GetHeader(), attempt.Response.GetBody().Bytes())\n\treportData := FingerPrintData{}\n\tfingerPrintIdentifier := false\n\tfor name, fingerprint := range fingerprints {\n\t\tif len(fingerprint.Categories) == 0 {\n\t\t\tcontinue\n\t\t}\n\n\t\tfor _, category := range fingerprint.Categories {\n\t\t\tswitch category {\n\t\t\tcase \"SSL/TLS certificate authorities\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.CertificateAuthority = appendIfMissing(reportData.CertificateAuthority, FingerPrintApp{Name: name})\n\t\t\tcase \"Operating systems\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.OS = appendIfMissing(reportData.OS, FingerPrintApp{Name: name})\n\t\t\tcase \"Containers\", \"PaaS\", \"IaaS\", \"Hosting\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.Hosting = appendIfMissing(reportData.Hosting, FingerPrintApp{Name: name})\n\t\t\tcase \"CMS\", \"Ecommerce\", \"Wikis\", \"Blogs\", \"LMS\", \"DMS\", \"Page builders\", \"Static site generator\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.Softwares = appendIfMissing(reportData.Softwares, FingerPrintApp{Name: name})\n\t\t\tcase \"Databases\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.Databases = appendIfMissing(reportData.Databases, FingerPrintApp{Name: name})\n\t\t\tcase \"Web servers\", \"Reverse proxies\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.Servers = appendIfMissing(reportData.Servers, FingerPrintApp{Name: name})\n\t\t\tcase \"Web server extensions\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.ServerExtensions = appendIfMissing(reportData.ServerExtensions, FingerPrintApp{Name: name})\n\t\t\tcase \"Authentication\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.AuthServices = appendIfMissing(reportData.AuthServices, FingerPrintApp{Name: name})\n\t\t\tcase \"CDN\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.CDNs = appendIfMissing(reportData.CDNs, FingerPrintApp{Name: name})\n\t\t\tcase \"Caching\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.Caching = appendIfMissing(reportData.Caching, FingerPrintApp{Name: name})\n\t\t\tcase \"JavaScript frameworks\", \"Web frameworks\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.Frameworks = appendIfMissing(reportData.Frameworks, FingerPrintApp{Name: name})\n\t\t\tcase \"Programming languages\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.Languages = appendIfMissing(reportData.Languages, FingerPrintApp{Name: name})\n\t\t\tcase \"Security\":\n\t\t\t\tfingerPrintIdentifier = true\n\t\t\t\treportData.SecurityServices = appendIfMissing(reportData.SecurityServices, FingerPrintApp{Name: name})\n\t\t\t}\n\t\t}\n\t}\n\n\tattempt.WithBooleanStatus(!fingerPrintIdentifier)\n\tvulnReport.WithBooleanStatus(attempt.HasPassed()).WithScanAttempt(attempt)\n\tr.WithData(reportData).AddIssueReport(vulnReport).End()\n\n\treturn r, nil\n}\n" }, { "path": "scan/discover/fingerprint/fingerprint_test.go", "content": "package fingerprint_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\tfingerprint \"github.com/cerberauth/vulnapi/scan/discover/fingerprint\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestCheckSignatureHeader_Failed_WithServerSignatureHeader(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil).HeaderAdd(http.Header{\"Server\": []string{\"Apache/2.4.29\"}}))\n\n\treport, err := fingerprint.ScanHandler(op, securityScheme)\n\tdata, _ := report.GetData().(fingerprint.FingerPrintData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.Equal(t, 1, len(data.Servers))\n\tassert.Equal(t, data.Servers[0].Name, \"Apache HTTP Server:2.4.29\")\n}\n\nfunc TestCheckSignatureHeader_Failed_WithOSSignatureHeader(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil).HeaderAdd(http.Header{\"Server\": []string{\"Ubuntu\"}}))\n\n\treport, err := fingerprint.ScanHandler(operation, securityScheme)\n\tdata, _ := report.GetData().(fingerprint.FingerPrintData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.Equal(t, 1, len(data.OS))\n\tassert.Equal(t, data.OS[0].Name, \"Ubuntu\")\n}\n\nfunc TestCheckSignatureHeader_Failed_WithHostingSignatureHeader(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil).HeaderAdd(http.Header{\"platform\": []string{\"hostinger\"}}))\n\n\treport, err := fingerprint.ScanHandler(operation, securityScheme)\n\tdata, _ := report.GetData().(fingerprint.FingerPrintData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.Equal(t, 1, len(data.Hosting))\n\tassert.Equal(t, data.Hosting[0].Name, \"Hostinger\")\n}\n\nfunc TestCheckSignatureHeader_Failed_WithAuthenticationSignatureHeader(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil).HeaderAdd(http.Header{\"x-auth0-requestid\": []string{\"id\"}}))\n\n\treport, err := fingerprint.ScanHandler(operation, securityScheme)\n\tdata, _ := report.GetData().(fingerprint.FingerPrintData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.Equal(t, 1, len(data.AuthServices))\n\tassert.Equal(t, data.AuthServices[0].Name, \"Auth0\")\n}\n\nfunc TestCheckSignatureHeader_Failed_WithCDNSignatureHeader(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil).HeaderAdd(http.Header{\"cf-cache-status\": []string{\"HIT\"}}))\n\n\treport, err := fingerprint.ScanHandler(operation, securityScheme)\n\tdata, _ := report.GetData().(fingerprint.FingerPrintData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.Equal(t, 1, len(data.CDNs))\n\tassert.Equal(t, data.CDNs[0].Name, \"Cloudflare\")\n}\n\nfunc TestCheckSignatureHeader_Failed_WithLanguageSignatureHeader(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil).HeaderAdd(http.Header{\"x-powered-by\": []string{\"PHP 7.4.3\"}}))\n\n\treport, err := fingerprint.ScanHandler(operation, securityScheme)\n\tdata, _ := report.GetData().(fingerprint.FingerPrintData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.Equal(t, 1, len(data.Languages))\n\tassert.Equal(t, data.Languages[0].Name, \"PHP\")\n}\n\nfunc TestCheckSignatureHeader_Failed_WithFrameworkSignatureHeader(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil).HeaderAdd(http.Header{\"x-powered-by\": []string{\"express\"}}))\n\n\treport, err := fingerprint.ScanHandler(operation, securityScheme)\n\tdata, _ := report.GetData().(fingerprint.FingerPrintData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.Equal(t, 1, len(data.Languages))\n\tassert.Equal(t, data.Languages[0].Name, \"Node.js\")\n\tassert.Equal(t, 1, len(data.Frameworks))\n\tassert.Equal(t, data.Frameworks[0].Name, \"Express\")\n}\n\nfunc TestCheckSignatureHeader_Passed_WithoutDuplicate(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil).HeaderAdd(http.Header{\"x-powered-by\": []string{\"next.js\"}}))\n\n\treport, err := fingerprint.ScanHandler(operation, securityScheme)\n\tdata, _ := report.GetData().(fingerprint.FingerPrintData)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.Equal(t, 2, len(data.Frameworks))\n}\n\nfunc TestCheckSignatureHeader_Passed_WithoutSignatureHeader(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\n\treport, err := fingerprint.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n" }, { "path": "scan/discover/healthcheck/healthcheck.go", "content": "package healthcheck\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan/discover\"\n)\n\nconst (\n\tDiscoverableHealthCheckScanID = \"discover.healthcheck\"\n\tDiscoverableHealthCheckScanName = \"Discoverable healthcheck endpoint\"\n)\n\nvar issue = report.Issue{\n\tID: \"discover.discoverable_healthcheck\",\n\tName: \"Discoverable healthcheck endpoint\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SSRF,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar healthcheckSeclistUrl = \"https://raw.githubusercontent.com/cerberauth/vulnapi/main/seclist/lists/healthcheck.txt\"\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(DiscoverableHealthCheckScanID, DiscoverableHealthCheckScanName, op)\n\tr.AddIssueReport(vulnReport)\n\treturn discover.DownloadAndScanURLs(\"HealthCheck\", healthcheckSeclistUrl, r, vulnReport, op, securityScheme)\n}\n" }, { "path": "scan/discover/healthcheck/healthcheck_test.go", "content": "package healthcheck_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/scan/discover/healthcheck\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestDiscoverableScanner_Passed_WhenNoDiscoverableHealthCheckEndpointFound(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tRateLimit: 500,\n\t})\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterNoResponder(httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\n\treport, err := healthcheck.ScanHandler(op, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Greater(t, httpmock.GetTotalCallCount(), 5)\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestDiscoverableScanner_Failed_WhenOneHealthCheckEndpointFound(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tRateLimit: 500,\n\t})\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/healthz\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\thttpmock.RegisterNoResponder(httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\n\treport, err := healthcheck.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Greater(t, httpmock.GetTotalCallCount(), 0)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/discover/utils.go", "content": "package discover\n\nimport (\n\t\"log\"\n\t\"net/http\"\n\t\"net/url\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/seclist\"\n)\n\ntype DiscoverData []struct {\n\tURL string\n}\n\nfunc ExtractBaseURL(inputURL *url.URL) *url.URL {\n\treturn &url.URL{\n\t\tScheme: inputURL.Scheme,\n\t\tHost: inputURL.Host,\n\t}\n}\n\nfunc ScanURLs(scanUrls []string, op *operation.Operation, securityScheme *auth.SecurityScheme, r *report.ScanReport, vulnReport *report.IssueReport) (*report.ScanReport, error) {\n\tsecuritySchemes := []*auth.SecurityScheme{securityScheme}\n\tbase := ExtractBaseURL(&op.URL)\n\tchunkSize := 20\n\tresults := make(chan *scan.IssueScanAttempt, len(scanUrls))\n\terrs := make(chan error, len(scanUrls))\n\n\tfor i := 0; i < len(scanUrls); i += chunkSize {\n\t\tend := i + chunkSize\n\t\tif end > len(scanUrls) {\n\t\t\tend = len(scanUrls)\n\t\t}\n\t\tchunk := scanUrls[i:end]\n\n\t\tgo func(chunk []string) {\n\t\t\tfor _, path := range chunk {\n\t\t\t\tnewOperation, err := operation.NewOperation(http.MethodGet, base.ResolveReference(&url.URL{Path: path}).String(), nil, op.Client)\n\t\t\t\tnewOperation.SetSecuritySchemes(securitySchemes)\n\t\t\t\tif err != nil {\n\t\t\t\t\terrs <- err\n\t\t\t\t\treturn\n\t\t\t\t}\n\n\t\t\t\tattempt, err := scan.ScanURL(newOperation, securityScheme)\n\t\t\t\tif err != nil {\n\t\t\t\t\terrs <- err\n\t\t\t\t\treturn\n\t\t\t\t}\n\n\t\t\t\tresults <- attempt\n\t\t\t}\n\t\t}(chunk)\n\t}\n\n\tdata := DiscoverData{}\n\tfor i := 0; i < len(scanUrls); i++ {\n\t\tselect {\n\t\tcase attempt := <-results:\n\t\t\tr.AddScanAttempt(attempt)\n\t\t\tvulnReport.AddScanAttempt(attempt)\n\t\t\tif attempt.Err != nil {\n\t\t\t\terrs <- attempt.Err\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif attempt.Response.GetStatusCode() == http.StatusOK { // TODO: check if the response contains the expected content\n\t\t\t\tattempt.Fail()\n\t\t\t\tdata = append(data, struct{ URL string }{URL: attempt.Request.GetURL()})\n\t\t\t} else {\n\t\t\t\tattempt.Pass()\n\t\t\t}\n\t\tcase err := <-errs:\n\t\t\tlog.Printf(\"Error scanning URL: %v\", err)\n\t\t\tcontinue\n\t\t}\n\t}\n\n\tif len(data) > 0 {\n\t\tvulnReport.Fail()\n\t\tr.WithData(data)\n\t\treturn r.End(), nil\n\t}\n\n\tvulnReport.Pass()\n\treturn r.End(), nil\n}\n\nfunc DownloadAndScanURLs(name string, seclistUrl string, r *report.ScanReport, vulnReport *report.IssueReport, op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\turlsFromSeclist, err := seclist.NewSecListFromURL(name, seclistUrl)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\tscanUrls := urlsFromSeclist.Items\n\n\treturn ScanURLs(scanUrls, op, securityScheme, r, vulnReport)\n}\n" }, { "path": "scan/discover/utils_test.go", "content": "package discover_test\n\nimport (\n\t\"net/http\"\n\t\"net/url\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan/discover\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestExtractBaseURL(t *testing.T) {\n\ttestCases := []struct {\n\t\tinputURL string\n\t\texpected string\n\t\texpectErr bool\n\t}{\n\t\t{\n\t\t\tinputURL: \"https://example.com/path/to/resource\",\n\t\t\texpected: \"https://example.com\",\n\t\t},\n\t\t{\n\t\t\tinputURL: \"http://localhost:1234\",\n\t\t\texpected: \"http://localhost:1234\",\n\t\t},\n\t}\n\n\tfor _, tc := range testCases {\n\t\tinput, err := url.Parse(tc.inputURL)\n\t\tif err != nil {\n\t\t\tt.Fatalf(\"failed to parse input URL: %v\", err)\n\t\t}\n\n\t\tbaseURL := discover.ExtractBaseURL(input)\n\n\t\tassert.Equal(t, tc.expected, baseURL.String())\n\t}\n}\n\nfunc TestDownloadAndScanURLs_Failed_WhenNotFoundSeclist(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tt.Cleanup(httpmock.DeactivateAndReset)\n\n\tseclistUrl := \"http://localhost:1234/not_found_seclist\"\n\tsecuritySchemes := []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()}\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:1234\", nil, client)\n\toperation.SetSecuritySchemes(securitySchemes)\n\tr := report.NewScanReport(\"test\", \"test\", operation)\n\tvulnReport := report.NewIssueReport(report.Issue{})\n\thttpmock.RegisterResponder(http.MethodGet, seclistUrl, httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\n\t_, err := discover.DownloadAndScanURLs(\"test\", seclistUrl, r, vulnReport, operation, securitySchemes[0])\n\n\tassert.Error(t, err)\n\tassert.EqualError(t, err, \"sec list download failed\")\n}\n\nfunc TestDownloadAndScanURLs_Passed_WhenNotFoundURLs(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tt.Cleanup(httpmock.DeactivateAndReset)\n\n\tseclistUrl := \"http://localhost:1234/passed_seclist\"\n\tsecuritySchemes := []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()}\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:1234\", nil, client)\n\toperation.SetSecuritySchemes(securitySchemes)\n\tr := report.NewScanReport(\"test\", \"test\", operation)\n\tvulnReport := report.NewIssueReport(report.Issue{})\n\n\thttpmock.RegisterResponder(\n\t\thttp.MethodGet,\n\t\tseclistUrl,\n\t\thttpmock.NewBytesResponder(http.StatusOK, []byte(\"path1\\npath2\")),\n\t)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodGet, \"http://localhost:1234/path1\", httpmock.NewStringResponder(http.StatusNotFound, \"Not Found\"))\n\thttpmock.RegisterResponder(http.MethodGet, \"http://localhost:1234/path2\", httpmock.NewStringResponder(http.StatusNotFound, \"Not Found\"))\n\n\t_, err := discover.DownloadAndScanURLs(\"test\", seclistUrl, r, vulnReport, operation, securitySchemes[0])\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, 3, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 2, len(r.Scans))\n\tassert.Equal(t, 2, len(vulnReport.Scans))\n\tassert.True(t, vulnReport.Scans[0].HasPassed())\n\tassert.True(t, vulnReport.Scans[1].HasPassed())\n\tassert.True(t, vulnReport.HasPassed())\n}\n\nfunc TestDownloadAndScanURLs_Failed_WhenFoundExposedURLs(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tt.Cleanup(httpmock.DeactivateAndReset)\n\n\tseclistUrl := \"http://localhost:1234/failed_seclist\"\n\tsecuritySchemes := []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()}\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:1234\", nil, client)\n\toperation.SetSecuritySchemes(securitySchemes)\n\tr := report.NewScanReport(\"test\", \"test\", operation)\n\tvulnReport := report.NewIssueReport(report.Issue{})\n\n\thttpmock.RegisterResponder(\n\t\thttp.MethodGet,\n\t\tseclistUrl,\n\t\thttpmock.NewBytesResponder(http.StatusOK, []byte(\"path1\\npath2\")),\n\t)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodGet, \"http://localhost:1234/path1\", httpmock.NewStringResponder(http.StatusNotFound, \"Not Found\"))\n\thttpmock.RegisterResponder(http.MethodGet, \"http://localhost:1234/path2\", httpmock.NewStringResponder(http.StatusOK, \"OK\"))\n\n\t_, err := discover.DownloadAndScanURLs(\"test\", seclistUrl, r, vulnReport, operation, securitySchemes[0])\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, 3, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 2, len(r.Scans))\n\tassert.True(t, vulnReport.Scans[0].HasPassed())\n\tassert.True(t, vulnReport.Scans[1].HasFailed())\n\tassert.True(t, vulnReport.HasFailed())\n}\n" }, { "path": "scan/discover/well-known/well_known.go", "content": "package wellknown\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan/discover\"\n)\n\nconst (\n\tDiscoverableWellKnownScanID = \"discover.well-known\"\n\tDiscoverableWellKnownScanName = \"Discoverable well-known path\"\n)\n\nvar issue = report.Issue{\n\tID: \"discover.discoverable_well_known\",\n\tName: \"Discoverable well-known path\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SSRF,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar wellKnownSeclistUrl = \"https://raw.githubusercontent.com/cerberauth/vulnapi/main/seclist/lists/well-known.txt\"\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(DiscoverableWellKnownScanID, DiscoverableWellKnownScanName, op)\n\tr.AddIssueReport(vulnReport)\n\treturn discover.DownloadAndScanURLs(\"Well-Known\", wellKnownSeclistUrl, r, vulnReport, op, securityScheme)\n}\n" }, { "path": "scan/discover/well-known/well_known_test.go", "content": "package wellknown_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\twellknown \"github.com/cerberauth/vulnapi/scan/discover/well-known\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestDiscoverableScanner_Passed_WhenNoDiscoverableWellKnownPathFound(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tRateLimit: 500,\n\t})\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterNoResponder(httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\n\treport, err := wellknown.ScanHandler(op, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Greater(t, httpmock.GetTotalCallCount(), 5)\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestDiscoverableScanner_Failed_WhenOneWellKnownPathFound(t *testing.T) {\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tRateLimit: 500,\n\t})\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/.well-known/jwks.json\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\thttpmock.RegisterNoResponder(httpmock.NewBytesResponder(http.StatusNotFound, nil))\n\n\treport, err := wellknown.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Greater(t, httpmock.GetTotalCallCount(), 0)\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/graphql/introspection_enabled/introspection_enabled.go", "content": "package introspectionenabled\n\nimport (\n\t\"net/http\"\n\t\"net/url\"\n\t\"strings\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tGraphqlIntrospectionScanID = \"graphql.introspection_enabled\"\n\tGraphqlIntrospectionScanName = \"GraphQL Introspection Enabled\"\n)\n\nvar issue = report.Issue{\n\tID: \"graphql.introspection_enabled\",\n\tName: \"GraphQL Introspection enabled\",\n\tURL: \"https://www.cerberauth.com/docs/vulnapi/vulnerabilities/security-misconfiguration/graphql-introspection?utm_source=vulnapi-report\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nconst graphqlQuery = `query{__schema{queryType{name}}}`\n\nfunc newPostGraphqlIntrospectionRequest(client *request.Client, endpoint url.URL) (*request.Request, error) {\n\tpayload := strings.NewReader(\"{\\\"query\\\":\\\"\" + graphqlQuery + \"\\\"}\")\n\treq, err := request.NewRequest(http.MethodPost, endpoint.String(), payload, client)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\treq.SetHeader(\"Content-Type\", \"application/json\")\n\treturn req, nil\n}\n\nfunc newGetGraphqlIntrospectionRequest(client *request.Client, endpoint url.URL) (*request.Request, error) {\n\tvalues := url.Values{}\n\tvalues.Add(\"query\", graphqlQuery)\n\tendpoint.RawQuery = values.Encode()\n\n\treq, err := request.NewRequest(http.MethodGet, endpoint.String(), nil, client)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\treq.SetHeader(\"Content-Type\", \"application/json\")\n\treturn req, nil\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tsecuritySchemes := []*auth.SecurityScheme{securityScheme}\n\tvulnReport := report.NewIssueReport(issue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(GraphqlIntrospectionScanID, GraphqlIntrospectionScanName, op)\n\tr.AddIssueReport(vulnReport)\n\n\tnewRequest, err := newPostGraphqlIntrospectionRequest(op.Client, op.URL)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tnewOperation, err := operation.NewOperationFromRequest(newRequest)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tnewOperation.SetSecuritySchemes(securitySchemes)\n\tattempt, err := scan.ScanURL(newOperation, securityScheme)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tr.AddScanAttempt(attempt)\n\tvulnReport.AddScanAttempt(attempt)\n\n\tif attempt.Response.GetStatusCode() == http.StatusOK && strings.Contains(attempt.Response.GetBody().String(), \"queryType\") {\n\t\tattempt.Fail()\n\t\tvulnReport.Fail()\n\t\treturn r.End(), nil\n\t}\n\n\tnewRequest, err = newGetGraphqlIntrospectionRequest(op.Client, op.URL)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tnewOperation, err = operation.NewOperationFromRequest(newRequest)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tnewOperation.SetSecuritySchemes(securitySchemes)\n\tattempt, err = scan.ScanURL(newOperation, securityScheme)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tr.AddScanAttempt(attempt)\n\tvulnReport.AddScanAttempt(attempt)\n\n\tif attempt.Response.GetStatusCode() == http.StatusOK && strings.Contains(attempt.Response.GetBody().String(), \"queryType\") {\n\t\tattempt.Fail()\n\t\tvulnReport.Fail()\n\t\treturn r.End(), nil\n\t}\n\n\tattempt.Pass()\n\tvulnReport.Pass()\n\treturn r.End(), nil\n}\n" }, { "path": "scan/graphql/introspection_enabled/introspection_enabled_test.go", "content": "package introspectionenabled_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\tintrospectionenabled \"github.com/cerberauth/vulnapi/scan/graphql/introspection_enabled\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestGraphqlIntrospectionScanHandler_Failed_WhenRespondHTTPStatusIsOK(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, client)\n\tresBody := []byte(`{\"data\": {\"__schema\": {\"queryType\": {\"name\": \"Query\"}}}}`)\n\thttpmock.RegisterResponder(http.MethodPost, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, resBody))\n\thttpmock.RegisterResponder(http.MethodGet, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, resBody))\n\n\treport, err := introspectionenabled.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n\nfunc TestGraphqlIntrospectionScanHandler_Failed_WhenRespond_GETMethodOnly_HTTPStatusIsOK(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, client)\n\tresBody := []byte(`{\"data\": {\"__schema\": {\"queryType\": {\"name\": \"Query\"}}}}`)\n\thttpmock.RegisterResponder(http.MethodPost, operation.URL.String(), httpmock.NewBytesResponder(http.StatusBadRequest, nil))\n\thttpmock.RegisterResponder(http.MethodGet, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, resBody))\n\n\treport, err := introspectionenabled.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 2, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n\nfunc TestGraphqlIntrospectionScanHandler_Passed_WhenBadRequestStatus(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(http.MethodPost, operation.URL.String(), httpmock.NewBytesResponder(http.StatusBadRequest, nil))\n\thttpmock.RegisterResponder(http.MethodGet, operation.URL.String(), httpmock.NewBytesResponder(http.StatusBadRequest, nil))\n\n\treport, err := introspectionenabled.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 2, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestGraphqlIntrospectionScanHandler_Passed_WhenOKStatusButNoQuery(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodPost, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(http.MethodPost, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\thttpmock.RegisterResponder(http.MethodGet, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\n\treport, err := introspectionenabled.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 2, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n" }, { "path": "scan/misconfiguration/http_cookies/http_cookies.go", "content": "package httpcookies\n\nimport (\n\t\"net/http\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tHTTPCookiesScanID = \"misconfiguration.http_cookies\"\n\tHTTPCookiesScanName = \"HTTP Cookies Misconfiguration\"\n)\n\nvar httpNotHttpOnlyIssue = report.Issue{\n\tID: \"security_misconfiguration.http_cookies_not_http_only\",\n\tName: \"Cookies not HTTP-Only\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#security\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_1004_Sensitive_Cookie_Without_Http_Only,\n\t\tCAPEC: report.CAPEC_31_Manipulating_HTTP_Cookies,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar notSecureIssue = report.Issue{\n\tID: \"security_misconfiguration.http_cookies_not_secure\",\n\tName: \"Cookies not Secure\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#security\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_614_Sensitive_Cookie_Without_Secure_Flag,\n\t\tCAPEC: report.CAPEC_31_Manipulating_HTTP_Cookies,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar sameSiteNoneIssue = report.Issue{\n\tID: \"security_misconfiguration.http_cookies_same_site_none\",\n\tName: \"Cookies SameSite set to None\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_1275_Sensitive_Cookie_With_Improper_SameSite,\n\t\tCAPEC: report.CAPEC_31_Manipulating_HTTP_Cookies,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar withoutSameSiteIssue = report.Issue{\n\tID: \"security_misconfiguration.http_cookies_without_same_site\",\n\tName: \"Cookies SameSite not set\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_1275_Sensitive_Cookie_With_Improper_SameSite,\n\t\tCAPEC: report.CAPEC_31_Manipulating_HTTP_Cookies,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar withoutExpiresIssue = report.Issue{\n\tID: \"security_misconfiguration.http_cookies_without_expires\",\n\tName: \"Cookies Expires not set\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#security\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_613_Insufficient_Session_Expiration,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tattempt, err := scan.ScanURL(op, securityScheme)\n\tr := report.NewScanReport(HTTPCookiesScanID, HTTPCookiesScanName, op)\n\tif err != nil {\n\t\treturn r, err\n\t}\n\tr.AddScanAttempt(attempt)\n\n\thttpOnlyVulnReport := report.NewIssueReport(httpNotHttpOnlyIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\tnotSecureVulnReport := report.NewIssueReport(notSecureIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\tsameSiteNoneVulnReport := report.NewIssueReport(sameSiteNoneIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\twithoutSameSiteVulnReport := report.NewIssueReport(withoutSameSiteIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\twithoutExpiresVulnReport := report.NewIssueReport(withoutExpiresIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\n\tr.AddIssueReport(httpOnlyVulnReport)\n\tr.AddIssueReport(notSecureVulnReport)\n\tr.AddIssueReport(sameSiteNoneVulnReport)\n\tr.AddIssueReport(withoutSameSiteVulnReport)\n\tr.AddIssueReport(withoutExpiresVulnReport)\n\n\tif len(attempt.Response.GetCookies()) == 0 {\n\t\tnotSecureVulnReport.Skip()\n\t\thttpOnlyVulnReport.Skip()\n\t\tsameSiteNoneVulnReport.Skip()\n\t\twithoutSameSiteVulnReport.Skip()\n\t\twithoutExpiresVulnReport.Skip()\n\t}\n\n\t// Detect every cookies insecure practices\n\tfor _, cookie := range attempt.Response.GetCookies() {\n\t\tnotSecureVulnReport.WithBooleanStatus(cookie.Secure)\n\t\thttpOnlyVulnReport.WithBooleanStatus(cookie.HttpOnly)\n\t\tsameSiteNoneVulnReport.WithBooleanStatus(cookie.SameSite != http.SameSiteNoneMode)\n\t\twithoutSameSiteVulnReport.WithBooleanStatus(cookie.SameSite != 0)\n\t\twithoutExpiresVulnReport.WithBooleanStatus(!cookie.Expires.IsZero())\n\t}\n\n\tattempt.WithBooleanStatus(!r.HasFailedIssueReport())\n\treturn r.End(), nil\n}\n" }, { "path": "scan/misconfiguration/http_cookies/http_cookies_test.go", "content": "package httpcookies_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\t\"time\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\thttpcookies \"github.com/cerberauth/vulnapi/scan/misconfiguration/http_cookies\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestHTTPCookiesScanHandler_Skipped_WhenNoCookies(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(op.Method, op.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := httpcookies.ScanHandler(op, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 5, len(report.GetIssueReports()))\n\tassert.False(t, report.HasFailedIssueReport())\n\tassert.True(t, report.GetIssueReports()[0].HasBeenSkipped())\n}\n\nfunc TestHTTPCookiesScanHandler_Passed_WhenNoUnsecurePractices(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\tresp := httpmock.NewStringResponse(http.StatusOK, \"OK\")\n\tcookie := &http.Cookie{\n\t\tName: \"cookie_name\",\n\t\tValue: \"cookie_value\",\n\t\tPath: \"/\",\n\t\tDomain: \"localhost\",\n\t\tSameSite: http.SameSiteLaxMode,\n\t\tSecure: true,\n\t\tHttpOnly: true,\n\t\tExpires: time.Now().Add(24 * time.Hour),\n\t}\n\tresp.Header.Add(\"Set-Cookie\", cookie.String())\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.ResponderFromResponse(resp))\n\n\treport, err := httpcookies.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 5, len(report.GetIssueReports()))\n\tassert.False(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPCookiesScanHandler_Failed_WhenNotHttpOnly(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\tresp := httpmock.NewStringResponse(http.StatusOK, \"OK\")\n\tcookie := &http.Cookie{\n\t\tName: \"cookie_name\",\n\t\tValue: \"cookie_value\",\n\t\tPath: \"/\",\n\t\tDomain: \"localhost\",\n\t\tSameSite: http.SameSiteLaxMode,\n\t\tSecure: true,\n\t\tHttpOnly: false,\n\t\tExpires: time.Now().Add(24 * time.Hour),\n\t}\n\tresp.Header.Add(\"Set-Cookie\", cookie.String())\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.ResponderFromResponse(resp))\n\n\treport, err := httpcookies.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 5, len(report.GetIssueReports()))\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPCookiesScanHandlerFailed_WhenNotSecure(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\tresp := httpmock.NewStringResponse(http.StatusOK, \"OK\")\n\tcookie := &http.Cookie{\n\t\tName: \"cookie_name\",\n\t\tValue: \"cookie_value\",\n\t\tPath: \"/\",\n\t\tDomain: \"localhost\",\n\t\tSameSite: http.SameSiteLaxMode,\n\t\tSecure: false,\n\t\tHttpOnly: true,\n\t\tExpires: time.Now().Add(24 * time.Hour),\n\t}\n\tresp.Header.Add(\"Set-Cookie\", cookie.String())\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.ResponderFromResponse(resp))\n\n\treport, err := httpcookies.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 5, len(report.GetIssueReports()))\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPCookiesScanHandler_Failed_WhenSameSiteNone(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\tresp := httpmock.NewStringResponse(http.StatusOK, \"OK\")\n\tcookie := &http.Cookie{\n\t\tName: \"cookie_name\",\n\t\tValue: \"cookie_value\",\n\t\tPath: \"/\",\n\t\tDomain: \"localhost\",\n\t\tSameSite: http.SameSiteNoneMode,\n\t\tSecure: true,\n\t\tHttpOnly: true,\n\t\tExpires: time.Now().Add(24 * time.Hour),\n\t}\n\tresp.Header.Add(\"Set-Cookie\", cookie.String())\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.ResponderFromResponse(resp))\n\n\treport, err := httpcookies.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 5, len(report.GetIssueReports()))\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPCookiesScanHandler_Failed_WhithoutSameSite(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\tresp := httpmock.NewStringResponse(http.StatusOK, \"OK\")\n\tcookie := &http.Cookie{\n\t\tName: \"cookie_name\",\n\t\tValue: \"cookie_value\",\n\t\tPath: \"/\",\n\t\tDomain: \"localhost\",\n\t\tSecure: true,\n\t\tHttpOnly: true,\n\t\tExpires: time.Now().Add(24 * time.Hour),\n\t}\n\tresp.Header.Add(\"Set-Cookie\", cookie.String())\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.ResponderFromResponse(resp))\n\n\treport, err := httpcookies.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 5, len(report.GetIssueReports()))\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPCookiesScanHandler_Failed_WhenExpiresNotSet(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\tresp := httpmock.NewStringResponse(http.StatusOK, \"OK\")\n\tcookie := &http.Cookie{\n\t\tName: \"cookie_name\",\n\t\tValue: \"cookie_value\",\n\t\tPath: \"/\",\n\t\tDomain: \"localhost\",\n\t\tSameSite: http.SameSiteLaxMode,\n\t\tSecure: true,\n\t\tHttpOnly: true,\n\t\tExpires: time.Time{},\n\t}\n\tresp.Header.Add(\"Set-Cookie\", cookie.String())\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.ResponderFromResponse(resp))\n\n\treport, err := httpcookies.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 5, len(report.GetIssueReports()))\n\tassert.True(t, report.HasFailedIssueReport())\n}\n" }, { "path": "scan/misconfiguration/http_headers/http_headers.go", "content": "package httpheaders\n\nimport (\n\t\"strings\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tCSPHTTPHeader = \"Content-Security-Policy\"\n\tHSTSHTTPHeader = \"Strict-Transport-Security\"\n\tCORSOriginHTTPHeader = \"Access-Control-Allow-Origin\"\n\tXContentTypeOptionsHTTPHeader = \"X-Content-Type-Options\"\n\tXFrameOptionsHTTPHeader = \"X-Frame-Options\"\n)\n\nconst (\n\tHTTPHeadersScanID = \"misconfiguration.http_headers\"\n\tHTTPHeadersScanName = \"HTTP Headers Misconfiguration\"\n)\n\nvar contentOptionsMissingIssue = report.Issue{\n\tID: \"security_misconfiguration.http_headers_content_options_missing\",\n\tName: \"X-Content-Type-Options Header is missing\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_16_Configuration,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar corsMissingIssue = report.Issue{\n\tID: \"security_misconfiguration.http_headers_cors_missing\",\n\tName: \"CORS Headers are missing\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_942_Overly_Permissive_CORS_Policy,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 5.1,\n\t},\n}\n\nvar corsWildcardIssue = report.Issue{\n\tID: \"security_misconfiguration.http_headers_cors_wildcard\",\n\tName: \"CORS Allow-Origin Header is set to wildcard (*)\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_942_Overly_Permissive_CORS_Policy,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar cspFrameAncestorsMissingIssue = report.Issue{\n\tID: \"security_misconfiguration.http_headers_csp_frame_ancestors_missing\",\n\tName: \"CSP frame-ancestors policy is not set\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_1021_Improper_Restriction_Rendered_UI,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 5.1,\n\t},\n}\n\nvar frameOptionsMissingIssue = report.Issue{\n\tID: \"security_misconfiguration.http_headers_frame_options_missing\",\n\tName: \"X-Frame-Options Header is missing\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_1021_Improper_Restriction_Rendered_UI,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 5.1,\n\t},\n}\n\nvar cspMissingIssue = report.Issue{\n\tID: \"security_misconfiguration.http_headers_csp_missing\",\n\tName: \"CSP Header is not set\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_1021_Improper_Restriction_Rendered_UI,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar hstsMissingIssue = report.Issue{\n\tID: \"security_misconfiguration.http_headers_hsts_missing\",\n\tName: \"HSTS Header is missing\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_16_Configuration,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nfunc CheckCSPFrameAncestors(cspHeader string) bool {\n\tdirectives := strings.Split(cspHeader, \";\")\n\tfor _, directive := range directives {\n\t\tdirective = strings.TrimSpace(directive)\n\t\tif strings.HasPrefix(directive, \"frame-ancestors\") {\n\t\t\t// Check if frame-ancestors directive is not equal to \"none\"\n\t\t\tif strings.Contains(directive, \"none\") {\n\t\t\t\treturn true\n\t\t\t}\n\t\t}\n\t}\n\n\treturn false\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tattempt, err := scan.ScanURL(op, securityScheme)\n\tr := report.NewScanReport(HTTPHeadersScanID, HTTPHeadersScanName, op)\n\tif err != nil {\n\t\treturn r, err\n\t}\n\tr.AddScanAttempt(attempt)\n\n\tcontentOptionsMissing := report.NewIssueReport(contentOptionsMissingIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\tcorsMissing := report.NewIssueReport(corsMissingIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\tcorsWildcard := report.NewIssueReport(corsWildcardIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\tcspFrameAncestorsMissing := report.NewIssueReport(cspFrameAncestorsMissingIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\tcspMissing := report.NewIssueReport(cspMissingIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\tframeOptionsMissing := report.NewIssueReport(frameOptionsMissingIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\thstsMissing := report.NewIssueReport(hstsMissingIssue).WithOperation(op).WithSecurityScheme(securityScheme).WithScanAttempt(attempt)\n\n\tr.AddIssueReport(contentOptionsMissing)\n\tr.AddIssueReport(corsMissing)\n\tr.AddIssueReport(corsWildcard)\n\tr.AddIssueReport(cspFrameAncestorsMissing)\n\tr.AddIssueReport(cspMissing)\n\tr.AddIssueReport(frameOptionsMissing)\n\tr.AddIssueReport(hstsMissing)\n\n\tcspHeader := attempt.Response.GetHeader().Get(CSPHTTPHeader)\n\tcspMissing.WithBooleanStatus(cspHeader != \"\")\n\tcspFrameAncestorsMissing.WithBooleanStatus(CheckCSPFrameAncestors(cspHeader))\n\n\tallowOrigin := attempt.Response.GetHeader().Get(CORSOriginHTTPHeader)\n\tisCorsMissing := allowOrigin == \"\"\n\tcorsMissing.WithBooleanStatus(!isCorsMissing)\n\tif isCorsMissing {\n\t\tcorsWildcard.Skip()\n\t} else {\n\t\tcorsWildcard.WithBooleanStatus(allowOrigin != \"*\")\n\t}\n\n\thstsMissing.WithBooleanStatus(attempt.Response.GetHeader().Get(HSTSHTTPHeader) != \"\")\n\tcontentOptionsMissing.WithBooleanStatus(attempt.Response.GetHeader().Get(XContentTypeOptionsHTTPHeader) != \"\")\n\tframeOptionsMissing.WithBooleanStatus(attempt.Response.GetHeader().Get(XFrameOptionsHTTPHeader) != \"\")\n\n\tattempt.WithBooleanStatus(!r.HasFailedIssueReport())\n\treturn r.End(), nil\n}\n" }, { "path": "scan/misconfiguration/http_headers/http_headers_test.go", "content": "package httpheaders_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\thttpheaders \"github.com/cerberauth/vulnapi/scan/misconfiguration/http_headers\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc getValidHTTPHeaders(_ *operation.Operation) http.Header {\n\theader := http.Header{}\n\theader.Add(httpheaders.CSPHTTPHeader, \"frame-ancestors 'none'\")\n\theader.Add(httpheaders.CORSOriginHTTPHeader, \"http://localhost:8080\")\n\theader.Add(httpheaders.HSTSHTTPHeader, \"max-age=63072000; includeSubDomains; preload\")\n\theader.Add(httpheaders.XContentTypeOptionsHTTPHeader, \"nosniff\")\n\theader.Add(httpheaders.XFrameOptionsHTTPHeader, \"DENY\")\n\n\treturn header\n}\n\nfunc TestHTTPHeadersScanHandler_Passed(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil).HeaderAdd(getValidHTTPHeaders(operation)))\n\n\treport, err := httpheaders.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 7, len(report.Issues))\n\tassert.False(t, report.HasFailedIssueReport())\n\tassert.True(t, report.Issues[0].HasPassed())\n\tassert.True(t, report.Issues[2].HasPassed())\n\tassert.True(t, report.Issues[3].HasPassed())\n\tassert.True(t, report.Issues[4].HasPassed())\n\tassert.True(t, report.Issues[5].HasPassed())\n\tassert.True(t, report.Issues[6].HasPassed())\n}\n\nfunc TestHTTPHeadersBestPracticesWithoutCSPScanHandler(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\theader := getValidHTTPHeaders(operation)\n\theader.Del(httpheaders.CSPHTTPHeader)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil).HeaderAdd(header))\n\n\treport, err := httpheaders.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPHeadersBestPracticesWithoutFrameAncestorsCSPDirectiveScanHandler(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\theader := getValidHTTPHeaders(operation)\n\theader.Set(httpheaders.CSPHTTPHeader, \"default-src 'self' http://example.com; connect-src 'none'\")\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil).HeaderAdd(header))\n\n\treport, err := httpheaders.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPHeadersBestPracticesWithNotNoneFrameAncestorsCSPDirectiveScanHandler(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\theader := getValidHTTPHeaders(operation)\n\theader.Set(httpheaders.CSPHTTPHeader, \"default-src 'self' http://example.com; connect-src 'none'; frame-ancestors 'http://example.com'\")\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil).HeaderAdd(header))\n\n\treport, err := httpheaders.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPHeadersBestPracticesWithoutCORSScanHandler(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\theader := getValidHTTPHeaders(operation)\n\theader.Del(httpheaders.CORSOriginHTTPHeader)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil).HeaderAdd(header))\n\n\treport, err := httpheaders.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPHeadersBestPracticesWithPermissiveCORSScanHandler(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\theader := getValidHTTPHeaders(operation)\n\theader.Set(httpheaders.CORSOriginHTTPHeader, \"*\")\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil).HeaderAdd(header))\n\n\treport, err := httpheaders.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPHeadersBestPracticesWithoutHSTSScanHandler(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\theader := getValidHTTPHeaders(operation)\n\theader.Del(httpheaders.HSTSHTTPHeader)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil).HeaderAdd(header))\n\n\treport, err := httpheaders.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPHeadersBestPracticesWithoutXContentTypeOptionsScanHandler(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\theader := getValidHTTPHeaders(operation)\n\theader.Del(httpheaders.XContentTypeOptionsHTTPHeader)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil).HeaderAdd(header))\n\n\treport, err := httpheaders.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.HasFailedIssueReport())\n}\n\nfunc TestHTTPHeadersBestPracticesWithoutXFrameOptionsScanHandler(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken := \"token\"\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\theader := getValidHTTPHeaders(operation)\n\theader.Del(httpheaders.XFrameOptionsHTTPHeader)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil).HeaderAdd(header))\n\n\treport, err := httpheaders.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.HasFailedIssueReport())\n}\n" }, { "path": "scan/misconfiguration/http_method_override/http_method_override.go", "content": "package httpmethodoverride\n\nimport (\n\t\"net/http\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tHTTPMethodOverrideScanID = \"misconfiguration.http_method_override\"\n\tHTTPMethodOverrideScanName = \"HTTP Method Override Misconfiguration\"\n)\n\nvar httpMethodOverrideIssue = report.Issue{\n\tID: \"security_misconfiguration.http_method_allow_override\",\n\tName: \"Possible HTTP Method Override detected\",\n\tURL: \"https://www.cerberauth.com/docs/vulnapi/vulnerabilities/security-misconfiguration/http-method-allow-override?utm_source=vulnapi-report\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_16_Configuration,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nvar httpMethodOverrideAuthenticationByPassIssue = report.Issue{\n\tID: \"security_misconfiguration.http_method_override_authentication_bypass\",\n\tName: \"Possible HTTP Method Override with authentication bypass detected\",\n\tURL: \"https://www.cerberauth.com/docs/vulnapi/vulnerabilities/security-misconfiguration/http-method-allow-override?utm_source=vulnapi-report\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_287_Improper_Authentication,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 8.8,\n\t},\n}\n\nvar httpMethods = []string{\n\thttp.MethodGet,\n\thttp.MethodHead,\n\thttp.MethodPost,\n\thttp.MethodPut,\n\thttp.MethodPatch,\n\thttp.MethodDelete,\n}\n\nvar methodOverrideHeaders = []string{\n\t\"X-HTTP-Method-Override\",\n\t\"X-Http-Method-Override\",\n\t\"X-HTTP-Method\",\n\t\"X-Http-Method\",\n\t\"X-Method-Override\",\n}\n\nvar methodOverrideQueryParams = []string{\n\t\"_method\",\n\t\"method\",\n\t\"httpMethod\",\n\t\"_httpMethod\",\n}\n\nfunc ScanHandler(op *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvar err error\n\tvar newOperation *operation.Operation\n\n\thttpMethodOverrideIssueReport := report.NewIssueReport(httpMethodOverrideIssue).WithOperation(op).WithSecurityScheme(securityScheme)\n\thttpMethodOverrideAuthenticationByPassIssueReport := report.NewIssueReport(httpMethodOverrideAuthenticationByPassIssue).WithOperation(op).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(HTTPMethodOverrideScanID, HTTPMethodOverrideScanName, op)\n\tr.AddIssueReport(httpMethodOverrideIssueReport)\n\tr.AddIssueReport(httpMethodOverrideAuthenticationByPassIssueReport)\n\n\tnewOperation, err = op.Clone()\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tinitialAttempt, err := scan.ScanURL(newOperation, securityScheme)\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tr.AddScanAttempt(initialAttempt)\n\thttpMethodOverrideAuthenticationByPassIssueReport.AddScanAttempt(initialAttempt)\n\thttpMethodOverrideIssueReport.AddScanAttempt(initialAttempt)\n\n\tif initialAttempt.Response.GetStatusCode() == http.StatusMethodNotAllowed {\n\t\thttpMethodOverrideIssueReport.Skip()\n\t\thttpMethodOverrideAuthenticationByPassIssueReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\tvar methodAttempt *scan.IssueScanAttempt\n\tfor _, method := range httpMethods {\n\t\tif method == op.Method {\n\t\t\tcontinue\n\t\t}\n\n\t\tnewOperation, err = op.Clone()\n\t\tif err != nil {\n\t\t\treturn r.End(), err\n\t\t}\n\n\t\tnewOperation.Method = method\n\t\tmethodAttempt, err = scan.ScanURL(newOperation, securityScheme)\n\t\tr.AddScanAttempt(methodAttempt)\n\t\thttpMethodOverrideIssueReport.AddScanAttempt(methodAttempt)\n\t\thttpMethodOverrideAuthenticationByPassIssueReport.AddScanAttempt(methodAttempt)\n\t\tif err == nil && methodAttempt != nil && methodAttempt.Response.GetStatusCode() == http.StatusMethodNotAllowed {\n\t\t\tmethodAttempt.Pass()\n\t\t\tbreak\n\t\t}\n\t}\n\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\n\tif methodAttempt.Response.GetStatusCode() == initialAttempt.Response.GetStatusCode() {\n\t\thttpMethodOverrideIssueReport.Pass()\n\t\thttpMethodOverrideAuthenticationByPassIssueReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\tvar attemptFailed = false\n\tvar attempt *scan.IssueScanAttempt\n\tnewOperationMethod := methodAttempt.Request.GetMethod()\n\tfor _, header := range methodOverrideHeaders {\n\t\tnewOperation, err = op.Clone()\n\t\tif err != nil {\n\t\t\treturn r.End(), err\n\t\t}\n\n\t\tnewOperation.Header.Set(header, op.Method)\n\t\tnewOperation.Method = newOperationMethod\n\t\tattempt, err = scan.ScanURL(newOperation, securityScheme)\n\t\tr.AddScanAttempt(attempt)\n\t\thttpMethodOverrideIssueReport.AddScanAttempt(attempt)\n\t\thttpMethodOverrideAuthenticationByPassIssueReport.AddScanAttempt(attempt)\n\n\t\tif err == nil && attempt.Response.GetStatusCode() == initialAttempt.Response.GetStatusCode() {\n\t\t\tattempt.Fail()\n\t\t\tattemptFailed = true\n\t\t\tbreak\n\t\t}\n\t}\n\n\tif !attemptFailed {\n\t\tfor _, queryParam := range methodOverrideQueryParams {\n\t\t\tnewOperation, err = op.Clone()\n\t\t\tif err != nil {\n\t\t\t\treturn r.End(), err\n\t\t\t}\n\n\t\t\tnewOperationQueryValues := newOperation.URL.Query()\n\t\t\tnewOperationQueryValues.Set(queryParam, op.Method)\n\t\t\tnewOperation.URL.RawQuery = newOperationQueryValues.Encode()\n\t\t\tnewOperation.Method = newOperationMethod\n\t\t\tattempt, err = scan.ScanURL(newOperation, securityScheme)\n\t\t\tr.AddScanAttempt(attempt)\n\t\t\thttpMethodOverrideIssueReport.AddScanAttempt(attempt)\n\t\t\thttpMethodOverrideAuthenticationByPassIssueReport.AddScanAttempt(attempt)\n\n\t\t\tif err == nil && attempt.Response.GetStatusCode() == initialAttempt.Response.GetStatusCode() {\n\t\t\t\tattempt.Fail()\n\t\t\t\tattemptFailed = true\n\t\t\t\tbreak\n\t\t\t}\n\t\t}\n\t}\n\n\tif !attemptFailed {\n\t\thttpMethodOverrideIssueReport.Pass()\n\t\thttpMethodOverrideAuthenticationByPassIssueReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\thttpMethodOverrideIssueReport.Fail()\n\tif securityScheme.GetType() == auth.None {\n\t\thttpMethodOverrideAuthenticationByPassIssueReport.Skip()\n\t\treturn r.End(), nil\n\t}\n\n\tattempt, err = scan.ScanURL(newOperation, auth.MustNewNoAuthSecurityScheme())\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tattempt.WithBooleanStatus(scan.IsUnauthorizedStatusCodeOrSimilar(attempt.Response))\n\tr.AddScanAttempt(attempt)\n\thttpMethodOverrideAuthenticationByPassIssueReport.WithBooleanStatus(attempt.HasPassed()).WithScanAttempt(attempt)\n\n\treturn r.End(), nil\n}\n" }, { "path": "scan/misconfiguration/http_method_override/http_method_override_test.go", "content": "package httpmethodoverride_test\n\nimport (\n\t\"net/http\"\n\t\"net/url\"\n\t\"testing\"\n\n\tjwtop \"github.com/cerberauth/jwtop/jwt\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\thttpmethodoverride \"github.com/cerberauth/vulnapi/scan/misconfiguration/http_method_override\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestHTTPMethodOverrideScanHandler(t *testing.T) {\n\tvalue, err := jwtop.CreateWithSecret(jwtop.CreateOptions{Algorithm: \"HS256\"}, []byte(\"\"))\n\trequire.NoError(t, err)\n\ttests := []struct {\n\t\tname string\n\t\toperation *operation.Operation\n\t\tsecurityScheme *auth.SecurityScheme\n\t}{\n\t\t{\n\t\t\tname: \"MethodNotAllowed\",\n\t\t\toperation: operation.MustNewOperation(http.MethodGet, \"http://example.com\", nil, nil),\n\t\t\tsecurityScheme: auth.MustNewNoAuthSecurityScheme(),\n\t\t},\n\t\t{\n\t\t\tname: \"MethodOverrideDetected\",\n\t\t\toperation: operation.MustNewOperation(http.MethodPost, \"http://example.com/test\", nil, nil),\n\t\t\tsecurityScheme: auth.MustNewNoAuthSecurityScheme(),\n\t\t},\n\t\t{\n\t\t\tname: \"AuthenticationBypassDetected\",\n\t\t\toperation: operation.MustNewOperation(http.MethodPost, \"http://example.com/test\", nil, nil),\n\t\t\tsecurityScheme: auth.MustNewAuthorizationBearerSecurityScheme(\"securityScheme\", &value),\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tgot, err := httpmethodoverride.ScanHandler(tt.operation, tt.securityScheme)\n\t\t\tif err != nil {\n\t\t\t\tt.Errorf(\"ScanHandler() error = %v\", err)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif got == nil {\n\t\t\t\tt.Errorf(\"ScanHandler() got = nil, want non-nil\")\n\t\t\t}\n\t\t})\n\t}\n}\n\nfunc TestHTTPMethodOverrideScanHandler_When_Error(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\n\tr, err := httpmethodoverride.ScanHandler(operation, securityScheme)\n\n\trequire.Error(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 2, len(r.Issues))\n\tassert.False(t, r.HasFailedIssueReport())\n\tassert.Equal(t, r.Issues[0].Status, report.IssueReportStatusNone)\n\tassert.Equal(t, r.Issues[1].Status, report.IssueReportStatusNone)\n}\n\nfunc TestHTTPMethodOverrideScanHandler_Passed(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodHead, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodPost, operation.URL.String(), httpmock.NewBytesResponder(http.StatusMethodNotAllowed, nil))\n\n\treport, err := httpmethodoverride.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 12, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 2, len(report.Issues))\n\tassert.False(t, report.HasFailedIssueReport())\n\tassert.True(t, report.Issues[0].HasPassed())\n\tassert.True(t, report.Issues[1].HasBeenSkipped())\n}\n\nfunc TestHTTPMethodOverrideScanHandler_Failed_With_Header(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodHead, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodPost, operation.URL.String(), func(req *http.Request) (*http.Response, error) {\n\t\tif req.Header.Get(\"X-HTTP-Method-Override\") == http.MethodGet {\n\t\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t\t}\n\t\treturn httpmock.NewJsonResponse(http.StatusMethodNotAllowed, nil)\n\t})\n\n\treport, err := httpmethodoverride.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 4, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 2, len(report.Issues))\n\tassert.True(t, report.HasFailedIssueReport())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.True(t, report.Issues[1].HasBeenSkipped())\n}\n\nfunc TestHTTPMethodOverrideScanHandler_Failed_With_Query_Parameter(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\tsecurityScheme := auth.MustNewNoAuthSecurityScheme()\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodHead, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodPost, operation.URL.String(), httpmock.NewBytesResponder(http.StatusMethodNotAllowed, nil))\n\n\turlWithOverrideQuery, _ := url.Parse(operation.URL.String())\n\tnewQueryValues := urlWithOverrideQuery.Query()\n\tnewQueryValues.Set(\"_method\", http.MethodGet)\n\turlWithOverrideQuery.RawQuery = newQueryValues.Encode()\n\thttpmock.RegisterResponder(http.MethodPost, urlWithOverrideQuery.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\n\treport, err := httpmethodoverride.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 9, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 2, len(report.Issues))\n\tassert.True(t, report.HasFailedIssueReport())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.True(t, report.Issues[1].HasBeenSkipped())\n}\n\nfunc TestHTTPMethodOverrideScanHandler_Authentication_ByPass_Passed(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken, err := jwtop.CreateWithSecret(jwtop.CreateOptions{Algorithm: \"HS256\"}, []byte(\"\"))\n\trequire.NoError(t, err)\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"securityScheme\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodHead, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodPost, operation.URL.String(), func(req *http.Request) (*http.Response, error) {\n\t\tif req.Header.Get(\"X-HTTP-Method-Override\") == http.MethodGet && req.Header.Get(\"Authorization\") == \"Bearer \"+string(token) {\n\t\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t\t}\n\t\tif req.Header.Get(\"X-HTTP-Method-Override\") == http.MethodGet && req.Header.Get(\"Authorization\") == \"\" {\n\t\t\treturn httpmock.NewJsonResponse(http.StatusUnauthorized, nil)\n\t\t}\n\t\treturn httpmock.NewJsonResponse(http.StatusMethodNotAllowed, nil)\n\t})\n\n\treport, err := httpmethodoverride.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 5, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 2, len(report.Issues))\n\tassert.True(t, report.HasFailedIssueReport())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.True(t, report.Issues[1].HasPassed())\n}\n\nfunc TestHTTPMethodOverrideScanHandler_Authentication_ByPass_Failed(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\ttoken, err := jwtop.CreateWithSecret(jwtop.CreateOptions{Algorithm: \"HS256\"}, []byte(\"\"))\n\trequire.NoError(t, err)\n\tsecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"securityScheme\", &token)\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(operation.Method, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodHead, operation.URL.String(), httpmock.NewBytesResponder(http.StatusNoContent, nil))\n\thttpmock.RegisterResponder(http.MethodPost, operation.URL.String(), func(req *http.Request) (*http.Response, error) {\n\t\tif req.Header.Get(\"X-HTTP-Method-Override\") == http.MethodGet {\n\t\t\treturn httpmock.NewBytesResponse(http.StatusNoContent, nil), nil\n\t\t}\n\t\treturn httpmock.NewJsonResponse(http.StatusMethodNotAllowed, nil)\n\t})\n\n\treport, err := httpmethodoverride.ScanHandler(operation, securityScheme)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 5, httpmock.GetTotalCallCount())\n\tassert.Equal(t, 2, len(report.Issues))\n\tassert.True(t, report.HasFailedIssueReport())\n\tassert.True(t, report.Issues[0].HasFailed())\n\tassert.True(t, report.Issues[1].HasFailed())\n}\n" }, { "path": "scan/misconfiguration/http_trace/http_trace_method.go", "content": "package httptrace\n\nimport (\n\t\"net/http\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tHTTPTraceScanID = \"misconfiguration.http_trace\"\n\tHTTPTraceScanName = \"HTTP TRACE Method Misconfiguration\"\n)\n\nvar issue = report.Issue{\n\tID: \"security_misconfiguration.http_trace_method_enabled\",\n\tName: \"HTTP TRACE Method enabled\",\n\tURL: \"https://developer.mozilla.org/en-US/docs/Web/HTTP/Methods/TRACE\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_489_Active_Debug_Code,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nfunc ScanHandler(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(operation).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(HTTPTraceScanID, HTTPTraceScanName, operation)\n\tr.AddIssueReport(vulnReport)\n\n\tnewOperation, err := operation.Clone()\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tnewOperation.Method = http.MethodTrace\n\n\tattempt, err := scan.ScanURL(newOperation, securityScheme)\n\tattempt.WithBooleanStatus(err != nil || attempt.Response.GetStatusCode() != http.StatusOK)\n\tr.AddScanAttempt(attempt)\n\tvulnReport.WithBooleanStatus(attempt.HasPassed()).WithScanAttempt(attempt)\n\n\treturn r.End(), nil\n}\n" }, { "path": "scan/misconfiguration/http_trace/http_trace_method_test.go", "content": "package httptrace_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\thttptrace \"github.com/cerberauth/vulnapi/scan/misconfiguration/http_trace\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestHTTPTraceMethodScanHandler_Passed_WhenNotOKResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(http.MethodTrace, operation.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := httptrace.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestHTTPTraceMethodScanHandler_Failed_WhenTraceIsEnabled(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\toperation := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(http.MethodTrace, operation.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\n\treport, err := httptrace.ScanHandler(operation, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/misconfiguration/http_track/http_track_method.go", "content": "package httptrack\n\nimport (\n\t\"net/http\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/scan\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\nconst (\n\tHTTPTrackScanID = \"misconfiguration.http_track\"\n\tHTTPTrackScanName = \"HTTP TRACK Method Misconfiguration\"\n)\n\nvar issue = report.Issue{\n\tID: \"security_misconfiguration.http_track_method_enabled\",\n\tName: \"HTTP TRACK Method enabled\",\n\tURL: \"https://techcommunity.microsoft.com/t5/iis-support-blog/http-track-and-trace-verbs/ba-p/784482\",\n\n\tClassifications: &report.Classifications{\n\t\tOWASP: report.OWASP_2023_SecurityMisconfiguration,\n\t\tCWE: report.CWE_489_Active_Debug_Code,\n\t},\n\n\tCVSS: report.CVSS{\n\t\tVersion: 4.0,\n\t\tVector: \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N\",\n\t\tScore: 0,\n\t},\n}\n\nconst TrackMethod = \"TRACK\"\n\nfunc ScanHandler(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\tvulnReport := report.NewIssueReport(issue).WithOperation(operation).WithSecurityScheme(securityScheme)\n\tr := report.NewScanReport(HTTPTrackScanID, HTTPTrackScanName, operation)\n\tr.AddIssueReport(vulnReport)\n\n\tnewOperation, err := operation.Clone()\n\tif err != nil {\n\t\treturn r.End(), err\n\t}\n\tnewOperation.Method = TrackMethod\n\n\tattempt, err := scan.ScanURL(newOperation, securityScheme)\n\tattempt.WithBooleanStatus(err != nil || attempt.Response.GetStatusCode() != http.StatusOK)\n\tr.AddScanAttempt(attempt)\n\tvulnReport.WithBooleanStatus(attempt.HasPassed()).WithScanAttempt(attempt)\n\n\treturn r.End(), nil\n}\n" }, { "path": "scan/misconfiguration/http_track/http_track_method_test.go", "content": "package httptrack_test\n\nimport (\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\thttptrack \"github.com/cerberauth/vulnapi/scan/misconfiguration/http_track\"\n\t\"github.com/jarcoal/httpmock\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestHTTPTrackMethodScanHandler_Passed_WhenNotOKResponse(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(httptrack.TrackMethod, op.URL.String(), httpmock.NewBytesResponder(http.StatusUnauthorized, nil))\n\n\treport, err := httptrack.ScanHandler(op, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasPassed())\n}\n\nfunc TestHTTPTrackMethodScanHandler_Failed_WhenTrackIsEnabled(t *testing.T) {\n\tclient := request.GetDefaultClient()\n\thttpmock.ActivateNonDefault(client.Client)\n\tdefer httpmock.DeactivateAndReset()\n\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, client)\n\thttpmock.RegisterResponder(httptrack.TrackMethod, op.URL.String(), httpmock.NewBytesResponder(http.StatusOK, nil))\n\n\treport, err := httptrack.ScanHandler(op, auth.MustNewNoAuthSecurityScheme())\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, httpmock.GetTotalCallCount())\n\tassert.True(t, report.Issues[0].HasFailed())\n}\n" }, { "path": "scan/operation_scan.go", "content": "package scan\n\nimport (\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n)\n\ntype OperationScanHandlerFunc func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error)\n\ntype OperationScanHandler struct {\n\tID string\n\tHandler OperationScanHandlerFunc\n}\n\ntype OperationScan struct {\n\tOperation *operation.Operation\n\tScanHandler *OperationScanHandler\n}\n\nfunc NewOperationScanHandler(id string, handler OperationScanHandlerFunc) *OperationScanHandler {\n\treturn &OperationScanHandler{\n\t\tID: id,\n\t\tHandler: handler,\n\t}\n}\n" }, { "path": "scan/operation_scan_test.go", "content": "package scan_test\n\nimport (\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewOperationScanHandler(t *testing.T) {\n\thandlerFunc := func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\t\treturn &report.ScanReport{ID: \"test-report\"}, nil\n\t}\n\thandlerID := \"test-handler\"\n\n\thandler := scan.NewOperationScanHandler(handlerID, handlerFunc)\n\n\tassert.NotNil(t, handler)\n\tassert.Equal(t, handlerID, handler.ID)\n\tassert.NotNil(t, handler.Handler)\n}\n" }, { "path": "scan/scan.go", "content": "package scan\n\nimport (\n\t\"context\"\n\t\"fmt\"\n\t\"regexp\"\n\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/x/telemetryx\"\n\t\"go.opentelemetry.io/otel/attribute\"\n\t\"go.opentelemetry.io/otel/metric\"\n)\n\ntype ScanOptions struct {\n\tIncludeScans []string\n\tExcludeScans []string\n\tReporter *report.Reporter\n}\n\ntype Scan struct {\n\t*ScanOptions\n\n\tOperations operation.Operations\n\tOperationsScans []OperationScan\n\n\ttelemetryScanHandlerCounter metric.Int64Counter\n\ttelemetryOperationScanHandler metric.Int64Counter\n}\n\nconst (\n\totelName = \"github.com/cerberauth/vulnapi/scan\"\n\n\totelScanIncludeScansAttribute = attribute.Key(\"include_scans\")\n\totelScanExcludeScansAttribute = attribute.Key(\"exclude_scans\")\n\totelScanHandlerIdAttribute = attribute.Key(\"id\")\n)\n\nfunc NewScan(operations operation.Operations, opts *ScanOptions) (*Scan, error) {\n\tif len(operations) == 0 {\n\t\treturn nil, fmt.Errorf(\"a scan must have at least one operation\")\n\t}\n\n\tif opts == nil {\n\t\topts = &ScanOptions{}\n\t}\n\n\tif opts.Reporter == nil {\n\t\topts.Reporter = report.NewReporter()\n\t}\n\n\ttelemetryMeter := telemetryx.GetMeterProvider().Meter(otelName)\n\ttelemetryScanCounter, _ := telemetryMeter.Int64Counter(\"scan.counter\")\n\ttelemetryScanHandlerCounter, _ := telemetryMeter.Int64Counter(\"scan.scan_handler.counter\")\n\ttelemetryOperationScanHandlerCounter, _ := telemetryMeter.Int64Counter(\"scan.operation_scan_handler.counter\")\n\ttelemetryScanCounter.Add(context.Background(), 1, metric.WithAttributes(\n\t\totelScanIncludeScansAttribute.StringSlice(opts.IncludeScans),\n\t\totelScanExcludeScansAttribute.StringSlice(opts.ExcludeScans),\n\t))\n\n\treturn &Scan{\n\t\tScanOptions: opts,\n\n\t\tOperations: operations,\n\t\tOperationsScans: []OperationScan{},\n\n\t\ttelemetryScanHandlerCounter: telemetryScanHandlerCounter,\n\t\ttelemetryOperationScanHandler: telemetryOperationScanHandlerCounter,\n\t}, nil\n}\n\nfunc (s *Scan) GetOperationsScans() []OperationScan {\n\treturn s.OperationsScans\n}\n\nfunc (s *Scan) AddOperationScanHandler(handler *OperationScanHandler) *Scan {\n\tif !s.shouldAddScan(handler.ID) {\n\t\treturn s\n\t}\n\n\tfor _, operation := range s.Operations {\n\t\ts.OperationsScans = append(s.OperationsScans, OperationScan{\n\t\t\tOperation: operation,\n\t\t\tScanHandler: handler,\n\t\t})\n\t}\n\n\ts.telemetryOperationScanHandler.Add(context.Background(), int64(len(s.Operations)), metric.WithAttributes(\n\t\totelScanHandlerIdAttribute.String(handler.ID),\n\t))\n\n\treturn s\n}\n\nfunc (s *Scan) AddScanHandler(handler *OperationScanHandler) *Scan {\n\tif !s.shouldAddScan(handler.ID) {\n\t\treturn s\n\t}\n\n\ts.OperationsScans = append(s.OperationsScans, OperationScan{\n\t\tOperation: s.Operations[0],\n\t\tScanHandler: handler,\n\t})\n\n\ts.telemetryOperationScanHandler.Add(context.Background(), 1, metric.WithAttributes(\n\t\totelScanHandlerIdAttribute.String(handler.ID),\n\t))\n\n\treturn s\n}\n\nfunc (s *Scan) Execute(ctx context.Context, scanCallback func(operationScan *OperationScan)) (*report.Reporter, []error, error) {\n\tif scanCallback == nil {\n\t\tscanCallback = func(operationScan *OperationScan) {}\n\t}\n\n\tvar errors []error\n\tfor _, scan := range s.OperationsScans {\n\t\tif scan.ScanHandler == nil {\n\t\t\tcontinue\n\t\t}\n\n\t\tsecurityScheme := scan.Operation.GetSecurityScheme() // TODO: handle multiple security schemes\n\t\treport, err := scan.ScanHandler.Handler(scan.Operation, securityScheme)\n\t\tif err != nil {\n\t\t\terrors = append(errors, err)\n\t\t}\n\n\t\tif report != nil {\n\t\t\ts.Reporter.AddReport(report)\n\t\t}\n\n\t\tscanCallback(&scan)\n\t}\n\n\treturn s.Reporter, errors, nil\n}\n\nfunc (s *Scan) shouldAddScan(scanID string) bool {\n\t// Check if the scan should be excluded\n\tif len(s.ExcludeScans) > 0 && contains(s.ExcludeScans, scanID) {\n\t\treturn false\n\t}\n\n\t// Check if the scan should be included\n\tif len(s.IncludeScans) > 0 && !contains(s.IncludeScans, scanID) {\n\t\treturn false\n\t}\n\n\treturn true\n}\n\nfunc contains(slice []string, item string) bool {\n\tfor _, s := range slice {\n\t\tif s == item {\n\t\t\treturn true\n\t\t}\n\n\t\tmatch, _ := regexp.MatchString(s, item)\n\t\tif match {\n\t\t\treturn true\n\t\t}\n\t}\n\treturn false\n}\n" }, { "path": "scan/scan_test.go", "content": "package scan_test\n\nimport (\n\t\"context\"\n\t\"net/http\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestNewScanWithNoOperations(t *testing.T) {\n\t_, err := scan.NewScan(operation.Operations{}, nil)\n\n\trequire.Error(t, err)\n}\n\nfunc TestNewScan(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\texpected := scan.Scan{\n\t\tScanOptions: &scan.ScanOptions{\n\t\t\tReporter: report.NewReporter(),\n\t\t},\n\n\t\tOperations: operations,\n\t\tOperationsScans: []scan.OperationScan{},\n\t}\n\n\ts, err := scan.NewScan(operations, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, expected.Operations, s.Operations)\n\tassert.Equal(t, expected.Reporter, s.Reporter)\n\tassert.Equal(t, expected.OperationsScans, s.OperationsScans)\n}\n\nfunc TestNewScanWithOptions(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\topts := &scan.ScanOptions{\n\t\tReporter: report.NewReporter(),\n\t}\n\texpected := scan.Scan{\n\t\tScanOptions: opts,\n\n\t\tOperations: operations,\n\t\tOperationsScans: []scan.OperationScan{},\n\t}\n\n\ts, err := scan.NewScan(operations, opts)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, expected.Operations, s.Operations)\n\tassert.Equal(t, expected.Reporter, s.Reporter)\n\tassert.Equal(t, expected.OperationsScans, s.OperationsScans)\n}\n\nfunc TestScanGetOperationsScansWhenEmpty(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, nil)\n\n\toperationsScans := s.GetOperationsScans()\n\n\tassert.Equal(t, s.OperationsScans, operationsScans)\n}\n\nfunc TestScanGetOperationsScans(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, nil)\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(\"test-handler\", func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\t\treturn nil, nil\n\t}))\n\n\toperationsScans := s.GetOperationsScans()\n\n\tassert.Equal(t, 1, len(operationsScans))\n}\n\nfunc TestScanExecuteWithNoHandlers(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, nil)\n\n\treporter, errors, err := s.Execute(context.TODO(), nil)\n\n\trequire.NoError(t, err)\n\tassert.Empty(t, errors)\n\tassert.Equal(t, 0, len(reporter.GetScanReports()))\n}\n\nfunc TestScanExecuteWithHandler(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, nil)\n\thandler := scan.NewOperationScanHandler(\"test-handler\", func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\t\treturn &report.ScanReport{ID: \"test-report\"}, nil\n\t})\n\ts.AddOperationScanHandler(handler)\n\n\treporter, errors, err := s.Execute(context.TODO(), nil)\n\n\trequire.NoError(t, err)\n\tassert.Empty(t, errors)\n\tassert.Equal(t, 1, len(reporter.GetScanReports()))\n\tassert.Equal(t, \"test-report\", reporter.GetScanReports()[0].ID)\n}\n\nfunc TestScanExecuteWithIncludeScans(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, &scan.ScanOptions{\n\t\tIncludeScans: []string{\"test-handler\"},\n\t})\n\thandler := scan.NewOperationScanHandler(\"test-handler\", func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\t\treturn &report.ScanReport{ID: \"test-report\"}, nil\n\t})\n\ts.AddOperationScanHandler(handler)\n\n\treporter, errors, err := s.Execute(context.TODO(), nil)\n\n\trequire.NoError(t, err)\n\tassert.Empty(t, errors)\n\tassert.Equal(t, 1, len(reporter.GetScanReports()))\n\tassert.Equal(t, \"test-report\", reporter.GetScanReports()[0].ID)\n}\n\nfunc TestScanExecuteWithEmptyStringIncludeScans(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, &scan.ScanOptions{\n\t\tIncludeScans: []string{\"\"},\n\t})\n\thandler := scan.NewOperationScanHandler(\"test-handler\", func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\t\treturn &report.ScanReport{ID: \"test-report\"}, nil\n\t})\n\ts.AddOperationScanHandler(handler)\n\n\treporter, errors, err := s.Execute(context.TODO(), nil)\n\n\trequire.NoError(t, err)\n\tassert.Empty(t, errors)\n\tassert.Equal(t, 1, len(reporter.GetScanReports()))\n\tassert.Equal(t, \"test-report\", reporter.GetScanReports()[0].ID)\n}\n\nfunc TestScanExecuteWithMatchStringIncludeScans(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, &scan.ScanOptions{\n\t\tIncludeScans: []string{\"category.*\"},\n\t})\n\thandler := scan.NewOperationScanHandler(\"category.test-handler\", func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\t\treturn &report.ScanReport{ID: \"test-report\"}, nil\n\t})\n\ts.AddOperationScanHandler(handler)\n\n\treporter, errors, err := s.Execute(context.TODO(), nil)\n\n\trequire.NoError(t, err)\n\tassert.Empty(t, errors)\n\tassert.Equal(t, 1, len(reporter.GetScanReports()))\n\tassert.Equal(t, \"test-report\", reporter.GetScanReports()[0].ID)\n}\n\nfunc TestScanExecuteWithWrongMatchStringIncludeScans(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, &scan.ScanOptions{\n\t\tIncludeScans: []string{\"wrong-category.*\"},\n\t})\n\thandler := scan.NewOperationScanHandler(\"category.test-handler\", func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\t\treturn &report.ScanReport{ID: \"test-report\"}, nil\n\t})\n\ts.AddOperationScanHandler(handler)\n\n\treporter, errors, err := s.Execute(context.TODO(), nil)\n\n\trequire.NoError(t, err)\n\tassert.Empty(t, errors)\n\tassert.Equal(t, 0, len(reporter.GetScanReports()))\n}\n\nfunc TestScanExecuteWithExcludeScans(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, &scan.ScanOptions{\n\t\tExcludeScans: []string{\"test-handler\"},\n\t})\n\thandler := scan.NewOperationScanHandler(\"test-handler\", func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\t\treturn &report.ScanReport{ID: \"test-report\"}, nil\n\t})\n\ts.AddOperationScanHandler(handler)\n\n\treporter, errors, err := s.Execute(context.TODO(), nil)\n\n\trequire.NoError(t, err)\n\tassert.Empty(t, errors)\n\tassert.Equal(t, 0, len(reporter.GetScanReports()))\n}\n\nfunc TestScanExecuteWithMatchStringExcludeScans(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, &scan.ScanOptions{\n\t\tExcludeScans: []string{\"category.*\"},\n\t})\n\thandler := scan.NewOperationScanHandler(\"category.test-handler\", func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\t\treturn &report.ScanReport{ID: \"test-report\"}, nil\n\t})\n\ts.AddOperationScanHandler(handler)\n\n\treporter, errors, err := s.Execute(context.TODO(), nil)\n\n\trequire.NoError(t, err)\n\tassert.Empty(t, errors)\n\tassert.Equal(t, 0, len(reporter.GetScanReports()))\n}\n\nfunc TestScanExecuteWithWrongMatchStringExcludeScans(t *testing.T) {\n\top := operation.MustNewOperation(http.MethodGet, \"http://localhost:8080/\", nil, nil)\n\toperations := operation.Operations{op}\n\ts, _ := scan.NewScan(operations, &scan.ScanOptions{\n\t\tExcludeScans: []string{\"wrong-category.*\"},\n\t})\n\thandler := scan.NewOperationScanHandler(\"category.test-handler\", func(operation *operation.Operation, securityScheme *auth.SecurityScheme) (*report.ScanReport, error) {\n\t\treturn &report.ScanReport{ID: \"test-report\"}, nil\n\t})\n\ts.AddOperationScanHandler(handler)\n\n\treporter, errors, err := s.Execute(context.TODO(), nil)\n\n\trequire.NoError(t, err)\n\tassert.Empty(t, errors)\n\tassert.Equal(t, 1, len(reporter.GetScanReports()))\n\tassert.Equal(t, \"test-report\", reporter.GetScanReports()[0].ID)\n}\n" }, { "path": "scenario/discover_api.go", "content": "package scenario\n\nimport (\n\t\"errors\"\n\t\"net/url\"\n\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\tdiscoverablegraphql \"github.com/cerberauth/vulnapi/scan/discover/discoverable_graphql\"\n\tdiscoverableopenapi \"github.com/cerberauth/vulnapi/scan/discover/discoverable_openapi\"\n\texposedfiles \"github.com/cerberauth/vulnapi/scan/discover/exposed_files\"\n\t\"github.com/cerberauth/vulnapi/scan/discover/fingerprint\"\n\t\"github.com/cerberauth/vulnapi/scan/discover/healthcheck\"\n\twellknown \"github.com/cerberauth/vulnapi/scan/discover/well-known\"\n)\n\nfunc NewDiscoverAPIScan(method string, u *url.URL, client *request.Client, opts *scan.ScanOptions) (*scan.Scan, error) {\n\tif u == nil {\n\t\treturn nil, errors.New(\"url is required\")\n\t}\n\n\tif client == nil {\n\t\tclient = request.GetDefaultClient()\n\t}\n\n\tu = addDefaultProtocolWhenMissing(u)\n\top, err := operation.NewOperation(method, u.String(), nil, client)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tif err := op.IsReachable(); err != nil {\n\t\treturn nil, err\n\t}\n\n\toperations := operation.Operations{op}\n\turlScan, err := scan.NewScan(operations, opts)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\turlScan.AddScanHandler(scan.NewOperationScanHandler(fingerprint.DiscoverFingerPrintScanID, fingerprint.ScanHandler))\n\turlScan.AddScanHandler(scan.NewOperationScanHandler(discoverableopenapi.DiscoverableOpenAPIScanID, discoverableopenapi.ScanHandler))\n\turlScan.AddScanHandler(scan.NewOperationScanHandler(discoverablegraphql.DiscoverableGraphQLPathScanID, discoverablegraphql.ScanHandler))\n\turlScan.AddScanHandler(scan.NewOperationScanHandler(exposedfiles.DiscoverableFilesScanID, exposedfiles.ScanHandler))\n\turlScan.AddScanHandler(scan.NewOperationScanHandler(wellknown.DiscoverableWellKnownScanID, wellknown.ScanHandler))\n\turlScan.AddScanHandler(scan.NewOperationScanHandler(healthcheck.DiscoverableHealthCheckScanID, healthcheck.ScanHandler))\n\n\treturn urlScan, nil\n}\n" }, { "path": "scenario/discover_api_test.go", "content": "package scenario_test\n\nimport (\n\t\"net/http\"\n\t\"net/http/httptest\"\n\t\"net/url\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestNewDiscoverScan(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\tu, _ := url.Parse(server.URL)\n\n\ts, err := scenario.NewDiscoverAPIScan(http.MethodGet, u, nil, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, server.URL, s.Operations[0].URL.String())\n\tassert.Equal(t, http.MethodGet, s.Operations[0].Method)\n}\n\nfunc TestNewDiscoverScanWithoutURLProto(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\tu, _ := url.Parse(server.URL)\n\tu.Scheme = \"\"\n\n\ts, err := scenario.NewDiscoverAPIScan(http.MethodGet, u, nil, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, \"http\", s.Operations[0].URL.Scheme)\n\tassert.Equal(t, http.MethodGet, s.Operations[0].Method)\n}\n\nfunc TestNewDiscoverScanWhenNotReachable(t *testing.T) {\n\tu, _ := url.Parse(\"http://localhost:8009\")\n\n\t_, err := scenario.NewDiscoverAPIScan(http.MethodGet, u, nil, nil)\n\n\trequire.Error(t, err)\n\tassert.Contains(t, err.Error(), \":8009: connect: connection refused\")\n}\n" }, { "path": "scenario/discover_domain.go", "content": "package scenario\n\nimport (\n\t\"errors\"\n\t\"net\"\n\t\"net/http\"\n\t\"sync\"\n\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\tdiscoverablegraphql \"github.com/cerberauth/vulnapi/scan/discover/discoverable_graphql\"\n\tdiscoverableopenapi \"github.com/cerberauth/vulnapi/scan/discover/discoverable_openapi\"\n\tfingerprint \"github.com/cerberauth/vulnapi/scan/discover/fingerprint\"\n)\n\nvar commonHostnames = []string{\"www\", \"api\", \"graphql\", \"graph\", \"app\", \"auth\", \"login\", \"oauth\", \"admin\", \"dashboard\", \"dev\", \"staging\", \"test\", \"stage\", \"prod\", \"production\", \"uat\", \"qa\", \"sandbox\", \"old\", \"demo\", \"blog\", \"forum\", \"community\", \"calendar\", \"contacts\", \"chat\", \"support\", \"help\", \"docs\"}\n\nfunc searchByCommonHostnames(domain string) []string {\n\tsubdomains := []string{}\n\tvar mu sync.Mutex\n\tvar wg sync.WaitGroup\n\n\tfor _, hostname := range commonHostnames {\n\t\twg.Add(1)\n\t\tgo func(hostname string) {\n\t\t\tdefer wg.Done()\n\t\t\tsubdomain := hostname + \".\" + domain\n\t\t\t_, err := net.LookupIP(subdomain)\n\t\t\tif err != nil {\n\t\t\t\treturn\n\t\t\t}\n\n\t\t\tmu.Lock()\n\t\t\tsubdomains = append(subdomains, subdomain)\n\t\t\tmu.Unlock()\n\t\t}(hostname)\n\t}\n\n\twg.Wait()\n\treturn subdomains\n}\n\nfunc searchByLookupIP(rootDomain string) ([]string, error) {\n\tsubdomains := []string{}\n\tvar mu sync.Mutex\n\tvar wg sync.WaitGroup\n\n\tips, err := net.LookupIP(rootDomain)\n\tif err != nil {\n\t\treturn subdomains, err\n\t}\n\n\tfor _, ip := range ips {\n\t\twg.Add(1)\n\t\tgo func(ip net.IP) {\n\t\t\tdefer wg.Done()\n\t\t\thosts, err := net.LookupAddr(ip.String())\n\t\t\tif err != nil {\n\t\t\t\treturn\n\t\t\t}\n\n\t\t\tfor _, host := range hosts {\n\t\t\t\tif len(host) == 0 {\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tsubdomain := host[:len(host)-1] // Remove the trailing dot\n\n\t\t\t\tmu.Lock()\n\t\t\t\tsubdomains = append(subdomains, subdomain)\n\t\t\t\tmu.Unlock()\n\t\t\t}\n\t\t}(ip)\n\t}\n\n\twg.Wait()\n\treturn subdomains, nil\n}\n\nfunc getAllFQDNs(domain string) []string {\n\tfqdns := []string{domain}\n\n\tsubdomains := searchByCommonHostnames(domain)\n\tfqdns = append(fqdns, subdomains...)\n\n\tfor _, subdomain := range subdomains {\n\t\tsubdomains, err := searchByLookupIP(subdomain)\n\t\tif err != nil {\n\t\t\tcontinue\n\t\t}\n\n\t\tfqdns = append(fqdns, subdomains...)\n\t}\n\n\treturn fqdns\n}\n\nfunc testFqdnReachable(fqdn string, client *request.Client) (*operation.Operation, error) {\n\top, err := operation.NewOperation(http.MethodGet, \"https://\"+fqdn, nil, client)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tif err := op.IsReachable(); err == nil {\n\t\treturn op, nil\n\t}\n\n\top, err = operation.NewOperation(http.MethodGet, \"http://\"+fqdn, nil, client)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tif err := op.IsReachable(); err == nil {\n\t\treturn op, nil\n\t}\n\n\treturn nil, nil\n}\n\nfunc NewDiscoverDomainsScan(rootDomain string, client *request.Client, opts *scan.ScanOptions) ([]*scan.Scan, error) {\n\tif client == nil {\n\t\tclient = request.GetDefaultClient()\n\t}\n\n\tdomains := getAllFQDNs(rootDomain)\n\tif len(domains) == 0 {\n\t\treturn nil, errors.New(\"no subdomains found\")\n\t}\n\n\tdomainsScan := []*scan.Scan{}\n\tfor _, domain := range domains {\n\t\tif op, err := testFqdnReachable(domain, client); op != nil && err == nil {\n\t\t\tdomainScan, err := scan.NewScan(operation.Operations{op}, opts)\n\t\t\tif err != nil {\n\t\t\t\treturn nil, err\n\t\t\t}\n\n\t\t\tdomainScan.AddScanHandler(scan.NewOperationScanHandler(fingerprint.DiscoverFingerPrintScanID, fingerprint.ScanHandler))\n\t\t\tdomainScan.AddScanHandler(scan.NewOperationScanHandler(discoverableopenapi.DiscoverableOpenAPIScanID, discoverableopenapi.ScanHandler))\n\t\t\tdomainScan.AddScanHandler(scan.NewOperationScanHandler(discoverablegraphql.DiscoverableGraphQLPathScanID, discoverablegraphql.ScanHandler))\n\t\t\tdomainsScan = append(domainsScan, domainScan)\n\t\t}\n\t}\n\n\treturn domainsScan, nil\n}\n" }, { "path": "scenario/graphql.go", "content": "package scenario\n\nimport (\n\t\"errors\"\n\t\"net/http\"\n\t\"net/url\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n\tintrospectionenabled \"github.com/cerberauth/vulnapi/scan/graphql/introspection_enabled\"\n)\n\nfunc NewGraphQLScan(u *url.URL, client *request.Client, opts *scan.ScanOptions) (*scan.Scan, error) {\n\tif u == nil {\n\t\treturn nil, errors.New(\"url is required\")\n\t}\n\n\tif client == nil {\n\t\tclient = request.GetDefaultClient()\n\t}\n\n\tsecurityScheme, err := detectSecurityScheme(client.Header)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tvar securitySchemes []*auth.SecurityScheme\n\tif securityScheme != nil {\n\t\tsecuritySchemes = []*auth.SecurityScheme{securityScheme}\n\t} else {\n\t\tsecuritySchemes = []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()}\n\t}\n\tclient.ClearSecuritySchemes(securitySchemes)\n\n\tu = addDefaultProtocolWhenMissing(u)\n\top, err := operation.NewOperation(http.MethodPost, u.String(), nil, client)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\top.SetSecuritySchemes(securitySchemes)\n\n\tif err := op.IsReachable(); err != nil {\n\t\treturn nil, err\n\t}\n\n\tif opts == nil {\n\t\topts = &scan.ScanOptions{}\n\t}\n\n\tif opts.Reporter == nil {\n\t\topts.Reporter = report.NewReporterWithGraphQL(u.String(), securitySchemes)\n\t}\n\n\toperations := operation.Operations{op}\n\tgraphqlScan, err := scan.NewScan(operations, opts)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tWithAllCommonScans(graphqlScan)\n\tgraphqlScan.AddScanHandler(scan.NewOperationScanHandler(introspectionenabled.GraphqlIntrospectionScanID, introspectionenabled.ScanHandler))\n\n\treturn graphqlScan, nil\n}\n" }, { "path": "scenario/graphql_test.go", "content": "package scenario_test\n\nimport (\n\t\"net/http\"\n\t\"net/http/httptest\"\n\t\"net/url\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestNewGraphQLScan(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\tu, _ := url.Parse(server.URL)\n\n\ts, err := scenario.NewGraphQLScan(u, nil, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, server.URL, s.Operations[0].URL.String())\n\tassert.Equal(t, http.MethodPost, s.Operations[0].Method)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()}, s.Operations[0].SecuritySchemes)\n}\n\nfunc TestNewGraphQLScanWithoutURLProto(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\tu, _ := url.Parse(server.URL)\n\tu.Scheme = \"\"\n\n\ts, err := scenario.NewGraphQLScan(u, nil, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, \"http\", s.Operations[0].URL.Scheme)\n\tassert.Equal(t, http.MethodPost, s.Operations[0].Method)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()}, s.Operations[0].SecuritySchemes)\n}\n\nfunc TestNewGraphQLScanWhenNotReachable(t *testing.T) {\n\tu, _ := url.Parse(\"http://localhost:8009\")\n\n\t_, err := scenario.NewGraphQLScan(u, nil, nil)\n\n\trequire.Error(t, err)\n\tassert.Contains(t, err.Error(), \":8009: connect: connection refused\")\n}\n\nfunc TestNewGraphQLScanWithUpperCaseAuthorizationHeader(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\n\theader := http.Header{}\n\ttoken := \"token\"\n\theader.Add(\"Authorization\", \"Bearer \"+token)\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tHeader: header,\n\t})\n\tu, _ := url.Parse(server.URL)\n\n\ts, err := scenario.NewGraphQLScan(u, client, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)}, s.Operations[0].SecuritySchemes)\n\t// Should clear client header after setting security schemes\n\tassert.Empty(t, client.Header.Get(\"Authorization\"))\n}\n\nfunc TestNewGraphQLScanWithUpperCaseAuthorizationAndLowerCaseBearerHeader(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\n\theader := http.Header{}\n\ttoken := \"token\"\n\theader.Add(\"Authorization\", \"bearer \"+token)\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tHeader: header,\n\t})\n\tu, _ := url.Parse(server.URL)\n\n\ts, err := scenario.NewGraphQLScan(u, client, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)}, s.Operations[0].SecuritySchemes)\n}\n\nfunc TestNewGraphQLScanWithLowerCaseAuthorizationHeader(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\n\theader := http.Header{}\n\ttoken := \"token\"\n\theader.Add(\"authorization\", \"Bearer \"+token)\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tHeader: header,\n\t})\n\tu, _ := url.Parse(server.URL)\n\n\ts, err := scenario.NewGraphQLScan(u, client, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)}, s.Operations[0].SecuritySchemes)\n}\n" }, { "path": "scenario/openapi.go", "content": "package scenario\n\nimport (\n\t\"context\"\n\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n)\n\nfunc NewOpenAPIScan(ctx context.Context, openapi *openapi.OpenAPI, securitySchemesValues *openapi.SecuritySchemeValues, client *request.Client, opts *scan.ScanOptions) (*scan.Scan, error) {\n\tif client == nil {\n\t\tclient = request.GetDefaultClient()\n\t}\n\n\tsecuritySchemes, err := openapi.SecuritySchemeMap(ctx, securitySchemesValues)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\tfor _, securityScheme := range securitySchemes {\n\t\tclient.ClearSecurityScheme(securityScheme)\n\t}\n\n\toperations, err := openapi.Operations(ctx, client, securitySchemes)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tif len(operations) == 0 {\n\t\treturn nil, nil\n\t}\n\tif err := operations[0].IsReachable(); err != nil {\n\t\treturn nil, err\n\t}\n\n\tif opts == nil {\n\t\topts = &scan.ScanOptions{}\n\t}\n\n\tif opts.Reporter == nil {\n\t\topts.Reporter = report.NewReporterWithOpenAPIDoc(openapi.Doc, operations)\n\t}\n\n\topenapiScan, err := scan.NewScan(operations, opts)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\tWithAllCommonScans(openapiScan)\n\n\treturn openapiScan, nil\n}\n" }, { "path": "scenario/openapi_test.go", "content": "package scenario_test\n\nimport (\n\t\"context\"\n\t\"log\"\n\t\"net/http\"\n\t\"os\"\n\t\"testing\"\n\n\t\"github.com/brianvoe/gofakeit/v7\"\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/openapi\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nvar server *http.Server\n\nfunc TestMain(m *testing.M) {\n\t// Start the HTTP server\n\tserver = &http.Server{\n\t\tAddr: \":8080\",\n\t\tHandler: http.DefaultServeMux,\n\t}\n\tgo func() {\n\t\terr := server.ListenAndServe()\n\t\tif err != nil && err != http.ErrServerClosed {\n\t\t\tlog.Fatal(err)\n\t\t}\n\t}()\n\n\t// Run the tests\n\tcode := m.Run()\n\n\t// Shutdown the server\n\terr := server.Shutdown(context.Background())\n\tif err != nil {\n\t\tlog.Fatal(err)\n\t}\n\n\tos.Exit(code)\n}\n\nfunc TestNewOpenAPIScanWithHttpBearer(t *testing.T) {\n\ttoken := \"token\"\n\tdoc, _ := openapi.LoadOpenAPI(t.Context(), \"../test/stub/simple_http_bearer.openapi.json\")\n\tsecuritySchemeValues := openapi.NewSecuritySchemeValues(map[string]interface{}{\n\t\t\"bearer_auth\": &token,\n\t})\n\n\ts, err := scenario.NewOpenAPIScan(t.Context(), doc, securitySchemeValues, nil, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, len(s.Operations))\n\tassert.Equal(t, \"http://localhost:8080/\", s.Operations[0].URL.String())\n\tassert.Equal(t, http.MethodGet, s.Operations[0].Method)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewAuthorizationBearerSecurityScheme(\"bearer_auth\", &token)}, s.Operations[0].SecuritySchemes)\n}\n\nfunc TestNewOpenAPIScanWithJWTHttpBearer(t *testing.T) {\n\ttoken := \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dozjgNryP4J3jVmNHl0w5N_XgL0n3I9PlFUP0THsR8U\"\n\tdoc, _ := openapi.LoadOpenAPI(t.Context(), \"../test/stub/simple_http_bearer_jwt.openapi.json\")\n\texpectedSecurityScheme := auth.MustNewAuthorizationBearerSecurityScheme(\"bearer_auth\", &token)\n\tsecuritySchemeValues := openapi.NewSecuritySchemeValues(map[string]interface{}{\n\t\t\"bearer_auth\": &token,\n\t})\n\n\ts, err := scenario.NewOpenAPIScan(t.Context(), doc, securitySchemeValues, nil, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 1, len(s.Operations))\n\tassert.Equal(t, \"http://localhost:8080/\", s.Operations[0].URL.String())\n\tassert.Equal(t, http.MethodGet, s.Operations[0].Method)\n\tassert.Equal(t, []*auth.SecurityScheme{expectedSecurityScheme}, s.Operations[0].SecuritySchemes)\n}\n\nfunc TestNewOpenAPIScanWithMultipleOperations(t *testing.T) {\n\tgofakeit.Seed(1)\n\n\ttoken := \"token\"\n\tdoc, _ := openapi.LoadOpenAPI(t.Context(), \"../test/stub/basic_http_bearer.openapi.json\")\n\tsecuritySchemes := []*auth.SecurityScheme{auth.MustNewAuthorizationBearerSecurityScheme(\"bearer_auth\", &token)}\n\tsecuritySchemeValues := openapi.NewSecuritySchemeValues(map[string]interface{}{\n\t\t\"bearer_auth\": &token,\n\t})\n\n\ts, err := scenario.NewOpenAPIScan(t.Context(), doc, securitySchemeValues, nil, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 2, len(s.Operations))\n\tfor _, s := range s.Operations {\n\t\tassert.Equal(t, s.SecuritySchemes, securitySchemes)\n\t}\n}\n\nfunc TestNewOpenAPIScanWithoutParamsExample(t *testing.T) {\n\tgofakeit.Seed(1)\n\n\ttoken := \"token\"\n\tdoc, _ := openapi.LoadOpenAPI(t.Context(), \"../test/stub/basic_http_bearer.openapi.json\")\n\tsecuritySchemes := []*auth.SecurityScheme{auth.MustNewAuthorizationBearerSecurityScheme(\"bearer_auth\", &token)}\n\tsecuritySchemeValues := openapi.NewSecuritySchemeValues(map[string]interface{}{\n\t\t\"bearer_auth\": &token,\n\t})\n\n\ts, err := scenario.NewOpenAPIScan(t.Context(), doc, securitySchemeValues, nil, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, 2, len(s.Operations))\n\tfor _, s := range s.Operations {\n\t\tassert.Equal(t, s.SecuritySchemes, securitySchemes)\n\t}\n}\n" }, { "path": "scenario/scans.go", "content": "package scenario\n\nimport (\n\t\"github.com/cerberauth/vulnapi/scan\"\n\tauthenticationbypass \"github.com/cerberauth/vulnapi/scan/broken_authentication/authentication_bypass\"\n\talgnone \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/alg_none\"\n\tblanksecret \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/blank_secret\"\n\tkidinjection \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/kid_injection\"\n\tnotverified \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/not_verified\"\n\tnullsignature \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/null_signature\"\n\tweaksecret \"github.com/cerberauth/vulnapi/scan/broken_authentication/jwt/weak_secret\"\n\tacceptunauthenticated \"github.com/cerberauth/vulnapi/scan/discover/accept_unauthenticated\"\n\tfingerprint \"github.com/cerberauth/vulnapi/scan/discover/fingerprint\"\n\thttpcookies \"github.com/cerberauth/vulnapi/scan/misconfiguration/http_cookies\"\n\thttpheaders \"github.com/cerberauth/vulnapi/scan/misconfiguration/http_headers\"\n\thttpmethodoverride \"github.com/cerberauth/vulnapi/scan/misconfiguration/http_method_override\"\n\thttptrace \"github.com/cerberauth/vulnapi/scan/misconfiguration/http_trace\"\n\thttptrack \"github.com/cerberauth/vulnapi/scan/misconfiguration/http_track\"\n)\n\nfunc WithAllCommonScans(s *scan.Scan) *scan.Scan {\n\ts.AddScanHandler(scan.NewOperationScanHandler(fingerprint.DiscoverFingerPrintScanID, fingerprint.ScanHandler))\n\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(acceptunauthenticated.NoAuthOperationScanID, acceptunauthenticated.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(authenticationbypass.AcceptsUnauthenticatedOperationScanID, authenticationbypass.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(algnone.AlgNoneJwtScanID, algnone.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(blanksecret.BlankSecretVulnerabilityScanID, blanksecret.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(kidinjection.KidInjectionScanID, kidinjection.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(notverified.NotVerifiedJwtScanID, notverified.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(nullsignature.NullSignatureScanID, nullsignature.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(weaksecret.WeakSecretVulnerabilityScanID, weaksecret.ScanHandler))\n\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(httpcookies.HTTPCookiesScanID, httpcookies.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(httpheaders.HTTPHeadersScanID, httpheaders.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(httpmethodoverride.HTTPMethodOverrideScanID, httpmethodoverride.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(httptrace.HTTPTraceScanID, httptrace.ScanHandler))\n\ts.AddOperationScanHandler(scan.NewOperationScanHandler(httptrack.HTTPTrackScanID, httptrack.ScanHandler))\n\n\treturn s\n}\n" }, { "path": "scenario/url.go", "content": "package scenario\n\nimport (\n\t\"bytes\"\n\t\"errors\"\n\t\"net/url\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/operation\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/report\"\n\t\"github.com/cerberauth/vulnapi/scan\"\n)\n\nfunc NewURLScan(method string, u *url.URL, data string, client *request.Client, opts *scan.ScanOptions) (*scan.Scan, error) {\n\tif u == nil {\n\t\treturn nil, errors.New(\"url is required\")\n\t}\n\n\tif client == nil {\n\t\tclient = request.GetDefaultClient()\n\t}\n\n\tsecurityScheme, err := detectSecurityScheme(client.Header)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tvar securitySchemes []*auth.SecurityScheme\n\tif securityScheme != nil {\n\t\tsecuritySchemes = []*auth.SecurityScheme{securityScheme}\n\t} else {\n\t\tsecuritySchemes = []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()}\n\t}\n\tclient.ClearSecuritySchemes(securitySchemes)\n\n\tbody := bytes.NewBuffer([]byte(data))\n\tu = addDefaultProtocolWhenMissing(u)\n\top, err := operation.NewOperation(method, u.String(), body, client)\n\top.GenerateID()\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\top.SetSecuritySchemes(securitySchemes)\n\n\tif err := op.IsReachable(); err != nil {\n\t\treturn nil, err\n\t}\n\n\tif opts == nil {\n\t\topts = &scan.ScanOptions{}\n\t}\n\n\tif opts.Reporter == nil {\n\t\tvar reportData interface{} = nil\n\t\tif data != \"\" {\n\t\t\treportData = data\n\t\t}\n\t\topts.Reporter = report.NewReporterWithCurl(method, u.String(), reportData, client.Header, client.Cookies, securitySchemes)\n\t}\n\n\toperations := operation.Operations{op}\n\turlScan, err := scan.NewScan(operations, opts)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tWithAllCommonScans(urlScan)\n\treturn urlScan, nil\n}\n" }, { "path": "scenario/url_test.go", "content": "package scenario_test\n\nimport (\n\t\"net/http\"\n\t\"net/http/httptest\"\n\t\"net/url\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n\t\"github.com/cerberauth/vulnapi/scenario\"\n\t\"github.com/stretchr/testify/assert\"\n\t\"github.com/stretchr/testify/require\"\n)\n\nfunc TestNewURLScan(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\tu, _ := url.Parse(server.URL)\n\n\ts, err := scenario.NewURLScan(http.MethodGet, u, \"\", nil, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, server.URL, s.Operations[0].URL.String())\n\tassert.Equal(t, http.MethodGet, s.Operations[0].Method)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewNoAuthSecurityScheme()}, s.Operations[0].SecuritySchemes)\n}\n\nfunc TestNewURLScanWithUpperCaseAuthorizationHeader(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\n\theader := http.Header{}\n\ttoken := \"token\"\n\theader.Add(\"Authorization\", \"Bearer \"+token)\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tHeader: header,\n\t})\n\tu, _ := url.Parse(server.URL)\n\n\ts, err := scenario.NewURLScan(http.MethodGet, u, \"\", client, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)}, s.Operations[0].SecuritySchemes)\n\t// Should clear client header after setting security schemes\n\tassert.Empty(t, client.Header.Get(\"Authorization\"))\n}\n\nfunc TestNewURLScanWithUpperCaseAuthorizationAndLowerCaseBearerHeader(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\n\theader := http.Header{}\n\ttoken := \"token\"\n\theader.Add(\"Authorization\", \"bearer \"+token)\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tHeader: header,\n\t})\n\tu, _ := url.Parse(server.URL)\n\n\ts, err := scenario.NewURLScan(http.MethodGet, u, \"\", client, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)}, s.Operations[0].SecuritySchemes)\n}\n\nfunc TestNewURLScanWithLowerCaseAuthorizationHeader(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\n\theader := http.Header{}\n\ttoken := \"token\"\n\theader.Add(\"authorization\", \"Bearer \"+token)\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tHeader: header,\n\t})\n\tu, _ := url.Parse(server.URL)\n\n\ts, err := scenario.NewURLScan(http.MethodGet, u, \"\", client, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewAuthorizationBearerSecurityScheme(\"default\", &token)}, s.Operations[0].SecuritySchemes)\n}\n\nfunc TestNewURLScanWithAPIKeyInHeader(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\n\tapiKey := \"token\"\n\ttests := []struct {\n\t\tname string\n\t}{\n\t\t{\n\t\t\tname: \"X-Api-Key\",\n\t\t},\n\t\t{\n\t\t\tname: \"Apikey\",\n\t\t},\n\t\t{\n\t\t\tname: \"App-Key\",\n\t\t},\n\t\t{\n\t\t\tname: \"X-Token\",\n\t\t},\n\t\t{\n\t\t\tname: \"Api-Secret\",\n\t\t},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\theader := http.Header{}\n\t\t\theader.Add(tt.name, apiKey)\n\t\t\tclient := request.NewClient(request.NewClientOptions{\n\t\t\t\tHeader: header,\n\t\t\t})\n\t\t\tu, _ := url.Parse(server.URL)\n\n\t\t\ts, err := scenario.NewURLScan(http.MethodGet, u, \"\", client, nil)\n\n\t\t\trequire.NoError(t, err)\n\t\t\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewAPIKeySecurityScheme(tt.name, auth.InHeader, &apiKey)}, s.Operations[0].SecuritySchemes)\n\t\t\t// Should clear client header after setting security schemes\n\t\t\tassert.Empty(t, client.Header.Get(\"Authorization\"))\n\t\t})\n\t}\n}\n\nfunc TestNewURLScanWithHTTPBasic(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNoContent)\n\t}))\n\tdefer server.Close()\n\n\tcredentials := auth.NewHTTPBasicCredentials(\"admin\", \"password\")\n\theader := http.Header{}\n\theader.Add(\"Authorization\", \"Basic YWRtaW46cGFzc3dvcmQ=\")\n\tclient := request.NewClient(request.NewClientOptions{\n\t\tHeader: header,\n\t})\n\tu, _ := url.Parse(server.URL)\n\n\ts, err := scenario.NewURLScan(http.MethodGet, u, \"\", client, nil)\n\n\trequire.NoError(t, err)\n\tassert.Equal(t, []*auth.SecurityScheme{auth.MustNewAuthorizationBasicSecurityScheme(\"default\", credentials)}, s.Operations[0].SecuritySchemes)\n\t// Should clear client header after setting security schemes\n\tassert.Empty(t, client.Header.Get(\"Authorization\"))\n}\n" }, { "path": "scenario/utils.go", "content": "package scenario\n\nimport (\n\t\"crypto/tls\"\n\t\"encoding/base64\"\n\t\"net/http\"\n\t\"net/url\"\n\t\"strings\"\n\n\t\"github.com/cerberauth/vulnapi/internal/auth\"\n)\n\nconst bearerPrefix = auth.BearerPrefix + \" \"\nconst basicPrefix = auth.BasicPrefix + \" \"\n\nvar apiKeyKeywords = []string{\"key\", \"token\", \"secret\"}\n\nfunc detectAuthorizationHeader(header http.Header) string {\n\tif h := header.Get(auth.AuthorizationHeader); h != \"\" {\n\t\treturn h\n\t}\n\n\tif h := header.Get(strings.ToLower(auth.AuthorizationHeader)); h != \"\" {\n\t\treturn h\n\t}\n\n\treturn \"\"\n}\n\nfunc getBearerToken(authHeader string) string {\n\tif strings.HasPrefix(authHeader, bearerPrefix) {\n\t\treturn strings.TrimPrefix(authHeader, bearerPrefix)\n\t}\n\n\tlowerCasePrefix := strings.ToLower(bearerPrefix)\n\tif strings.HasPrefix(authHeader, lowerCasePrefix) {\n\t\treturn strings.TrimPrefix(authHeader, lowerCasePrefix)\n\t}\n\n\treturn \"\"\n}\n\nfunc getHttpBasicAuthUser(authHeader string) string {\n\tif strings.HasPrefix(authHeader, basicPrefix) {\n\t\treturn strings.TrimPrefix(authHeader, basicPrefix)\n\t}\n\n\tlowerCasePrefix := strings.ToLower(bearerPrefix)\n\tif strings.HasPrefix(authHeader, lowerCasePrefix) {\n\t\treturn strings.TrimPrefix(authHeader, lowerCasePrefix)\n\t}\n\n\treturn \"\"\n}\n\nfunc detectAPIKeyHeader(header http.Header) (string, string) {\n\tfor headerName, headerValue := range header {\n\t\tfor _, keyword := range apiKeyKeywords {\n\t\t\tif strings.Contains(strings.ToLower(headerName), keyword) {\n\t\t\t\treturn headerName, headerValue[0]\n\t\t\t}\n\t\t}\n\t}\n\n\treturn \"\", \"\"\n}\n\nfunc decodeBasicAuth(encodedUser string) (string, string) {\n\tdecoded, err := base64.StdEncoding.DecodeString(encodedUser)\n\tif err != nil {\n\t\treturn \"\", \"\"\n\t}\n\n\tparts := strings.SplitN(string(decoded), \":\", 2)\n\tif len(parts) != 2 {\n\t\treturn \"\", \"\"\n\t}\n\n\treturn parts[0], parts[1]\n}\n\nfunc detectSecurityScheme(header http.Header) (*auth.SecurityScheme, error) {\n\tauthHeader := detectAuthorizationHeader(header)\n\tif authHeader != \"\" {\n\t\tif token := getBearerToken(authHeader); token != \"\" {\n\t\t\treturn auth.NewAuthorizationBearerSecurityScheme(\"default\", &token)\n\t\t} else if encodedUser := getHttpBasicAuthUser(authHeader); encodedUser != \"\" {\n\t\t\tusername, password := decodeBasicAuth(encodedUser)\n\t\t\treturn auth.NewAuthorizationBasicSecurityScheme(\"default\", auth.NewHTTPBasicCredentials(username, password))\n\t\t}\n\n\t\treturn auth.NewAPIKeySecurityScheme(auth.AuthorizationHeader, auth.InHeader, &authHeader)\n\t}\n\n\tif headerName, headerValue := detectAPIKeyHeader(header); headerName != \"\" {\n\t\treturn auth.NewAPIKeySecurityScheme(headerName, auth.InHeader, &headerValue)\n\t}\n\n\treturn nil, nil\n}\n\nfunc addDefaultProtocolWhenMissing(u *url.URL) *url.URL {\n\tif u.Scheme != \"\" {\n\t\treturn u\n\t}\n\n\ttlsConn, err := tls.Dial(\"tcp\", u.String(), nil)\n\tif err == nil {\n\t\tdefer tlsConn.Close()\n\t\tu.Scheme = \"https\"\n\t} else {\n\t\tu.Scheme = \"http\"\n\t}\n\treturn u\n}\n" }, { "path": "seclist/lists/exposed-paths.txt", "content": ".0\n.FBCIndex\n.ICEauthority\n.JustCode\n.LICENSE.bud\n.LSOverride\n.PDF\n.Python\n.RData\n.README.md.bud\n.Rapp.history\n.Rbuildignore\n.Rhistory\n.Rprofile\n.SRCINFO\n.SyncID\n.SyncIgnore\n.Xauthority\n.Xdefaults\n.Xresources\n.accdb\n.ackrc\n.action\n.actionScriptProperties\n.admin/\n.agignore\n.agilekeychain\n.agilekeychain.zip\n.aliases\n.all-contributorsrc\n.analysis_options\n.angular-cli.json\n.ansible/\n.apport-ignore.xml\n.appveyor.yml\n.arcconfig\n.architect\n.arclint\n.arcrc\n.asa\n.ashx\n.asmx\n.asp\n.aspnet/DataProtection-Keys/\n.aspx\n.atfp_history\n.atom/config.cson\n.atoum.php\n.autotest\n.autotools\n.aws/\n.aws/config\n.aws/credentials\n.axd\n.azure-pipelines.yml\n.azure/accessTokens.json\n.babel.json\n.babelrc.cjs\n.babelrc.js\n.badarg.log\n.badsegment.log\n.bak\n.bak_0.log\n.bash_aliases\n.bash_history\n.bash_prompt\n.bashrc\n.binstar.yml\n.bithoundrc\n.blg\n.bluemix/pipeline.yaml\n.bluemix/pipeline.yml\n.bootstraprc\n.boto\n.bower.json\n.bowerrc\n.brackets.json\n.browserslistrc\n.buckconfig\n.build\n.buildignore\n.buildkite/pipeline.json\n.buildkite/pipeline.yaml\n.buildkite/pipeline.yml\n.buildlog\n.buildpacks\n.bumpversion.cfg\n.byebug_history\n.bzr/README\n.bzr/branch-format\n.bzrignore\n.c9/metadata/environment/.env\n.cache-main\n.cane\n.cask\n.catalog\n.cer\n.cert\n.cfg/\n.cfignore\n.cfm\n.cgi\n.checkignore\n.chef/config.rb\n.chef/knife.rb\n.circleci/\n.circleci/circle.yml\n.circleci/config.yml\n.clang-format\n.clang_complete\n.clcbio/\n.clog.toml\n.coafile\n.cocoadocs.yml\n.codacy.yml\n.codeclimate.json\n.codeclimate.yml\n.codecov.yml\n.codefresh/codefresh.yml\n.codeship.yaml\n.codeship.yml\n.coffee_history\n.coffeelintignore\n.cointop/config\n.com\n.components\n.components/\n.composer/auth.json\n.concrete/dev_mode\n.conda/\n.condarc\n.config\n.config.inc.php.swp\n.config/\n.config/configstore/snyk.json\n.config/gcloud/access_tokens.db\n.config/gcloud/configurations/config_default\n.config/gcloud/credentials\n.config/gcloud/credentials.db\n.config/pip/pip.conf\n.config/stripe/config.toml\n.config/yarn/global/package.json\n.config/yarn/global/yarn.lock\n.configuration\n.configuration.php\n.configuration/\n.controls/\n.cookiecutterrc\n.cordova/config.json\n.coveragerc\n.coveralls.yml\n.cpan/\n.cpanel/caches/config/\n.cpanm/\n.cpcache/\n.credential\n.credentials\n.credo.exs\n.crt\n.csdp.cache\n.csi\n.css\n.csscomb.json\n.csslintrc\n.ctags\n.curlrc\n.data/\n.db\n.db3\n.dbshell\n.dbus/\n.dep.inc\n.depend\n.dependabot\n.deploy/values.yaml\n.deployment\n.deployment-config.json\n.dir-locals.el\n.divzero.log\n.do\n.doc\n.docker\n.docker/\n.docker/.env\n.docker/config.json\n.docker/daemon.json\n.docker/laravel/app/.env\n.dockercfg\n.dockerignore\n.docs/\n.document\n.dotfiles.boto\n.drone.jsonnet\n.drone.sec\n.drone.yaml\n.dropbox\n.dropbox.attr\n.dropbox.cache\n.dropbox/\n.ds_store\n.dsk\n.dub\n.dummy\n.dump\n.dynamodb/\n.eggs/\n.elixir_ls/\n.emacs\n.emails/\n.ember-cli\n.ensime\n.ensime_cache/\n.ensime_lucene/\n.env-example\n.env-sample\n.env.backup\n.env.dev\n.env.development.local\n.env.development.sample\n.env.dist\n.env.docker.dev\n.env.example\n.env.local\n.env.prod\n.env.production\n.env.production.local\n.env.sample\n.env.save\n.env.stage\n.env.test\n.env.test.local\n.env.test.sample\n.env.travis\n.environment\n.envrc\n.envs\n.env~\n.esdoc.json\n.esformatter\n.eslintcache\n.eslintrc.js\n.eslintrc.json\n.eslintrc.yaml\n.eslintrc.yml\n.esmtprc\n.eunit\n.evg.yml\n.exe\n.exercism\n.exit.log\n.exports\n.externalnativebuild\n.externaltoolbuilders/\n.extra\n.factorypath\n.fake/\n.faultread.log\n.faultreadkernel.log\n.fbprefs\n.fetch\n.filetree\n.filezilla/\n.finished-upgraders\n.firebaserc\n.fixtures.yml\n.flake8\n.flexLibProperties\n.floo\n.flooignore\n.flv\n.foodcritic\n.fop/\n.forktest.log\n.forktree.log\n.formatter.exs\n.frlog\n.fseventsd\n.ftpconfig\n.functions\n.fuse_hidden\n.fusebox/\n.gdbinit\n.gdrive/token_v2.json\n.gem/credentials\n.gemfile\n.gemrc\n.gems\n.gemspec\n.gemtest\n.generators\n.geppetto-rc.json\n.ghc.environment\n.ghci\n.gho\n.gif\n.git-credentials\n.git-rewrite/\n.git.json\n.git/\n.git/COMMIT_EDITMSG\n.git/FETCH_HEAD\n.git/branches/\n.git/config\n.git/description\n.git/head\n.git/hooks/\n.git/index\n.git/info/\n.git/info/attributes\n.git/info/exclude\n.git/logs/\n.git/logs/head\n.git/logs/refs\n.git/logs/refs/heads\n.git/logs/refs/heads/master\n.git/logs/refs/remotes\n.git/logs/refs/remotes/origin\n.git/logs/refs/remotes/origin/HEAD\n.git/logs/refs/remotes/origin/master\n.git/objects/\n.git/packed-refs\n.git/refs/\n.git/refs/heads\n.git/refs/heads/master\n.git/refs/remotes\n.git/refs/remotes/origin\n.git/refs/remotes/origin/HEAD\n.git/refs/remotes/origin/master\n.git/refs/tags\n.git2/\n.gitchangelog.rc\n.github/\n.github/ISSUE_TEMPLATE.md\n.github/PULL_REQUEST_TEMPLATE.md\n.github/workflows/blank.yml\n.github/workflows/ci.yml\n.github/workflows/dependabot.yml\n.github/workflows/docker.yml\n.github/workflows/master.yml\n.github/workflows/maven.yml\n.github/workflows/nodejs.yml\n.github/workflows/publish.yml\n.gitignore.orig\n.gitignore.swp\n.gitignore/\n.gitlab\n.gitlab-ci.off.yml\n.gitlab-ci.yml\n.gitlab-ci/.env\n.gnome/\n.gnupg/\n.gnupg/trustdb.gpg\n.godir\n.golangci.yml\n.google.token\n.goreleaser.yml\n.goxc.json\n.gphoto/\n.gradle\n.gradle/\n.gradle/gradle.properties\n.gradletasknamecache\n.groc.json\n.grunt\n.gtkrc\n.guile_history\n.gvimrc\n.gwt-tmp/\n.gwt/\n.gz\n.hello.log\n.helm/repository/repositories.yaml\n.helm/values.conf\n.helm/values.yaml\n.hg/\n.hg/branch\n.hg/dirstate\n.hg/hgrc\n.hg/requires\n.hg/store/data/\n.hg/store/undo\n.hg/undo.dirstate\n.hg_archival.txt\n.hgsigs\n.hgsub\n.hgsubstate\n.hgtags\n.hhconfig\n.histfile\n.hound.yml\n.hpc\n.hsdoc\n.hsenv\n.htaccess\n.htaccess-dev\n.htaccess-local\n.htaccess-marco\n.htaccess.bak\n.htaccess.bak1\n.htaccess.inc\n.htaccess.old\n.htaccess.orig\n.htaccess.sample\n.htaccess.save\n.htaccess.txt\n.htaccess/\n.htaccessBAK\n.htaccessOLD\n.htaccessOLD2\n.htm\n.html\n.htpasswd-old\n.htpasswd.bak\n.htpasswd.inc\n.htpasswd/\n.httr-oauth\n.hushlogin\n.hypothesis/\n.ico\n.id\n.idea.name\n.idea/\n.idea/.name\n.idea/Sites.iml\n.idea/assetwizardsettings.xml\n.idea/caches/build_file_checksums.ser\n.idea/compiler.xml\n.idea/copyright/profiles_settings.xml\n.idea/dataSources.ids\n.idea/dataSources.local.xml\n.idea/dataSources.xml\n.idea/deployment.xml\n.idea/dictionaries\n.idea/drush_stats.iml\n.idea/encodings.xml\n.idea/gradle.xml\n.idea/httprequests\n.idea/inspectionProfiles/Project_Default.xml\n.idea/libraries\n.idea/libraries/\n.idea/misc.xml\n.idea/modules\n.idea/modules.xml\n.idea/naveditor.xml\n.idea/replstate.xml\n.idea/runConfigurations.xml\n.idea/scopes/scope_settings.xml\n.idea/sqlDataSources.xml\n.idea/tasks.xml\n.idea/uiDesigner.xml\n.idea/vcs.xml\n.idea/webServers.xml\n.idea/woaWordpress.iml\n.idea/workspace(2).xml\n.idea/workspace(3).xml\n.idea/workspace(4).xml\n.idea/workspace(5).xml\n.idea/workspace(6).xml\n.idea/workspace(7).xml\n.idea/workspace.xml\n.idea0/\n.identcache\n.import/\n.inc\n.inc.php\n.indent.pro\n.index.php.swp\n.influx_history\n.ini\n.inputrc\n.install4j\n.interproscan-5/\n.ionide/\n.ipynb_checkpoints\n.irb-history\n.irb_history\n.irbrc\n.isort.cfg\n.istanbul.yml\n.java-buildpack.log\n.java-version\n.java/\n.jazzy.yaml\n.jekyll-cache/\n.jekyll-metadata\n.jenkins.sh\n.jenkins.yml\n.jenv-version\n.jestrc\n.jobs\n.jpeg\n.jpg\n.js\n.jsbeautifyrc\n.jscs.json\n.jscsrc.json\n.jsdoc.json\n.jsdtscope\n.jsfmtrc\n.jslintrc\n.json\n.jsp\n.jupyter/jupyter_notebook_config.json\n.kdbx\n.kdev4/\n.key\n.keys\n.keys.yml.swp\n.kick\n.kitchen.cloud.yml\n.kitchen.docker.yml\n.kitchen.dokken.yml\n.kitchen.local.yml\n.kitchen/\n.kube/config\n.landscape.yaml\n.landscape.yml\n.lanproxy/config.json\n.last_cover_stats\n.leaky-meta\n.learn\n.lein-deps-sum\n.lein-failures\n.lein-plugins/\n.lein-repl-history\n.lgt_tmp/\n.lgtm\n.lgtm.yam\n.lgtm.yml\n.lia.cache\n.lib/\n.libs/\n.local/\n.localhistory/\n.lock\n.log\n.logout\n.luacheckrc\n.luacov\n.luna/user_info.json\n.luna_manager/luna-manager.log\n.lvimrc\n.m/\n.macos\n.magnolia\n.magnolia/installer/start\n.mailmap\n.markdownlint.json\n.masterpages/\n.mdb\n.merlin\n.meteor/\n.metrics\n.mfractor/\n.mongorc.js\n.mono/\n.mp3\n.msync.yml\n.mtj.tmp/\n.muttrc\n.mvn/timing.properties\n.mvn/wrapper/maven-wrapper.jar\n.mypy_cache/\n.mysql.txt\n.mysql_history\n.nakignore\n.name\n.navigation/\n.nb-gradle/\n.nbgrader.log\n.next\n.nfs\n.ngrok2/ngrok.yml\n.nia.cache\n.ninja_deps\n.ninja_log\n.nlia.cache\n.no-sublime-package\n.node-version\n.node_repl_history\n.nodemonignore\n.nodeset.yml\n.nojekyll\n.noserc\n.nox/\n.npm\n.npm/\n.npm/anonymous-cli-metrics.json\n.nra.cache\n.nrepl-port\n.ntvs_analysis.dat\n.nuget/\n.nuxt\n.nv/\n.nvm/\n.nvmrc\n.nyc_output\n.nycrc\n.ocp-indent\n.oh-my-zsh/\n.old\n.op/config\n.oracle_jre_usage/\n.ori\n.osx\n.otto/\n.overcommit.yml\n.pac\n.pac.pac\n.pac/\n.pac/proxy.pac\n.packages\n.pairs\n.paket/\n.paket/paket.exe\n.pallet/services/aws.clj\n.pam_environment\n.parallel/\n.path\n.pdb\n.pdf\n.pdkignore\n.pem\n.pep8\n.perlbrew/\n.perltidyrc\n.pfx\n.pgadmin3\n.pgdir.log\n.pgpass\n.pgsql.txt\n.php\n.php-ini\n.php-version\n.php3\n.php_cs\n.php_cs.cache\n.php_cs.dist\n.phpcs.xml\n.phpspec.yml\n.phpunit.result.cache\n.pip.conf\n.pip/pip.conf\n.pkgmeta\n.pki/\n.pl\n.pl-history\n.playground\n.pm2/\n.pmd\n.pmtignore\n.png\n.poggit.yml\n.postcssrc.js\n.powenv\n.powrc\n.pre-commit-config.yaml\n.precomp\n.prettierignore\n.prettierrc\n.prettierrc.js\n.prettierrc.json\n.prettierrc.toml\n.prettierrc.yaml\n.preview/\n.priority.log\n.pro.user\n.production\n.projdata\n.project-settings.yml\n.projectOptions\n.projectile\n.projections.json\n.prospectus\n.pry_history\n.pryrc\n.psci\n.psci_modules\n.psql_history\n.publishrc\n.pullapprove.yml\n.puppet-lint.rc\n.puppet/\n.pwd.lock\n.py\n.pyc\n.pylintrc\n.pypirc\n.pyre/\n.pytest_cache/\n.python-eggs\n.python-history\n.python-version\n.python_history\n.pyup.yml\n.qmake.cache\n.qmake.conf\n.qmake.stash\n.rakeTasks\n.rar\n.rbenv-gemsets\n.rbenv-version\n.readthedocs.yml\n.rebar\n.rebar3\n.recommenders\n.recommenders/\n.redcar\n.rediscli_history\n.reduxrc\n.reek\n.release.json\n.remarkrc\n.repl_history\n.repo-metadata.json\n.reviewboardrc\n.ropeproject\n.rpmdb/\n.rpt2_cache/\n.rspec\n.rspec_parallel\n.rsync-filter\n.rts2_cache_cjs/\n.rts2_cache_es/\n.rts2_cache_umd/\n.rubocop.yml\n.rultor.yml\n.s3.yml\n.s3cfg\n.sailsrc\n.sass-lint.yml\n.scala_dependencies\n.scala_history\n.scalafmt.conf\n.sconf_temp\n.sconsign.dblite\n.scrapy\n.screenrc\n.scss-lint.yml\n.semaphore/semaphore.yaml\n.semaphore/semaphore.yml\n.semver\n.sensiolabs.yml\n.sequelizerc\n.serverless/\n.settings/org.eclipse.jdt.core.prefs\n.shell.pre-oh-my-zsh\n.shtml\n.simplecov\n.slather.yml\n.slugignore\n.smalltalk.ston\n.snyk\n.softint.log\n.spacemacs\n.spin.log\n.springbeans\n.spyderproject\n.spyproject\n.sqlite\n.sqlite3\n.sqlite_history\n.ssh/ansible_rsa\n.ssh/authorized_keys\n.ssh/config\n.ssh/google_compute_engine\n.ssh/google_compute_engine.pub\n.ssh/id_dsa\n.ssh/id_dsa.pub\n.ssh/id_rsa\n.ssh/id_rsa.pub\n.ssh/identity\n.ssh/identity.pub\n.ssh/known_hosts\n.stack-work/\n.stat/\n.stestr.conf\n.stickler.yml\n.style.yapf\n.styleci.yml\n.stylelintignore\n.stylelintrc\n.stylelintrc.json\n.stylintrc\n.stylish-haskell.yaml\n.sublimelinterrc\n.sudo_as_admin_successful\n.suo\n.svn/wc.db\n.swf\n.swift-version\n.swiftlint.yml\n.swiftpm\n.sync.yml\n.tachikoma.yml\n.tar\n.target\n.tcshrc\n.teamcity/settings.kts\n.temp/\n.template-lintrc.js\n.templates/\n.temporaryitems\n.tern-port\n.tern-project\n.terraform.d/checkpoint_cache\n.terraform.d/checkpoint_signature\n.terraform.tfstate.lock.info\n.terraform/\n.terraform/modules/modules.json\n.testbss.log\n.testr.conf\n.texlipse\n.texpadtmp\n.tfignore\n.tfstate\n.tfvars\n.tgz\n.thunderbird/\n.tm_properties\n.tmp/\n.tmp_versions/\n.tmux.conf\n.tool-versions\n.tox/\n.trash/\n.trashes\n.travis.sh\n.travis.yml.swp\n.travis.yml~\n.travis/\n.travis/config.yml\n.travisci.yml\n.tugboat\n.tvsconfig\n.tx/config\n.txt\n.vagrant/\n.venv\n.verb.md\n.verbrc.md\n.versions\n.vim.custom\n.vim.netrwhist\n.vim/\n.viminfo\n.vimrc\n.vmware/\n.vs/\n.vscode\n.vscode/\n.vscode/.env\n.vscode/extensions.json\n.vscode/ftp-sync.json\n.vscode/launch.json\n.vscode/settings.json\n.vscode/sftp.json\n.vscode/tasks.json\n.vscodeignore\n.vuepress/dist\n.w3m/\n.waitkill.log\n.watchmanconfig\n.watchr\n.web-server-pid\n.webassets-cache\n.wget-hsts\n.wgetrc\n.whitesource\n.wm_style\n.wmv\n.worksheet\n.wp-cli/config.yml\n.wp-config.php.swp\n.wp-config.swp\n.x-formation/\n.xctool-args\n.xhtml\n.xinitrc\n.xinputrc\n.xls\n.xml\n.xsession\n.yamllint\n.yardoc/\n.yardopts\n.yarn-integrity\n.yarnclean\n.yarnrc\n.ycm_extra_conf.py\n.yield.log\n.yo-rc.json\n.zcompdump-remote-desktop-5.7.1\n.zip\n.zprofile\n.zsh_history\n.zshenv\n.zshrc\n.zuul.yaml\n.zuul.yml\naccess\naccess/\nAWStats/\nbackstage/\nbackup\nbackup-db/\nbak/\nban\nbanlist\nbugs/\nbuild\nbuild/\nCACHE/\nCGI-BIN/\nCHANGELOG.txt\nCOPYRIGHT\nCREDITS\ncache\ncache/\ncache_files/\ncaches/\nCache/\nCaptcha\ncert/\ncertificate\ncerts/\ncf/\ncfc/\ncfdocs/\ncfg\ncgi\ncgi-bin\ncgi-bin.%EXT%\ncgi-bin/\ncgi-bin2/\ncgi-data/\ncgi-image/\ncgi-local/\ncgi-php/\ncgi-script/\ncgi-shl/\ncgi-src/\ncgi-sys/\ncgi-win/\ncgi.%EXT%\ncgi/\ncgi_bin/\ncgibin/\ncloud\nconf\nconf/\nconf_global\nconfig.php\nconfig/\nconfig1\nconfigs/\nconfiguration\nConfig\nConfig/\ncredit\ncredit/\ncredits\ncron.php\ncron/\ncron_jobs\ncronjob\ncronjob/\ncronjobs/\ncrons/\ncrossdomain\ncrossdomain.xml\ndat/\ndata\ndata/\nDATA/\ndb\ndb/\ndb_backup/\ndb_config\ndb_settings\nDB/\nData/\nDataBackUp/\nDatabase/\ndefault\ndefault/\ndefault1\ndist/\ndoc\ndoc/\ndocs/\ndoku\nDownload\nDownload/\nDownloads\nDownloads/\ndump\ndump/\nEULA\nfiles\nfiles/\nfileupload/\nGo\nHistory\nINSTALL.mysql.txt\nINSTALL.pgsql.txt\nINSTALL.txt\nINSTALL/\nLICENSE.html\nLICENSE.txt\nLICENSES\nLocalSettings\nLogs/\nMAINTAINERS.txt\nMETA-INF/\nOLD/\nOld/\nPDF/\nPDFs/\nPEAR/\nPHP/\nPLUGI/\nPRINT/\nSCRIPT/\nSSL/\nShared/\nUPGRADE.txt\nURLrewrite\nUpload\nUpload/\nUploadFile/\nUploadFiles/\nUploads/\nVERSION/\nVersion\nWEB-INF/\nWS_FTP\nWeb\nWeb.config\nWeb/\nWebObjects/\nXMLImporter/\nXPath\nXml/\nZend/\n_/\n_404\n_archive/\n_backup/\n_baks/\n_cache/\n_config\n_config/\n_data/\n_database/\n_db_backups/\n_files/\n_lib/\n_logs/\n_media/\n_notes/\n_old/\n_php/\n_private/\n_temp/\n_temp_/\n_tmp/" }, { "path": "seclist/lists/graphql.txt", "content": "___graphql\naltair\nexplorer\ngraphiql\ngraphiql.php\ngraphql\ngraphql/console\ngraphql-explorer\ngraphql.php\ngraphql/schema.json\ngraphql/schema.xml\ngraphql/schema.yaml\nplayground\napi/graphql\ngraph\nv1/altair\nv1/explorer\nv1/graphiql\nv1/graphiql.php\nv1/graphql\nv1/graphql/console\nv1/graphql-explorer\nv1/graphql.php\nv1/graphql/schema.json\nv1/graphql/schema.xml\nv1/graphql/schema.yaml\nv1/playground\nv1/subscriptions\nv1/api/graphql\nv1/graph\nv2/altair\nv2/explorer\nv2/graphiql\nv2/graphiql.php\nv2/graphql\nv2/graphql/console\nv2/graphql-explorer\nv2/graphql.php\nv2/graphql/schema.json\nv2/graphql/schema.xml\nv2/graphql/schema.yaml\nv2/playground\nv2/subscriptions\nv2/api/graphql\nv2/graph" }, { "path": "seclist/lists/healthcheck.txt", "content": "alive\nhealth\nhealth/live\nhealth/ready\nhealth/started\nhealthz\nhealthz/live\nhealthz/ready\nready\nstatus\nstatus/live\nstatus/ready" }, { "path": "seclist/lists/jwt-secrets.txt", "content": "\n!)&@%&*$E^$\n!@#!@#!@#!@@#!@#\n!@#$%^&*\n!@#)(D4NG_QU0c_CU0NG$%^{}\n!@#Cuong_Dang#@!\n!@#^&*\n!@)*#)!@U#@*!@!)\n!RCR#hJFp*d8nHUZ@U79vC*HndVg292phyZ#5^Xb\n!meal$ecret!\n!payment$ecret!\n!secReT$123*\n#######\n#$Vby8o5ey+vbaio7vzw63v)273eyowhsukdt36iwu\n#RwwwWXXUu!pPMG^AtWhDbXh?2qXum@CGqaAF8QaYfnqMyh+r#_Eu!RQ&zftFucDf5BH#7%!&bVfQAVJxP3b-?tEvdmHBNxK!LgjW!ekeG9AP^=gcM\n#ZhiMaKaiMen1234@*\n#drshshsjsj&*^^hshshst--shhh%$##@jkshg\n$!qi$_o(M,c`zRS\n$#GR24T4344$#$@#%WTEWTEAE%$6\n$#GR24T4344$#$@#%WTEWTEAE%$6dsf\n$#GR24T4344$#$@#%WTEWTEAE%$6dsfAS\n$#MyS0ngsapl1cati0n#$\n$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$\n$2a$10$zMv2skn0DWEfsZGG91rC/O\n$2b$10$Gg91pyMdkpIwT2MRMl7xxObPSOAQpS2Gnt29indH8Q4jxpiSfPup2\n$2b$10$ZVQNwaBFAYZHiMXuMaPtHO\n$39asdulawk3j489us39vm9370dmsZ\n$PraveenIsAwesome!\nthisisthesecretkey\nmyJwtSecret\nyour-256-bit-secret\ntobemodified\nmysecretstring\nreallyreallyreallyreallyverysafe\nsupersecret\nNxpmDotDevJwtSecret\n3123123213123\nofcourseistillloveyou\n\nsecret\nsecretkey\ntoken\n0a6b944d-d2fb-46fc-a85e-0295c986cd9f\n\n16f8c0ef4a5d391b26034086c628469d3f9f497f08163ab9b40137092f2909ef\nr9iMKoe5CRMgvJBBtp4HrqN7QiPpUToj\nchangeme\nfoo\nsome-secret-password\ntest value\npassword\njwt-secret\njwtsecret\nJWTs are the best!\nVGhpcyBzZWNyZXQgaXMgc3RvcmVkIGJhc2UtNjQgZW5jb2RlZCBvbiB0aGUgcHJveHkgaG9zdA\nThis secret is stored base-64 encoded on the proxy hos\nsecret1\nsecret2\naSecret\n569a1821-0a93-45e8-87ab-eb857f20a010\nr9iMKoe5CRMgvJBBtp4HrqN7QiPpUToj\ntesting\ntest123-test123-test123-test123-test123-test123-test123\n$gbK!srXc2Oivn8ZjHa8WRel&Zy4481W\n$u2kD6L8BXMjNRkg2RZ[Qbb5ze*d`HAV\n%C*F-JaNdRgUkXp2s5v8y/B?E(G+KbPeShVmYq3t6w9z$C&J@McQfTjWnZr4u7x!\n%^&kwicms319842__71839^HBSksmdil\n%kernel.secret%\n%some_secrets%\n"n2r5u8x/A%D*G-KaPdSgVkYp3s6v9y$B&E(H+MbQeThWmZq4t7w!z%C*F-J@NcRf"\n&Vi%33pG2mD51xMo%OUOTo$ZWOa3TYt328tcjXtW9&hn%AOb9quwaZaRMf#f&44c\n(x9==vh_hsk$-ds#%7d&ue-4j+f_da64samey++xzd$#$qsekf\n)H@McQfTjWnZr4u7w!z%C*F-JaNdRgUkXp2s5v8y/A?D(G+KbPeShVmYq3t6w9z$\n**\n****!\n*******\n***your-256-bit-secret***\n*A\"QXyajs$`K)qFB_%Q'8~mNG4y-M,QcuDq$7kgH$$6;Ssp&@n\n*Vs1k4e(Y}wpz${hz%w5rSwD\n*Y*^%JHg7623\n*s3cr3t#\nCHANGE_THIS_TO_SOMETHING_RANDOM\n*your jasonwebtoken secret*\n+b59WQF+kUDr0TGxevzpRV3ixMvyIQuD1O\n-------\n-S(]VEjUc\\3%7h:M\n-SrTY3wmw80\n-k12h32h3i2uydxhe2i3h4ih34dn3500908\n...\n0.rfyj3n9nzh\n0000000\n000000000000\n005qqP3nVUfeGAAkleWWERqLkYNaL_4tnBzgm6frys\n0069c482-d42c-4e4b-bae9-893749215257\n00dce410-9108-4ebb-861c-04a601b83c4b\n010ddcdb-a7b8-4595-9294-508c1b4547c0\n01234567890abcde01234567890abcde01234567890abcde01234567890abcde\n0230289a-7348-4373-913f-85e15a41de47\n02938t9023uf0923j09j9gj3s98og3489gh7938hg982hj0f9jw9sgjesu89iguio3ji9gj2309j0ghjeuisghkjdfgnm3v4mntvjhiocvubiouxc0b9u3490jg\n02981eaf-fa5e-43fa-b948-87453cd9afe4\n03263301ea9a6a06e29a05a47d076495678089c1b6c26e12f21e4c492022e42d\n0447b586-8f11-4990-b0a4-8e749aff776d\n045ef734-ab17-4429-9aed-9acbcf99ba67\n04PS24BI16\n051dfa33-6d1b-4a59-a276-097f0e4f3d40\n05630396-2e06-4d8a-a787-e8f09185c1cd\n05f25fd1-5005-40e7-af4e-b1b7c3a9b504\n06203e05-beaf-485f-aca9-9ed069c31ce2\n064a69f6-019a-4ad8-8040-00b76f0c1327\n065f0e1d-c690-4c60-88b6-b52359291ed3\n066cb1a3-4e9a-4ea4-9d6c-6b1aaadb7936\n067878e6-ecaa-4a86-bcb1-3c64bfe29133\n07127600-ddc0-4a98-940f-9c3d70cab600\n0718a5fd-5648-4a0a-b5aa-346dba92a750\n0747b49b0815279145cfafddb5cba1b9ec31e6b33972174c16e3b739c6051660\n0762c6a0-11aa-4e43-8961-d404d71c5b75\n0769cafb-33c0-4cd2-b1cf-36d7e38bc524\n0789d351-2a9f-4393-b447-b3e2b103a3fa\n07ee344d-8eb4-455f-8cc3-f641406e8820\n08f94a7a-a29d-4602-96ce-c47f0412663e\n09032u59032jf90u2u490jgu23j9j4u904jf2398d90rltjgvn094u9083095f894kofru9et903vf90t34k\n098462b9-d697-4718-9065-8b85eabb1978\n09b91259-56ca-4fb5-b452-510a58861ce5\n09d25e094faa6ca2556c818166b7a9563b93f7099f6f0f4caa6cf63b88e8d3e7\n09htfahpkc0qyw4ukrtag0gy20ktarpkcasht\n0EOBvZqsY9i9i9lem3Y7frUbQbdRsceu\n0JqF84JhmKqCPyRbSvDHYSsp6ljwW9NK\n0Thsd0MuPdq2dNtajXHbPltCJSpSbjSRSTcse8b09iKLfCG5FSQVQogdDbqw3ct4\n0a6b944d-d2fb-46fc-a85e-0295c986cd9f\n0abc54b8f26911eab443a45e60efbf2d\n0acc4bcc-b752-432b-a797-5c22a646a8e8\n0b999284-f686-4aad-9bf3-bffd57c099ad\n0d0aa821-8b30-49a8-8c2f-d3df30bbe88f\n0d1f1ee6-bd6b-4477-ad91-bb12feb21150\n0d34a0167a7f06d568506b00c4a76f3d\n0d96d6a8-d955-4d9d-9a78-942d5ab4af41\n0dd09f42-1031-4c6e-bfd1-ac8a57d53221\n0f453b8e74d2da2ddbf069fb795e530bb730a418ac3764e3f2a8d360c648a412\n0sj54sdf5k4hj64kjhk897ghj123ghn12lyu3pui12sdf123s58\n0wzvzzSfREVECrKr5QHSwcbglPHu8xyX\n106816c9-bcb5-4a05-9d51-4dda16a357c3\n108e6977-5ebe-4dde-b3dc-7fe81f69a112\n10a40bf1-bd7d-44b5-8bea-5575d35977a5\n10b1346b75e107cc522ee6ad440d409e\n1163ad4c-6e37-4dc1-9196-dee147c1a8c9\n11ca6be05d2043f2bfa680fbe4d3883e\n11qUmfJ6IjWjxPtVSGeIIde6MNu5xjYODS\n12$6KSzf4O2m0RFYRFOzN/vE.qt0tvCS.BXGIl0wFk4FZ4IWf\n123\n123123\n1231232131231231231231231231231231231231231231231231#$$\n1231EQDSD1213DSSD112DD\n1231asdfsfwefqqq2121sd\n123213123dasdsa\n1234\n12345\n123454\n123455432135\n123456\n1234567\n1234567'\n12345678\n123456789\n1234567890\n1234567890123456\n12345678901234567890123456789000\n123456789012345678901234567890123\n1234567890123465\n1234567890987654\n1234567890987654321\n1234567890a\n123456abcd\n123456poPaertr\n1234678901234567890\n1234abc\n1234nbizz234sunshine-ultra-secure-secret-is-awesome\n1236547892584897\n123Abc123\n123Abc789XYZ\n123NotAParticularyGreatSecret!!!\n123dung\n123qwe\n123secret456!\n1242342sfsdfsdf\n12LP7vjoZCJHiOfngtWZQ5PD6QK3LnH0jCJaizgQUG1Ak0w4RtV7bYotIunRLJkf\n1337h4x\n13dc93ee-16f3-4ab5-9ba8-a1990f4317aa\n14023a7c-9a6d-47c0-a7a0-7dcba4986326\n1452a81c-f930-48ef-9475-9c13690c2f6d\n1580d64d-b71f-43d5-8e3b-02330b63175e\n1623fe52-fdcd-4a91-8c46-8278ac898eb7\n165d5ce4-1432-4f44-bbcf-07ff7af1fa62\n1696536f-1976-73b1-b241-0b4213908d39\n16cd8e45-03fb-4c18-b154-8a643491e455\n16eff54b-4b12-47a5-bd35-1d4f4c1e199e\n16f237faf903a49a3e6b7a5261fc3ac4289ffb4634df4adbe07501469fd57c9c5a6b154a4fe3c5ed51fd21a31c1132d1e14a19f269b1851bb42cad005e4c26c7\n1704d7da-ab28-4e54-ba87-c4d72f7c0738\n17216bf9-e84f-4763-b913-7069be146971\n17253885-3613-46f3-87e3-845211d1b14a\n1728gj3591bbqwer0293aass84\n178817399504849sgfjdfdafsajksaf\n17TKJ5LyCf14G5Ravea_hyyl6pHRMI0FF974uzIvi3o\n17fb380e-03e5-42a7-9b7d-c4bb3f6d62d2\n192654bb-16ec-4b6a-a0b7-81655e8d725c\n198cba34-7b65-4bcb-be4c-07d4eb16b880\n199f6bf6-dc01-4868-8c0c-d3e1a3f976bb\n19d1240a-3d5f-4d31-8034-896d65b9ec9f\n1ASDasas12412r13asaah992394ksiv129dg912\n1Bjp9ERP{o7VF`Q\n1H3Eg14E%1\n1Kun\n1QhUrKCnq1P7u8sPn3HmnTAyxYb_FktcERlxmnE2nIE\n1a3d8a16-666b-4697-92b3-dbb77f6bd135\n1a9030fbca47a5b2c28e92f19050bb77824b5ad1\n1ab72d80-73db-403e-827c-91670fced629\n1b0b2801-cf33-45f1-9c67-9af56e5196e8\n1bf3412c-1c4e-4467-869d-4e45639b1a61\n1c8234a3-26b4-4486-a14a-3162b325c1fa\n1d22cde7-427c-475c-83dc-86a15f4f3e12\n1d233cde8cea5d9c238859f6181d1d30dc86fd5135bd8c0b912936b22397dd26abf3ef611d38f6866c48c8a71ee8e7b679a1a4a0b25543953d6752859f6a4362\n1d4b2534-5bb4-4f12-98d6-48ddf5bc0946\n1db158f6-177d-4d9c-8a8b-d36869918ec5\n1efc0e16-0b70-40af-bbaa-04138f8281c9\n1f427169-9b81-466b-9703-fd21d0c5c7e6\n1f6l1f7kjloqj3j5i98s:eyJhbGciOiJSUzI1NiJ9.eyJhd...\n1f8rfpYtEXVFEkYah829jIivC5GH0CzHflQThu4sDks16U7jwfCB0rx3Wh5Z2exD\n1f90da906d5ee7f4c949be2abd19b8b3\n1fff2f470577340c79ee83b7ac99bcf33e8b92123cf2f62511e24b621ee261b8\n1q2w3e4r5t6y7u8ı9o0pzaxscdvfbgnhmjökçl\n1qaz2wsx\n1qaz2wsx3edc4rfv5tgb6yhn7ujm8ik9ol0p\n2\n20$$NAD##20\n202008191149\n2020@azad2##*$\n20a59a6e-affa-4bf7-9d65-194da4ed207e\n2127bc9d53d2ad041ad4fd8b0968a7849a808fb665e0601c9d2bbb9ffe6d0f9a\n212NFEJWJIRJJIO2IIRJ3KRNK2\n21689237583884\n21oF5r1PjXpCQPtR8TqG\n22561edd-37f4-4445-9bbb-05bdecdd1c55\n233\n23347$040412\n23347$40412\n234234-234234-234234\n23423423423423434KLJDF\n2342R4FVCXC\n234@23!%35678\n235lk231;24kljl1j2\n23d852b7-2091-4206-b63e-f786561aeedd\n24a01a8b-3376-4953-a736-6febadd6e478\n24b8de12fcd388ccaef66794f69ddf93c04ec31a102e572d8b413dcd896deb6b42153a9af6a84c597c95de6f452ec069c63c533ccebd1a9d3fc167f31c4c160e\n24f4be7b-35fe-4bea-9f5b-e731fafddbba\n24tngvzaictc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\n2541685412369541\n2546cb1d-72dc-4a5d-a1e2-b5d671c69f22\n2577b536-6797-4588-a199-b476ceae95bd\n25b2a507-c1b6-4cac-af58-731fe047a385\n266dba23-d1f6-4610-b2b4-44733a084c86\n2699aa04-05f3-4052-b02d-5497bb9e965f\n26a8558e-da8f-4656-9a6a-45d3295751ae\n26ba80198a19c222cd723d0d2c324dfa\n271fb17d-f18a-4f21-ab0b-d6219f7c1a74\n276c628ce33a59b398e4bc8f961874f454c57cfcc77cd0c27e4efc429095bd52945f465786371701f96ec5782d9379b287fe8aa6b5d00ce47f65f89fd12bc665\n27FD418A5F871868E783C138188258EEFB696ABB953EF3FCF59F951751CDCC3A\n27c12e2a-6799-437d-b156-439e411db871\n27c1eabe8d71b5f0c13b4a7d3ff5e34eeded8474\n27e2d7b4417e7a5f2e7711b1e32b1f6f101f4b7a29cae2d40286b3ab6db0a78bea785d715cad404afe370410c708a3baf507af27fa735531ae2acbe8fa76d769\n281bbd5c-e9a1-4baf-b531-d952d47c3588\n2839aab1-1155-4b5c-a606-4a3b4eafc706\n287a046a-2682-4f83-bdfe-823d3ac1b92e\n28a60729-a897-403c-abe8-8f7d9b1422a6\n29b46071-a9b1-4de1-a4f2-d4d953da5b63\n2CgPZFnXfXrjm7sX9hgkpnrEdBbfFzRezAjqD8EoNKIILagC5BwMm54pA5hzPLno\n2Rz4K79FuhKrec3BTWPx9b1uesyOdFNh\n2ac67b095a17492944e30284f8fff5adefae43b3c34d6b7b7d82d0211766eaebe8f69fc65b3ed105faa7e7b4c3c62021cde3ceb6fae6661fa05ff105a34b96cc\n2b9b62af-591d-423e-b47a-96b614d8384c\n2bd834b01da284245c1a34a931446d19cd5a209a82152cecbbf7987ab6b0092f30850b19f76b7853a5fcbfb28ad4ab696b973155e432c1e52099e71ba179d6a7\n2c2d1a04122b6a9cb1a23c7951e519d87b006a2aad632802ae54b100f7aafa9894587a18b3f69b206fb0ef2226f9a571f8132d1bb90bf2ca9a4763e8f4d0c258\n2c717855-cfe2-471e-97d9-afa63599692b\n2d034746-1g04-1a4h-4b5g-34f5g8h803r8\n2dFfbZmiT8oGl5LeVA3Y6CGm6nBWErC0iAx76T0VwJ6gJ6UuqECt1Hq9qMKCz6Zw\n2dg8cq7b5cbo000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\n2e0258bd2ec730fe81b6ee05ebe1952255b2267cefb8e6ffaeb5c40f06e2636c147d99900464644abc67b2fcf0c23d4a\n2e0dbb30-6b9a-4ea9-89ef-cd60e02c8b43\n2e54cfdf-909b-47ca-b385-4c44886f04f0\n2e6a98abb5b23339ad14601d3bedc1d23847498cb18daf8cfc98c2a2095ec8f47d80053f6d4e22b8f6419407ac3083dc\n2e8n@wmeoX!hV\n2hFTNm7mWlduR3NFRdOf\n2l23lFLf4L239sd477n\n2lbva54qylh\n2nJS=TpH/qBfB=NI6:H/jt3@5B3IBhzD4OjWi=tCH50Bjy2=JCXO^]XeZUW47Gv4\n2q3sdfgdf\n2r5u8x/AD*G-KaPdSgVkYp3s6v9y$B&E(H+MbQeThWmZq4t7wzC*F-J@NcRf\n2rF0BA9ggqNmixWe8kyloygX7I2HNtRB\n3#9iB80U4EjUkyE$\n3-C0mm3rc3\n3003457538A4D9DC2F69E9573132EA0354930B9CE9855D4EBE7F1645FB6BAD97\n3078698059b21d8ec30b0f506c20854b5ed59816fe56cc47a9177da6f258adc3195472ed82ac45076ce847dad93fa2ef294934ad644a86fd255cc75e20efcc9e\n30b41e87-5f73-48f2\n30e4b41c-d006-4654-a7a9-18c1628dc2f7\n30e59672-3bb4-4690-9f74-ae20fadd2f54\n30ea254068547749377862e7d9a644c1\n311d5e26-b00e-4ba8-9916-ab7d3d6bb714\n313244352657554132vr4tc4dt5t34t43r3s135rd32vb53yg5sf5t5vyb5nuvc54tc\n315b14d2-9e4b-4eef-88ad-2e2c8dc772e4\n317d9e66ce8ece72\n31dc2d6c-eeb9-4f5b-bb12-e323bfe7a809\n320wa6n6nq00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\n3264ea9f-e107-49a3-b10b-5c734abdc217\n32jhkic!@#Ckx!*)GGM54k2v432kcl3j48$04#fkGK\n33291eee-b88f-41ed-8015-22738e915f4d\n335f37aa-c32e-4d01-98c7-763ebae43a04\n33c78636-635b-458c-9345-fb971e24330c\n33e86ac48e993d06bb3afd382863457e6bca79daf983ec4ba783e75999b1f4a000\n33e86ac48e993d06bb3afd382863457e6bca79daf983ec4ba783e75999b1f4a000e686223b87f05659f7f85e0d369a596d32d2df6f76c41fca708c23a7c15488\n33e86ac48e993d06bb3afd382863457e6bca79daf983ec4ba783e75999b1f4a000e686223b87f05659f7f85e0d369a596d32d2df6f78c41fca708c23a7c15488\n34%%##@#FGFKFL\n343F!$%%JK2abeejkal\n345\n3456sfnJaydeep\n34U*gd^&G*&D#Ge\n35186fec-1d3f-4355-81c4-be0fc5c6a93e\n356646e6-9457-4742-9f35-64f4e56e5c0a\n358e7ef9-1fed-4caf-95dd-526b96386ecd\n35dfdd8a-2fc1-4985-911f-f7a363977f2a\n362f82e2-ac32-4dd4-9c95-8995429a4e88\n370ec542-7db9-4552-b2c9-de77261439ba\n373f8320-899a-4e26-99fa-9d4b167218dd\n3749059b-b686-489a-aaf1-10ac2448f051\n376IJicrdyBnQT2sr2P1yWAy4ppAtpNZ2dlPe4lHQbMSxTkaa6TXQWRb6IXbxVLn\n37OIHY(#b#*H0g9#_Gj_(#HG()B)@(_#HBV)@BGiBL@!@_\n37fc9528-6dec-430b-b9e5-bfe82f82caf3\n37jMq3zAH62cnOlcsxrJaMExu2DuaaWn\n380d4bc5-ed6e-44d5-97f3-47bc69a3e561\n380e613c40d74299ab9d99b4f997b283\n384579834yv3n49v85349n\n38af0483c50d39ebd0b58ea81a3fc366c1995c4da5bsuperrandomkey\n39284932849302rejr2\n3DI3@$2qi1\n3JVhu6aTifZERvah1wNtH9aIpgqGBESbKmlcu6fg95LWE6BlSKnTeSGmffwoTHTX\n3KmEa6jlLK%#2MLm4srJ2XJioeP!DNNpvMzW\n3PnS3RF6RLFWwCGctBqEJFyUvcgJTRq2IqhBMHV9h2GMGCrDGnG7pvtBNgGkLRnr\n3Q2CW$fdzpkxE^EQudtH3yC%a^xG9a*SX%7R20@dDaWm#z53kumCjb#&Qd7NjCr@3HLYEdWhWljb@128y0KMOc6GBy3^qGb*tUH\n3ZGErMDCyxTOZYDp45GGD\n3ZZ]{pp771!fJafr@@%13FFFsS@@41r\n3ad4d3a0-f0e5-482c-90e3-c9bc0ee2073a\n3b167030-1c06-4736-a1b4-22e8940d8ccf\n3bbd24c1-1b2d-44b1-af13-41546baadb11\n3c0a03ad-b12d-442e-a6f1-76814ca91769\n3d20e6c2cd972d0a2a8d61bb9e62b4ea4c\n3e2cb015c66c0610476c93d991462e097f0db767907c1a649850a1719c305b627e72b34a0933da69c1e0fab83571e553601da38f0645282e39b3831590cd042d\n3e387369-1e29-4adf-863c-e7a33632c3c0\n3e894436-1e7a-42fe-a926-aba673f1416a\n3eefee55-c7f8-43a8-9a77-ed9d217569b4\n3ef98396-c8a2-47ec-904c-bfda64457092\n3f017bc64bb365167987e307cc41c9f4\n3f2QIb2Kg2DZdii9BtOyMLp2p6gLdVrwFJR8hG\n3ff4038b-4603-4e44-a175-e12e692d683b\n3lt1gr3\n3lvXDtIquzg9h0xIUqmBf200do7EYieXUGLwP6DdnYVHkProeuSJEYmHsktT1Uhn\n3mand2heste1kanin\n3nC0d3D$3cR3t\n3swsq0g6jpw0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\n3y8raz35\n40014e96-9a48-404e-8b7c-fbdf761081e1\n4167234YURWYdsaghgjhdfjk\n417b6b68-d3b5-489f-9e56-1ab2b8c51506\n4196b7d9-23c9-4ee0-b406-f6fb862a5c66\n41ko3zHV9oSrSnnQHZ8XYpTsLE2LfsBqqg5i7kyZ\n423asd43sdff34fdsfs\n423d82d6-98c5-44d4-9678-ecd157c8f97e\n42isTheAnswer\n436605a3-628b-4cf8-8d23-4da1c2944bb7\n439326cc-c23b-4837-9708-922576ad4349\n445c2030-704e-42ee-8cb3-5809aa58000b\n4469SD13051EB8986C6HK3F9617F3135\n450bd60d-ce9c-4c44-81ce-8ed78c29ca23\n456123\n4584432/*g4f56d4gf*/dg754+gf8d-g*df8g6544\n45890GJKDLZEEF567890\n45HjKT46cpEwVRVm7WFPeveE2pdefC6LIy17kkHMEvAuhZrdjON417VpuU3xgxYU\n45b29b92-1d4e-4d5d-bfe0-fbdc121b815b\n45df22f6-e862-43a1-8fd8-1d40740a0c84\n45dfghusaod123464\n464d5ba5-b88d-41fb-bfe4-7300ace40106\n46958fe7-54a9-44a1-bc38-103aa35baeb1\n471842D1EEC9A2BD2FC972611000634C7A93DCBE488BC697351C6635B4143B93\n47904500-eeaa-4fa5-9e3d-4c79e959cc80\n47b4d5aa-a726-4411-bdaf-b539953d373d\n48d8c718-2038-489c-8cfe-4971c5d0ff85\n4974197494749749HHG\n4C8kum4LxyKWYLM78sKdXrzbBjDCFyfX\n4DCpyWoI4HAgcrfxtD8ayUDRWW187oBnqdutsp6xCPC01YvcKswlLMEwlos64GeX\n4QV0u1o8v%\n4YOURSECRETKEY\n4abbcdd2-6726-45e5-a648-8df37def146f\n4bc3368a-a331-4cb1-8418-b5871beac3a2\n4bd669b1-150b-4a54-bebc-b9581556b59f\n4c5698ee-9d88-4d3f-95eb-a94eadb7ac69\n4cQoCtY7yXZJeu5KbrQKF6EC9EA71EScuyPcDynCaAL8zxaGPQN6xGgJSDvrRQKT\n4d0c76e5-af56-49f3-be8a-ac8813235c3c\n4df6faf8-e927-4020-a5e1-278bfcc03008\n4diU%&w*WLHBpkq@BqWPK*443LA%k9M4\n4e0b09bd-4d8f-441c-80ed-74ed195c6b01\n4eaaa03a-17f8-4b8a-a36c-4fcea35c9b09\n4ec76c6f-2a6a-4632-824e-241eeab81aa2\n4f211376-2142-44f5-b8f9-b99f93d1019d\n4f8695df-4864-4e87-b4f8-ca008dcca09d\n4fd1a76455f8d7dee8b6c57fd42b8cb0fb4f31c4f2fd84aa19a0f8d458f7aa9eff4f0ff61ad2391b623e41ccc8bc2fd43ec1bdcccfebb961915adbdca6a4ce15\n4fdfsdhkjt54343fdg4646463grfgdt33df44909tfgxfmil\n4oi3tujiorwejfgoiwjfdpij123i-03urijewf\n4ukI0uIVnB3iI1yxj646fVXSE3ZVk4doZgz6fTbNg7jO41EAtl20J5F7Trtwe7OM\n4vWgpyTGzh3UKueqg43Y\n5009baf0-a268-419a-8c03-e1bc12ac37eb\n51129f085f3e1a80\n517dd49c-0946-4067-97ec-83691250a57f\n521b18a1-0b64-4a66-8fab-8276db177220\n527347d3-9653-07dc-adc0-598b8f2b0f4d\n52dd9132-e667-4bdc-bb93-09f3f21be45f\n52nhkmxmqb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\n53860502-3836-4112-b640-57c24fda9680\n538dc651-38d8-4438-9f9a-cca06cb2c3d6\n53cr37K3y\n54265f24-b1e3-472a-a005-f681a905488f\n54525454525452ewewew2\n5464644545sdadsdasdsad\n54caa1b4eb546573434a512f69534a41\n54cfc24c5c365665b890974b110b18b0\n55157c60-183c-4294-959f-8ef24191c81e\n5525278\n553c7788-0d40-4e45-9131-e1f3f271d1ea\n55599a38-2a2b-4195-bef9-c08e869615c2\n556dcc77-1b7e-45f6-b95d-fcf22fb897a4\n557c00358902f1195c019235bcae6ddededf151613f9743702448bc300f03d24\n558d3107264f726bf1c162b12c97b1d88ab3831c2e0905eb2b34095317a02445c30be9ebc572b3dc6e1d3f552bff1a30ddcf346429d279a02356e262edafca58\n55F2ACA3C5E8C7DCE1B4D2EA9D853B66040B7565F4183D33173EB64BA3A4677A\n55c808909dd4e45ed22382ba\n56119ae5-ba8b-4946-95e4-7c870f685ecc\n56fgyjfg56j^*1643\"5&667ojh8^&5449758jkn6468566f25\n575j79bl26k0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\n57db0dc6-b3b2-4507-804c-ecf82d76efd5\n586c2072-4e37-4dcf-8df3-03d72b24e96c\n587342f2-04c1-4688-b5c4-890e39cc3990\n58a0288c-5d4a-4e72-9c26-9a6d37a05af5\n58d019f8-0a1d-43fe-ac8b-c3fc6632d54c\n5968S5Rrxr2y1qzrLXrtDxqILFjvHIG3\n59ade1d8-f857-4a5f-b82e-0e65a0712deb\n59de221d-7a52-4f34-b21a-c9113b6513b4\n59e2a436-6ece-46e6-9e6d-1d29f3ddb7a5\n5a27f487-c871-478a-9956-0dcb6a4228ac\n5adc220945b6bb01c184188ab496dd526cd610c7da3e7edf399a4b77340b96f7\n5af76599-4d52-4d6c-beac-ae647facb61c\n5c42c308591ea925e4eb5947\n5c61e00e-1b7e-4e21-ad97-93149ff6c4c3\n5cdfbf78-0c13-40d5-a5d4-4b66c5157fab\n5d8be3ac-6ebe-43f3-9f4f-c06fabb317f5\n5dff3d8f-e42b-4291-a779-3843b4a6d201\n5e1d9c5af3ff740fc791354f\n5ecc3651d00K500767c792C3\n5ee82bff-d1a6-4022-9928-9ac9e4ecfa95\n5f016eb077bc484d4df4d5c0a9c0c3340bdc71a22a1aece961381d2b2a3e54d89b75f149042ba1e3b901843fabb577e343ef\n5f14178d-945c-47ea-85e2-45469005803b\n5fdb40b10f60f2487f2c675dd9eaeb7a8b62f0e4a33a71500614aab963febd35\n5irk#&w1qxS8bm#Z75jdWw2bWJFfkTKueGvtHBXx!3RVnrWM@be%Pccpqj^B9sfjuw##XQKO5n6$Pk^%TEQ06!rM7G1QJgPAKluQ\n5mqrMv2tB3rfgNVEN76tystmAxfDYHqqUQfPwwfxGwSyYxuT4\n5pa0IYgVTUpuXUixWDEGCZBfxNkywlM8IZuFWRL5DshEH7DdNvw0nsT58CVeApo4\n5vnjwQXm793U80xOS2F9FUcAzoWgElP4MFN8atK3ZlCdYMMFLfr1ECXXQb6EyAYY\n5x0b2LMP3wwxgdKyUlWX2SqsGu7kWFwaBtOAIqejcGqAvVDeam6oWu38VgThnv3Q\n5zkCv3Ss7NSP9ll8CKrZjuNbYhsXczOT\n601bfe94-dfbd-4cf7-adf1-738426ab93bb\n6021c6d9-fb12-4b9d-b67a-28dd773de55a\n60261a4ebe68d1164d6bf01ba973c551\n610fca7a-a5c3-48c0-aeeb-104086d9e16b\n61198e6e-eacf-42ab-83a0-15caa17edb83\n618fbfc0b4f91d87f9d226990284031457515327cad670c6f7abe31210e32c6dcc0fce3dfcffaadcd6d8397aa21ef463fbe639d7abc224f85bb0a6c3fe8947b3\n622f56a8be59e0e54de607bbfabc7258bf1b5994fae614b6fe57\n62a0de68-414f-40fd-b9f3-6e56a50b4338\n6327407c-2eab-42dc-ad27-3f169c238338\n639b0c71-37ae-46cd-ade4-51b7a3eb032f\n63b5d085-fdea-463b-8a18-151e0d4a3eda\n64756E67206465702074726169\n647ef897-b502-4d27-9d45-3025d0759a7a\n648ba353-76bb-479c-ac1b-7ac64e93f532\n64a475be-0112-4d04-9005-f06189ae65fa\n64dsasdasd#@#$%#!@345454@#!@$%5464\n64e8e533-086d-4234-a699-2268c9d9c04d\n6565df82-2a5f-4015-803c-2398f87b4291\n6662df14-f5c8-4a5b-ac45-969b2b4026d9\n66a5dc87-93e4-43dc-a569-4c14efe1c4ac\n66f5c241-a81d-4786-bc69-3099e4bf2707\n671bb143-b81e-4b2e-a407-2ab248ed2503\n671e41d5-5414-4760-9b7e-e8e290001dd8\n678e905b-d708-4b72-9998-1be4f60a03c6\n67e1d9c5af3ff740fc791354fff\n68V0zWFrS72GbpPreidkQFLfj4v9m3Ti+DXc8OB0gcM=\n692d9244-f880-4575-9422-997be8c40a0d\n698c2695-0fe5-4d3f-b73a-91f89ecbc1a0\n69d1e8c8-5661-4ff4-a1f8-3d1902b60066\n69e8c7a2-b01f-4bb2-92a4-48f958557aef\n6EA4CBF59741D187948ABC9432AF9\n6F8EC8A5-FF59-470F-8758-61DC18DB40CF\n6Q94WrWZqsJd1BLBsPUlM4Nk1zQt80zAfPHPMRckkBz113KWXXiSpT5IFmgN6qhy\n6a5c96762f3bdf3304eaf000fec634f31b008500\n6a615f1e-a3f4-46da-a25d-df010a442b93\n6aac42dc-d8cf-4ae2-8cf7-6a67473d0b37\n6ab32537-f0c7-4e55-829e-2f5c856fd7f5\n6b281ad5-6229-4135-b17d-a916218bf500\n6b33a4cd14a84abccf2d004d977b36d813838b09fff7addb4e2392b44b528f261865c66c582228cf5ab2df981e2b3544f0c7673778cff494fb755d4947760cc0\n6bb269c1-c8ed-4635-b24b-ba8add693308\n6ca303e4-ceb4-4e08-abd7-c220cfd894a9\n6ce33aa7-3edd-44eb-9060-74c61e3a96b1\n6e3b936c-886e-4be3-b586-79144782fbf7\n6eaec9d6-a20d-4c98-bc2b-79ec92ede834\n6f5f7f9002a8636f08e54138fbafa2c229504edd3b4a36a549f17e73a14d0e8dbbee7e0f37e9e6f342af8d5d7faf741e24493c29626cd90d7e6323205099c72f\n6fb61f212ed7162ca5309e9b9bb54e8618343dc71fe14e556e1f4929b62e896d2aa975439404e9d51b97fa1bdb95765f155127d5791303d39291b7d50c1b50cd\n6ffd9faf-14ec-49df-8e1c-cdc76862b420\n6fqRG657PCzTKtj46xmTQRZLCbUZz6JXRTDdtQrPbQHvNeesWZnUrt8DedNoOkFS\n6hnNsBbC9DffAf16nDotqOFGwnZLQAuH\n6jlRvvwpO4\n6lIPL4h4jZN1rmlzdJ5wcByzaYVy1HDCWxascNfUrrBkJtvSTPczMzJETtE2b6bv\n7086a497-c6c0-476d-a127-12d0aa402ea2\n70FHyixzE6MA9K8mfqLnvdrn_5o_QCHW9d8wDzUTrQZGpY9\n71860203-4128-410d-8834-55afe842d00a\n71d4ac14-554c-47b7-a878-b25967305c5e\n723405f0-74ef-422e-ba58-fe8cc08d40d1\n728831f6-5471-47c8-b53c-af7218f33058\n7361a1e95859907116daedcade736e6465b1440ada579bb94a3a3141ae651820\n73985573-e172-4652-bf58-50845fc2cf72\n744a4795-fda0-4600-9a82-6440a5f9ad0c\n74a98499-61fe-4695-8c8d-39471c1d1174\n75a730b58f5691de5522789070c319bc\n763gFamOOz1gcOYveXknQJ8huDSpH9RRG2Y4C9esyg4MPZf8RRjCDMuK5Ynpb1TO\n76ea5d51-ec77-48fe-ba5e-f949431b5fc8\n7764D2C57DA5A93C1C507087B3B44DC3D1E7709D4AAD581F616EA3580D941F3A\n7777777777777777777777777777777777777777777777777777777777777777\n7786782d9c35f7226cf26330e2e7b4e6e52bca4386d74d820003256f6082423fffdaa1f035cd0e06e3e41c8e8f8c80c7fe200384ee1af78f839605e173d4537c\n7786df7fc3a34e26a61c034d5ec8245d\n7848b4db-4c64-4ea1-ac1e-fe6018eccbc4\n784sdsdsdhyohsd-098nwqjhu7324gcx64c847324gcx64cw5evr743c18448484809999999998\n78d6539b3b78a8680dfbfb2240358acc9bbe4f5d71a02e0885861fc59734ace4354f58a91a1d43e2861ca381af51fd4bf29f729fd62fc0365a0d5c75f45219d7\n78uighjfyuyu97puoiohgf879\n795731d8-aaf5-4c34-8824-27b65735415b\n79816f7df9fcf43f5bb6bd7a45a2c9ed\n79c7bc27-ecdd-4cbd-ba42-fa1e46934755\n79e7148a-995e-4c9f-9107-cb01f5443e52\n7CeAfFAW?=-7pUVhgp4=6k^cm\n7Jnp8SvrN5S58EuYQGr3syUsuivEKhj1EbirRjPO7WnkAUE4y7uHEeKAlnWdd1E3\n7MPOu1IDBsTerTnLvLMYpp4vE80sRYFv\n7RKA8nk9LRJKVpqPVcNJgk4qtLyMUYQH\n7UO4VOU7PW6AYF53OL65ANYA8KFVDQ47FMOAF14MVI5MWWQI1SM224WC6QU1\n7a1c52a8-da7b-43d1-8b36-703e61cef57d\n7ad14039-ba9c-48d9-a0e5-bb902e8c17fc\n7ae2d07b-c5c0-46cb-add1-aba2280077aa\n7af9ca9b-cdad-4dab-ac88-153ac789790b\n7bc477e3-115c-472c-b1b5-9c8c36977a83\n7bc78545b1a3923cc1e1e19523fd5c3f20b409509...\n7bzkj0iMcFU9JMnnE6SB\n7c15f5371b03e34f\n7c32d31dbdd39f2111da0b1dea59e94f3ed715fd8cdf0ca3ecf354ca1a2e3e30\n7c5c90ec-64d0-4896-8b5f-bce757fe5168\n7d34bf5e-5671-4123-97fa-704f7ef9db84\n7de4bbe0-a330-41b1-a0bb-9cc5e2747539\n7e43ccc5-cc00-4b22-a04e-659dfefd4de8\n7e46ddfe-845b-4fb0-b880-bb429e240861\n7f*%R8={+j(R#1QNw,=yCb>dP@xM?#!h,uD]_ck23tg2|IY3r|sMtO|m\n7f82f8ab61d7c5b3ba0fc317687c92720926d27df39e86b50ca6610ec5f3a4b977a3122ae1a4707c5da03601d2114e8e39067057ab166e57c37dcbc15afb4c64\n7iMKZiv5aZEaNJpmIsUb2vZgmSjI6ie2uEmrGkPoVc9xpbJSztPz8WzyEcewRlUH\n7jekd*d9spongbobsquarepants260X*E\n7o48itrfmb4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\n7prjizOFkJuWSnyhcIE43OZYcCoihvamYtcWOYIi3E4GuPt5dzOGe1LutttS0Hw1\n7qn!@\"tQ(8\\W>#Wbu35)M\\5X3\n8011adf8-ed97-40e1-b8df-f1e74e50f551\n804be05d-0d97-4051-8355-a2c8d047d59b\n808yoiausdhf86238698&^*76a9sdf08y098\n80a36b56622fc4b20b5409a7f251e510b848a7068fe220ec8febee56dfecf93e\n80fa637e-8083-416f-b25d-c16bef355aa5\n825a8fb5-7b8d-43bd-ace2-4f1c29e3f80c\n829h52bncjhsk73hcfjd2o\n830c560a-725e-4f78-810e-3872b393e8a1\n83163408R12787575075658056027380\n83b03d681a9201300565991d735c77a2\n83bdcd09-ae00-4ef4-8b5a-92121fcc0aff\n83e9c275-5c4a-45a2-99cd-93ac429ce99c\n83ffd73e-7a3d-4953-8d47-0f372b4b3dec\n8400ebe6-abf2-443a-905c-5cffa6e4c45e\n846c045f-6e4b-4e72-954d-f8ae98abf8fc\n84fc16f5-7747-4b28-9e30-7e5e003c8b67\n85a0c0df-156f-4477-821b-eda4c68e8436\n8606f0a0-8d94-47c6-8742-0874359c078a\n8677df7fc3a34e26a61c034d5ec8245d\n86bae26023208e57a5880d5ad644143c567fc57baaf5a942\n8736b71cfbeb3535ed7b950bade9a5612fae439c325334c1d8a8a593b2219a2d\n877dee9c-8b20-4f97-8cb9-d83fa30abc25\n87c0552f-aa63-48fe-ab38-57b7c2ede252\n881335a1-35bf-4326-b0b4-2dc948a4ba9c\n88fabb63-7fed-4ea1-8dc1-8dbb3912aafd\n893d2b5d2f6a44cd555cc036ba4a57c914d7f0c69369c7e05f42618b8c09143879451367e9c5f07a65ec12d5319387148505bc416c16cc35145e9046c449f2e7\n8Dsupersecurekeydf0\n8E85783A-577A-42C4-88F6-8DB76A0FCCB2\n8NcDaTndvnLvi3wR2xWsfLjUPyLMdLki\n8XmZtfSN8kgCCz98mAfhOvUgNLSrqKP9\n8a2ca0fa-56d8-4f6c-b0ed-5baf7aa50793\n8a492c38-f0b7-4175-9637-3865c73c55f4\n8a84ccb9-588d-412b-aef9-8d09b6e2fbb1\n8a84ff69-55fa-4a34-a896-b273ee6a8bb3\n8a850cb8-f0da-4076-8f05-8a8a50556815\n8abe2ab1-ecc3-4566-9223-7a56a91c8e3c\n8bc1fcda-de5a-44f8-a1a1-16e47160c5ff\n8c009fdf-d510-4877-a8d9-bcf525e50526\n8c0edf03-a245-4edb-80e2-06fe8db5f8b8\n8d084516-e46a-4404-ba5c-c42dd1d57d4a\n8d444b4a-a81e-4fc9-a606-cf7bc1b41712\n8dc7dfb4-dd21-4916-b99a-b8bab0420974\n8dfc9ea9-12f9-41a5-924a-3eba26727f18\n8e72c7bd-ec91-431a-a74e-ba70533d7ccf\n8e902b9809ecb919f0a965d2d4c68f65e1fb194416b917d36c5e0c0b2e7c6c59c5b7cdb063036dc1d47bede1f8bc10d15a3e823ceee0d7002c1be494f8a3d287\n8ee7bcf7-878f-480f-8473-2bf18b0e12c7\n8eef46b8-4555-4ce8-89ab-82e63e5ec0f9\n8f0d934f-ee72-46c4-963e-109f72dadfb8\n8f29c10c-6dd0-4177-949a-6272a59da5fa\n8gZMYWuN3WJmx7wWxudvRjPKAi38QbKD54zgInKpK7BQJJlrkwoswaqEy59ZMQVc\n8jt6q2e6MVmvZuDUNkxmRtAPgSaBbrkN\n8sJ3mVLKPRoLRpUHcYedJoFkxXs1RmcC8lYdCuDcU2pdDltA6pSwSENllu7odzJe\n8we7dXRpqBUnrBUi89dTV3JrlS91WXUIrPp5YT3dpjdo3aWX972z_Tcz5ba04aF019JjPG1ky2PZz-EWios7tRDIM6lDHawBSN2JOW_KG78nOwToETshCv7wN0vVrQHn9e6f7TEiwsG8Z5SzNvQsUTQFKtA8OmbEtgCVBrJuGs8\n90246ee1-5bac-4201-978e-79958ee7c847\n9122ade6ec0b61b842cea6f8b7f45335\n91629282-6de6-406b-b4f9-1730a1c4b37e\n91b913e1-490a-4185-9325-17abfc7f175f\n91c5814c-f879-48bc-b27e-ed29c32401c8\n923753F2317FC1EE5B52DF23951B\n923ad73a-3ebb-414e-83cf-8aa29712e650\n92724287-892e-40f4-85fa-27cb58c661ea\n93c97dbf-fa5a-4362-80fe-ddc2546d4c34\n93fLgncU0N6NhTl8Lo0XAZQu1gc8WByt\n94289809321243ESEwe2\n94B86qrvQR41eAbMm93bS7gsXFC0cebsMOaNNR5cqYOxDvIzgm7hUrPkhDCpjike\n9518cfb7-49bb-4e6d-a518-b8de90c015a0\n961bb86e4c60ad8b943127f5c06ba7199a946ed3edcf2aae8262c111d6b143220ca2b1a0ce8c29a3ffc8f13b13da380393db317cfe08ce0ac5fd929d94bcebe2\n964eb713-ff8f-41d3-b304-713a22a05aaa\n96bbee39-e9ce-4afb-8344-ad6df8816914\n96bcd2b6-84a5-4fdc-a1d0-8801073a0376\n96bd86c2-6b12-49b8-9fd5-0e71eba5f15b\n973ed769-a6f6-4885-adef-4bdd3a2f0397\n97672979-b560-4e97-be4b-364cdf18159e\n97accf93-50d3-45cd-af43-074a24452435\n97v4dvcsiQFXQg28nofedo3jemsi4XNaQy5h59n4l97m0mHqhGx0Nnjxv4dv8n\n98172c95-ad35-4113-9212-baa7d36b8c39\n9841hr1u3qs9[{sdfd\n987654\n987654321\n988525e4-ac4f-426a-b326-130c48bb7908\n98ygvbnjhgvfr67ujh\n992fb5a8-ac91-48ed-a344-d9978f439e2b\n9930947274aumrutuja\n9956a6c0-5a75-4d0f-8c8d-b0b361cc4de1\n999123djsaijdisaqi\n9999999999999999\n99ac5169-fecf-4d3e-8e20-3bf2c041c015\n99afe15d-f045-44db-ad62-a2af0a985bb1\n99d1f19b-4053-4cbb-8034-e0e8a8876b6a\n99d8691d-9f06-45f0-a217-8a070322c02f\n9K6whOetAFaokQgSIdbMQZuJuDV5uS2Y\n9_4n13.hs~ns*ma42#@!`\n9aad9509-73bc-4c61-a532-74dd020cb252\n9ad11ee6-cad2-4e1f-8465-145f506b9902\n9ad53423abe416d517e96f490e408972\n9c3ed1aa0ba8405effdb363839caa3cc\n9c4355f5-10e5-46c8-a24d-1232ef440044\n9cd2956a-a859-4dbb-885b-8750269897c7\n9cf43cb6-488d-4bcc-91fc-8003a275ec88\n9cfb22a5-5b7a-4a9d-a7d5-52664230732e\n9dbd8c65-b777-4fde-9471-95c02156b0f5\n9e779437-c288-4d57-9fe8-e5c3a72c913d\n9f292fef-2784-47d7-9ecb-ec8f5df93ddc\n9f8f1a92-288e-410d-97ee-9364f154209f\n9f9e576b-602d-4bad-85fa-a27c80610e8f\n9fb71820-db14-43bf-99cb-c38b407b2d41\n9fc43334-d86c-4a66-908d-e207d6a7c612\n9ff28bfa80b1beaca18e167df071db6e\n9iLWEubrk5REQwQfH3N5wYG6W43Dr8n9FsB7xp6XwEbZRKI0nInBtwX0Xf9Goo2v\n9u8nnjksfdt98*(&*%T$#hsfjk\n9uOxHyH9\n9zadnNB5Ja4Pq8kQAwXALouDh6kEhlWi\n:)\n< client secret >\n<%= (Math.random()*1e256).toString(36) %>\n<>\n\n\n\n\n\n\n\n\n\n\n>\"3(9;@Uf8hUPcWx\"?v\"2\\}@&7{U}!>}]2,^N1Gkwt;\\j]$LV/SH<4-O}@RHJ{h\n?qtV^oH/1{>5dI?CVVay!gksa:74%n/qt)H]!NeGiGX4F%}Q?IHWyj>u%/8N7Gt\n@#A1025locMB09#2s=$!hgsd=Pfer\n@$@$sKHaPpycAmpuS@#@#\n@123213213213ABC\n@3da14kf8s7*&^f\n@@@@@THIS_IS_THE_SECRET_KEY@@@@@$$$$$$$$$$$$%%%%%%%%%%%%%%%%@@@@@@@@@@@@@\n@QEGTUI\n@everone:KeepitSecret!\n@minelev-jwt-secret\n@minelev-prod-jwt\n@minelev-test-jwt\n@proffy\n@recordshop_token\n@the-difference-@ll-we-will-do-is-to-standout\nA secret API example\nA secret...\nA super secret password\nA very long secret\nA very secret key\nA0ZGGK0NexQXXp1Z2v2scWBcjsGRaKsd\nA48D610B9CCE9BDC944D6C9326D982929D674FCFE7DFE656EB3419E8611EBB8D\nA5741CFBC477FAE31A8C1AB0EABDFBB03E13244915D3DB49DF0BA87E902F701E\nABCDEF$123\nABCDEFGHIJKLM\nABrzvP0Z7PiMiJTdfkQIWoNnh7yvNwt3\nAC34-HT73-LLF0-BVND\nACSF78654FDMLJPOJERCERE1Ekn$@@%^%729745\nADFJJJEB6PYVYqh!+S\nE4C70QSPN4ALaJGnUiz52HL7wZwfZOUA\nE86A21D811DB3BA201A80DEF79AC84E73A7EC18C33758C6112ADB9CD2B479CD0\nE8hL94fTQd3!X9QnhVcuHh8G3h1m@y!L\nE924D25A4CE89B28BD456675E6E6F823F4825AA0C7A72F7FCE3C291BE3F3A018\nEAfZasuhuuhdgBLNtf07ZRXyQPcuKPEC\nECCJZNJWLPEA3YB6Y2LTQGQD3GJZ3F93\nED46CB0D0B9A5B707B40CF9BC7E06259\nENTER YOUR TOKEN\nENTER_YOUR_JWT_SECRET_HERE\nEQAXA@12sxwwT\nESCALAB123456\nEWsbBHiHQbkjRuM3aGwjn76OKnK2jyH8kRXrRcdEL3v+kxSFmfCKAdXkMByzxelX+9YAMJU0efWosu7WMnrtt5HCbYMguG2sseydq7d8PwjL/AfTHCwtu8FzBsvM+zz2iGw5UMXMiMli4oXu0/OcCjE2O4Q/3zTQmZnqYmIK5jE\nEXIT\nEcG9zsstz7U2xuupU6oJ1hcalk9Tinv7\nEl-perro-de-Jota-se-llamaba-Hugo\nElectronicReceipe\nEsT0 E5 uNa 53cR3t K3Y\nEscribeCualquierPalabra\nEsta_Es-Una-Palabr@-SECRETA--123\nEveryb0dyKnow$My$ecret\nEverythingIsAwesome!\nExample&xecret#@\nF1reh0und-S3cr3t\nF4B2FDD68AEDE17C7C33907827E136CE706DE3FB5E4EA84FBEA826DA99644DD4\nF9ZhC9fYJGyN842nAaNJttGPRJX0mLruKWsCCzzUezZMrIUfGV9WOJNg1cPWd0TG\nF9qy&s)?4=33s%$2h#F~\nFAD@$!42rfd2#@vgare123\nFBD2F4C3DD7AE9C94B6B408A62513B58CD4A2AE18002D5CA2D1068F9\nFD1!$*NAJafr@@%13FFFADFAqpŹ5!Ad\nFHMuT6P24FIJRo5wl1jK11q57sIxGc1jtO8098TBRiiCNGAAKF9FNOs3Faqk7AQ2\nFIKDZupt376osFBstIIuNa0kXQidWcY6\nFJDKAOFJDKOQKFDKFKDJAFLOWJFLDJSOFWJFK\nFORUMTESTKEY\nFREE_MASON\nFSDAKL124321JKL321312J321LK321J3LK21\nFUckOff\nFUoOd2DmVTePhcKt3JMBFICPCoaUIF27\nFWb7QhtWs1QGGYuzGRrl1gIIFclJgxjGEYYZAMtc2gpaijiQ5wAbxCIWDAiiNKXX\nFYYKYFLUGLBGUIYTGYYTULY\nFfer4rF44fd@$F\nFleetManageMent\nFly you fools\nG1oJqV0ZMeQplXOFMBqtJQlWSzLQCwNX0msJaGJBEi3jbJDz4dXd0w2Obvkrxk8q\nG4bdW9KeW9vDKKdV9AbX\nG8myiWdh74ZxsIrFdVTo3j36ftvoqNSE\nGBVN824VN824\nGCGFAetuHQDP3FCy\nGN8J26qIpjoR2e2tvIUPYcbYRr\nGNmsc93UH6XIQsAiKQrF6G4uXl6QesDS\nGRQKzLUn9w59LpXEbsESa8gtJnN3hyspq7EV4J6Fz3FjBk994r\nGVzzSWmP5nsmbOMQGvHnvAoJqXHaNeDPC6SH3I53\nGY5OO9lkjlhFdRt87456492224JMJkftrsuk\nGameOfThrones\nGhmUx02wMohFXTzfnFZqvYfMv1ZOw2Ij\nGibberish, jibberish, jibber-jabber and gobbledygook\nH1UKhYuK\nH34e626&D7\nH4DR0N_S3CUR17Y\nH6KKDCn:dG]RT@*%$T;Z)7vHvXQ-lGO\nLzm^o>Q-lGO)xg1UcAcEtMaFN$XX\"m@T0FsbO3Rd!whxt*>e,6ej-XYBYAd.#BR\nLzm^o>Q-lGO)xg1UcAcEtMaFN$XX\"m@T0FsbO3Rd!whxt*>e,6ej-XYBYAd.#BR'),\nM+XNGZRp9MtgE0JL5vqreHbaN2zGo6Md40OU9kyv6sjXxyRfmQkMfYYVmKId4RPR\nMCy6jJiYEP2Wn0PJ1ebBv1X6f0E56jV8\nMERNSECRET\nMERN_SECRET\nMICODIGOSECRETO\nMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCIE6a1NyEFe7qCDFrvWFZiAlY1ttE5596w5dLjNSaHlKGv8AXbKg/f8yKY9fKAJ5BKoeWEkPPjpn1t9QQAZYzqH9KNOFigMU8pSaRUxjI2dDvwmu8ZH6EExY+RfrPjQGmeliK18iFzFgBtf0eH3NAW3Pf71OZZz+cuNnVtE9lrYQIDAQAB\nMIIEogIBAAKCAQEAmrESLv5aMLEDwFcyqD0SxLQQmsqB4gvF6IAebprmJUK0ZzU8\\nya0t/Y2EqRjmF2Q/D9qiTAL1BDh/vUmySZaiwFVs/hsiZlSt+3W+KZEtYhRCj+4f\\njlo5TkqqfDjP6s75JNcxZZdGyh5YnPm/1OOsnGULDoLz41VhOJfpUiUZmVsHmz3I\\nGbsoTmUql4DREiAJ4YDmhlz4QKPfowvXqAo+2OVwfWOCXXaefAHEAp2wZMvk6xrt\\nNHvjgql1QONEFQjAIe906bctHTOBCPy5XX2LhAbLOl65/GmyV1txV8MKXlEGA8PX\\nhO5D2zxlz2AUcbDGO1O4D24WDIzXsKkhznZZGQIDAQABAoIBAHjNx5GDeROFaZSP\\nhDP2Xe3XYRBBDWVmJEwJobpmpUx75z6iSLKG19+m4O7dTvL9inHrH8uUk5uUM82y\\n+9SUGs1w6QkYT6jygFxb+wGjKnnpsIGOSH5230HQ9YrFIzoQIGkw1JatqM63HCSa\\ntcCffHE2R4gxpBzo1F/J4qAP8Qnc4fkgU0RgrZTF7TcKaNII5MH4Il+2Ezgcwxhj\\nhed0IS0ElI4MvdD+MrG0fEEEvLm3/mla8PX1H8iKHH1uOyFxEQAyFj4AMC5u08uC\\nk6l/l+xW5EOwlOKOnBicDEKixejc7VK5SyBqT1O0XapSYGaP3Y3fBDf4dFJZJGP3\\na+dIngECgYEAzdwxZ7QG6mj9GFCOIqJa4G+fLvSzUs6q0VmDH3RqtYEkL7pc3b80\\nYkn9Wsf0HSrktRv1TjNy4O5U+xwG1n2AvV7P4Tp4SX/JMJiLDMWcTfFzGDvQ5z6d\\nsZ2g1tvYaTx/B/bR44Febuq1GTPSQCB+btl14L+KqAHBbqKXQ/THo1ECgYEAwF5r\\nSqpPpxcHQ33Uz3ef6dNgFa/Aj4F1giWRIaDBclP8EW4gVXBH2+DUYes01z2Pl4Xf\\nHzrJjnxZ5ONSZDCcL7vD2U+yOSe7+Zf3te/CBW5UJr8lHpNIZe3O/LBhwNOJF81o\\nQAj6DfjF9PW/wVhWjg4SK8pF2Mozt6j9wmf0l0kCgYAi+sdqV6zVKAHZn9aHDA9l\\nE5J46BuQdo2QBSXCsoVvUgJUGdat10+PZAMo6dERI7i5DYchQpzCm7zU7m47BBhc\\nFUA9hTHrS0tkdocqJGnq1Jw6Ae/9WyZwh9hMqg6b0yvCrq37eoARWNBs9+FCBEN3\\nknv1NJba9XFo2zfY1D8YAQKBgAHaJuBOKXwrXZeJw53HwhNnRJqQ2aLIFVCOego/\\n2Pz30Ap+6/LGpPp5/LGAqT6VSiekU1SipUQo8Fii061BRo+zGBykhsvEFSw/CVSI\\nHW8d89N3razQsDbDBmYqcJaBsuU2xhUvwPCXf5hvMUx0REkT25ruVKPUtpDDIMZZ\\nZ+J5AoGAOfqzw/tPD0L/RCIY0gVl93w50MhECU8BUTMy3A1ovSf2j8c5sFXNsgy/\\nyHYGfE5zluVY1G6xOyOvjCPI4MfACwYW9ZTmK8zR6b/M9iGf+RoYxnbQ0xBmrtyO\\n3PwUD4KBoyVEEFCL/UtMRxYwZALHRVZUBadgGjnT8pPxktaN01o=\nMIIFDjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQI9Gl6VRM+2s8CAggAMBQGCCqGSIb3DQMHBAj5X9pErhcqLgSCBMhbG7htniJ8vUmZRVq8rF00MYp5IbLUCFwj8yPEizGf9p65yFfxM1YdgsqSpJV2oHSFyZDumXyL1ujmfG1w0VeK8Vw4/T74ttpo8JAnUI7Z7qS/xi3jbdACJKHCcrGq9QhWikeDdtWn8cCw9EaM5EtybB7ecshukJxSPmeenT28GD05aM5tUkExsInZmMJboUDGHaJ6zJQgad1PwIylwWfsmSn4Lw9zU2MD0PmiqxQ796k4kjrJtQ8is8XCh8u7IFvlaibn/DKTK8WTLJB10KeRQ6TDxqcP0X25tVN/FIWfHE8KIDdWCo2oYqqWyjWv9cuyoYDR0pmye0Gq3jlMjZcsg0r/DLhUfqhZ7TxnuPUaS1aJ4MZXuKLR8nBqOalDeI/IXZSGV9ZTNIndqZkTxCPegD6/1KdgWCYZ6K3oxn1DCu9IUt/haJ4YSbAC+mEAgApGnVMllxb1W4yHgERpgKcz0cLl8zQ9KUkB6gTe7upmTQilXJze73w6sP1l6t047EgMiCnleuNElZ/+WYd+B8V6qJ0izKJp9uZqWu6P+JwlppDhKMfjIIdSwKi+UbtUPTYmu1FN0MzgjEwnp2hTiHwrSKv1LsI3kgn0ML1xI9eXbU1bNfwydFLi3A725A/S1/eK0gOnzid+vlRJdPgY9kC37Q/EcrqMauYbY1ThK+iu2d5Dtdkr/L2XQoeHEh7/mCs/J2o50CPl8XvxozDa34FHFG41phGU6jur0/kejg/QQ9pFAjMPV67xD/D+d3DxAGjs2goqwOHhcvByvuEH5i+fqs8XmqhhXgl2SnYm3mMVXDNE9adqpvWJTl93A8gIJlfZz4rKgJbUJDMYDXTroL+cqiFjeYCZU5NRh8c/LYrpG+RWzK0rm9omEf8ja3kSQK5KIsiuMoGwPQ+W0cZ0dZGBntJeM9aHrM5lgAfVQLPW73ZfoxKYPNMMZ7gIXTRMmoRT3tGG+52mCL8dyS6ry6Ej98DEOJEHAkc9ejRqiLvoW8D4Qaw79udPVCKpt/wHa7XvPbAq/SskOjuhG3gcMfgsvX+aBmHuXjkbQFEAUG9t4UC2C12zodn7o5M0/xr2IdLxxWigkh1X20uuVZuonLfxduMjwhjPqym506o9R9uw6nApw5cZLyJfCkVas5e5KJmjzZThhA0cpG5GdmChtj1ytvNx/PvUqJGs7M0t00AS75HMB4U4Yte3ZFIac6d/YOZzunPZYhRAivjLuzOnasCX6X+Z4I7PQLIoprHdYU3tL5kDmtcep/Yh6FKK9yMdSQ9+2nM8KFE1lOsSVPV/NTClFI1s9sEv4FchPDwsiXhawgHz57N97bORblGchX23BcpPG3mCv23NM/S4cA7RhfQUSzcxZ6SS/vPqrU1bG56MnbcMF71QqMW3V8aLwl3pKwY28FNuPCg4KpxkE4NM2BtwysiIixBwl8hUv7x8ZFF1UMc2h0Cxdm0FNt358l2U9LfnjZMSiLdElWjKVDm8ZGz8iEF6EYWMdu9XX2VHkgAbyoeb9m2wBOX79nQ9/lOawUy70gZOXD+alvnfKdyHWxV9Ij90RB0KHTc28h7Bvn2pmsghGOeHU83cIZ5CWFZns5jOr7AX4WfK+5IEd8ftc896/Iy4XsZ8gRo=\nMINHA_SENHA_SECRETA\nMI_CODIGO_SECRETO\nMOHENMONDALJDFKFLL\nMOVIE_APP_TOKEN_KEY!@#\nMRTZZ3LyqIi4XA08wrpwzOJCDRDwf1sV\nMTIuMy4uNC41MzRALmZzbGRramxz5LiNKiZeJiYlJiQpKCkjJCkjJA==\nMTk2Njk2ZTMyYzk0ZTY5NmQ0NDlkYmQ5\nMUMBAI_HITMAN\nMVg0YAPVSPiYQc/qIs/rV/X32EFR0zOJWfHFgMbszMw=\nMY super secure server side secret\nMYSECRET\nMYSECRETTOCHANG3\nMYULTRA-secure-andreallylong-secretKEY-123456789456123456789\nMY_AMAZING_CHAT_APP\nMY_JWT_SECRET\nMY_SECRET\nMY_SECRET_KEY\nMY_SLACK_SIGNING_SECRET\nMememememmememexkådkksokfopsekfskfdfpkapkdapwkdpakdpokpokkkKPOKPOKPKkPOkPkpkPkpkPOkPOkPkPkkpkpkpKpOKpOKPOKPkPokPkpKpkPkppkmememems\nMfcj^sfXvC6@S&Cr^%MP2^!z!oV^ZIFvAJAQD!eweHUYyHJ2!Pia8kOeVb9@CjDu\nMiClaveSecreta123*\nMmd0VvceCSTb5gPhCry1f1uPTKaGZpFttsu3s5CbIEJN6GGmD1V3D06K2sXS30hu\nMwTeTnnSkhWQt8utGETcmHIGIsOzQZLsXVrpyDG1\nMxmbawlx50XOpKkUMcY2wNjoRmU06g3ComNXJfxfnyt9ESuAKSQxe8FXG\nMy Secret\nMy secret passphrase here\nMy-ultRa-Secure-ulTra-long-SeCreT-of-nodeJs\nMyBestSecret\nMyJWTSeCrEtStRinG\nMyJwtSecret\nMyLifeIsMyMessage\nMyS3cr3tK3Y\nMySecret\nMySuP3R_z3kr3t\nMySuperSecret\nMySuperSecretString\nMyUltraSecurePassWordIWontForgetToChange\nMy_undefinedundefined\nN/A\nN3ke8qLQ0dFeA3qjB5ANsSRjDqXnCNGk\nN3tC0r3W1thJ4s0nW3bT0k3n\nN74Yq7tIfzO9muKLUhJuWXBZNhd9HXD7\nN@9EWRh8\nNEEDSTOBEGENERATED\nNEED_A_SECRET_KEY\nNEED_HERE_A_SECRET_KEY\nNEHAHSECRET\nNICE_TRY_WANNABE_HACKER_THIS_PASSWORD_HAS_TO_BE_LONGER\nNODEBAACKED_key\nNOT_DEVELOPMENT_ONLY_JWT_SECRET\nNSBDSADSAVGSVAGVA3837459348SBCDSBHSDCBAJSGC\nNT3358oUb2ZY4CmNZxhaakW743rAYu3sz8npZmTO3WyDcbfhV78Dqj0qE6gr31T\nNTALK_TEST\nNUGARAY\nNithesh712\nNo-secret\nNoOneKnows\nNodejsApiAuthentication\nNt@sk\nNta$K-AP1\nOC{0V4OG8BjwB|pV'&H*uo0k@7c~Juqwcrhr/ill$s'(p_t=5Z\nRANDOM_KEYGEN\nRANDOM_STRING\nREMEMBERTOCHANGETHIS\nREPLACE THIS WITH YOUR JWT SECRET\nREPLACE WITH YOU DUO SECRET KEY\nREPLACE_WITH_SECRET_KEY\nRINYL99lOkWEtRsdH8h6XdvpqNhQY300\nRPORT_JWT_SECRET\nRSXCFq8TliPYSUzbzZ5QagRxo2vj3XKf18B8IygpxvHvNHlSU5Vh0F6Q7oI1ULMI\nRTRSsvVnnOXBCY2nMjyuudVlEzWDhczr9h76W63Mz2xQmOvD1krIQh6yCMuHyNq0\nRUtG9TnbXrOl1XLLmDgySw1DGgx9QcrtepIf1uDDBlBVKFZxkVBruYKBi32PvaU\nRWjnkbHFFhat6lIRnzLrugiJrShi9WGWapDqVyYKTkPrcEWQNAUGGiGAeq38zttY\nRaYNeaRjWtSecRET\nRahasiA!\nRahasia-Kelompok-4\nRandomSecretKey\nRandomSecretSharedWithTheAuthService\nRandomString\nRandom_Secret\nReact Dashboard\nReact Starter Kit\nRegeifDaudimsoitBuktaqueshurjObWoroudjebteinzyefJinEng1josper\nRemisPassword\nRjbc3kyyoQOpejp9XyaSqPFv1tOjIQIqAZXAF0bxzS2SqJciosfDCtxgjKEatZ57\nRlTul6EPUTutI93OXKb0Q4o2jACB9QOO8da4rFL0rTQcr2KoniwZDmqVjLPjuHL4\nRtRtidtScp1OWuk1Jc3o6irtDCKyWTMO\nRtg8BPKNEf2mB4mgvKONGPZZQSaJWNLijxR42qRgq0iBb5\nRzo9oZINe5wkp790SBS_bVwt5z9qNV3fZ_X4eSOhYJw\nS3CR37!\nS3CR3T TH1NG\nS3CR3TK3Y\nS7IMwwHr8eqHykWY4LZ7M67q45O37LY1\nSADASD423DAS3243.sdad432\nSALT\nSAMPLE\nSAMPLESECRET\nSCSCSCSCCS\nSDfsdfQWEFwefWEfEtWERQWasdQWEs\nSECRET\nSECRET JWT TOKEN\nSECRET#123\nSECRET#12345!\nSECRET123456\nSECRETJWT\nSECRETKEY\nSECRETO\nSECRETO_PARA_ENCRIPTACION\nSECRETPASSFORJWTS\nSECRETUIUUB\nSECRET_JWT\nSECRET_KEY\nSECRET_KEY_FOR_CREATE_JSON_WEB_TOKEN\nSECRET_KEY_HERE\nSECRET_TOKEN\nSENHA PRA ENCRIPTAR\nSET_ME\nSFedPUJZXyofKfUYwJAGl9OaAkrO0sx1CMb5VaIsKCmbOBTe99jefxJUswnrI6mB\nSHOULD_HAVE_PUT_IN_ENV_LOL\nSICRET\nSJBVBVDSBW92U8R4BR78B\nSN3T9pQ1s5fmxtOhNTgKEFllhdgQGByR\nSOME SUPER SECRET PASSPHRASE HERE THAT YOU JUST MADE UP\nSOMESECRET\nSOMETHING\nSOME_AWSOME_JWT_SECRET\nSOME_JWT_SECRET\nSOME_SECRET\nSOME_SECRET_KEY\nSOME_SECRET_STRING\nSSSSSSSHHHHHHHHHHHSECRET\nSSgtrqTvX36&H*Va\nSTRINGOF64CHARACTERSHERE\nSTRING_DE_CLAVE_JWT\nSUPA_DUPA_JWT_SECRET_1_39_992_BLEH\nSUPERSECRET\nSUPERTAJNEHESLO\nSUPER_SECRET\nSUPER_SECRET_JWT-KEY\nSUPER_SECURE_SECRET\nSYpY2RLXLNh2L0f4gcP3xqcmkEmmv0cF\nSagar!Mahadik@Ketan#Shingade$Vishal%Kolekar^1105&1107\nSatoshi Nakamoto\nSeCreTKeY\nSecret\nSecret goes here\nSecret string\nSecret word\nSecret à changer\nSecret1213\nSecret123!456$\nSecret1234\nSecret@$1234\nSecretJWT\nSecretJwtKey\nSecretKeyCarRentalApp\nSecretKeyToGenJWTs\nSecretKeyToGenerateJWTs\nSecretKeys_Overhere\nSecretPassword\nSecretSuperSecure\nSecretToDecryptJWT\nSecretWord\nSecretjwtKey\nSecretodeKe\nSecrets\nSetStrongSecretInDotEnv\nSgUkXp2s5v8y/B?E(H+MbQeThWmYq3t6w9z^C&F)J@NcRfUjXn2r4u7x!A%D*G-K\nShashangka Shekhar\nSheldon01\nSk0b5g2YuL2C9RsplQtU9to7mq5cNtiMsGGNKfSNgo3h9ZtNAEUziXXhYsdgZKkY\nSlap that token down\nSlytherinOrGTFO\nSomeReallySecretKey\nSomeSecret\nSomeSecureHash\nSomejsonwebtokensecret\nSomethingToSignJWTsWith\nSoonGwan\nStRoNGs3crE7\nStanleyLab97\nSu-Per//Sec!!ret/Key-now-available-in-GitHub\nSunny-forum-secret\nSunnySandy*\nSuper Secret\nSuperSecret\nSuperSecret29\nSuperTest\nSupinf0!\nT0lKisoQdYWfFuY5aCdlyQXmDVuJEbg5FuaDyCQjM1qND0VtQeGmWMBeTL2bHWdR\nTDYshdg234348==sj213j\nTEMP_JSON_WEB_TOKEN_SECRET\nTEST\nTESTJWT2054\nTEST_NEVERSITUP\nTEST_SECRET\nTEST_SECRET2\nTEXT SECRET LETAK KAN DI ENV\nTHE_SECRET\nTHEviper22\nTHIS IS SUPER SECRET, DO NOT SHARE!\nTHIS IS USED TO SIGN AND VERIFY JWT TOKENS, REPLACE IT WITH YOUR OWN SECRET, IT CAN BE ANY STRING\nTHIS IS USED TO SIGN AND VERIFY JWT TOKENS, REPLACE IT WITH YOUR OWN SECRET, IT CAN BE ANY STRING\nTHIS IS USED TO SIGN AND VERIFY JWT TOKENS,BY Eccom Site\nTHIS IS USED TO SIGN AND VERIFY UCCNOIDA TOKENS,BY SONU KUMAR\nTHISISACLASSIFIEDKEYYOUCANNOTACCESSTHIS\nTHISISTHESECRETKEYFORJWT\nTHIS_IS_NOT_SECURE!#$%\nTHIS_MY_EXCAVATION\nTHIS_SHOULD_NEVER_BE_THE_KEY_IN_PRODUCTION\nTHIS_is_my_SeCret_Key_LOL_Kkjnasjcnjksna\nTHisIsMySceretKey!\nTHis_is_my_SECRET_LoL_93fb06ad5b387ef3210e90e37fac2e9aaff06929e062ff3671168b1aa20f4e7b\nTI_si_Stakor\nTKQrb8iQ+nqegF/KX5hdIVLwCbeH1d+GziSSOrL3Ye/ovOsOnJfoQ54F7nhooeUz\nTNEsc5UeV5DsZ8sL\nTOP SECRET!!!\nTOP_SECRET\nTPmi4aLWRbyVq8zu9v82dWYW17/z+UvRnYTt4P6fAXA\nTTTNMEAN\nTYGFTUFGFTYDESFTKGFDTDTD\nTagYou'reIt\nTagrandmere25mefaiCaGratuit\nTalk is cheap, show me the code\nTameenk_Medical_Secret_1234567890123456\nTelerikAcademy\nTh1sSECr3TMu5TN0Tb3L43KEDEv3RRRRRR!!1\nThe Approov Base64 encoded secret\nThe JSON Web Token Secret still needs to be configured...\nThe great white silver fox\nThe secret for my store is this right here\nTheAmazingKreskin\nTheMostSecretKey\nTheSecretYouShouldChange\nThinkSNSPlus\nThis hardcoded value isnt very secure and secret\nThis is a secret\nThis is a secret to change later to a file\nThis is our secret!\nThis is secret\nThis is the secret hush hush!\nThisIsARandomString\nThisIsASecret\nThisIsJustAnExampleItShouldBeLongAndRandom\nThisIsMySecretJWTKeyMyNameLeAnhTuana9d-1@amskfnasi$nfaoks-kfnoanofoperjyoeor\nThisIsMy_Secret_LoL_GtvhkLRTgtNdGl\nThisTokenIsNotSoSecretChangeIt\nThis_Should_be_32_characters_long\nThis_is_the_secret_key_that_iam_using_for_JSON_WEB_TOKEN\nThisismySecretKey\nTikFoodApiAuthentication\nTokenEskat\nTokenMegaUltraSecretoQueNadieDebeSaberNuncaJamas\nTokoBuku\nU,E<48\\*jLs7e'q\"6\"5]x4K/3AK%'VAdzG>\"WBSZAs{v&w7ZJ%\nU6DjKMRAeFxPAKJjzp1wTUYOgQJ5hQoR\nU71KzTmpWPjaUWCoVWQGsLuNCYw4KTge3CDdgBOH4ekhYppVML6VxHfvXGgnA9yF\nU7E7evyWh60bRvngrXBAenIJbElLOc69kXiUQEHnZRCijOPbMN3mfiSuBk8ZKySw\nUD3lfuNQagcVRcq5KVA32Ai0HNiukPEb4c1dn5PKV1g1qtmyYr7tTnS9pO6tHTlG\nUITS_IT\nUKV60CZrcafbuvIfIznOlVKkMOVnBNiw\nULTIMATE_SECRET_JWT\nUNTOKEN\nUUbcc8vjUkGjuDyvK1gRTts9sZp2N8k9tbIQaGjZ6SNOyR4d\nUYRHH098754\nUaUCmqDdiRhsRhNkjY3VWNhDA9iv2QVj0Aze17x0BrRZnZOcFWS9zem8J2AhaJEF\nUnsecure secret\nUpFJfpWKYteH5rMHSxst\nUrpq5NW5VCrI53j9dHdyYrcJrvwLW72h6gzPICOcEp3UfTWMMdL6Z1PTwNnSYvQJ\nUsgQ6hf6WJSIuIWpDJHCjcO8KMm3OpszJGLSdXDtYL7AACoukFnNkVuakTnBrBaQ\nUt9mvfOo1NK7B5fQohaKMTmSIK5nCOEN\nUvKLsxg2Be5v4Fun\nV1n2ss1yR5s12o2o\nV2VMaXZlZE9uR3Jvc3Zlbm9yU3Q=\nV3ryF*ck1ngS3cur3\nV6s3l3tNbfSc1YbxZDHmcw3amDjIJsRxndPsifKt3rJ9TvRCJmj7zRSXPtT7BZid\nVERYSECRET\nVERYSECRETKEY\nVERYSECURE\nVNPT_IOT_PORTAL\nVRJ106jEn7D2Q7...\nVaibhavBhapkar\nVec\nVerySecr3t!\nViME*BpB@uD*\nVictoria's Secret!\nVinay\nVitya__chisto__beliy\nVoCra8#GEBAbRl*+vos9UF@??gi8Oy\nW0jZioMe2ySiUngtKLNd1ivnRi7uD45nT9EqUQaDPbQu0BYiIcGvZbaDToaXDvQg\nW3W0ApR1p7FAhdHSCIMUJWGerTjdPexxSz3r0SjWAMF5XMGtqMwHAp5g3M4lPSuq\nW5rX8JlYWRlclJrLCJqdGkiOiJiaGdkr3bGl6amZ5IiwiYWxnIjoiSFMyNTYiLCP\nWAKIE_CLONE_AUTH_KEY\nWGKvGsFnXBMb5dXGLHqVBcTUJReRQUumgZQYt8Rmp6XZsHMUMRUzKUDrwAPeBdef\nWQ14SIU1vceM3q0pN8mSVRs0YF4hywl\nWakYED\nWithMandaYouCanUnlockAnything\nWkWoJqLBsatMXtZJVcS7Iny9CtvBlGzl8CwEx3MAsAdYVOUPOgifg4NJxuRxC8GD\nWrcfY5uyyEtuQDkheLgwnrG8haDitbMWiqi6EX9TRCoUUjF0Xvj8vHBkmbFwUHrs\nX3Fcd2N4rEkOR5AmhtY4mRBR3Ob2Ag1KC5GY8UhKAm2SbLPdfQqoEkkWbB7AdMlV\nX4oiXd5PxJWq69\nX73xXXXXXxxxxXXXxxxXXXx656767Xxx\nXCAP05H6LoKvbRRa/QkqLNMI7cOHguaRyHzyg7n5qEkGjQmtBhz4SzYh4Fqwjyi3KJHlSXKPwVu2+bXr6CtpgQ==\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\nXHAREEuyaA0eOFF6NwVjchERhhU3QyfK50dTWBENmlbHCiuPScMD9NgPheWxqhz\nXI0fKNchGcRkD1oA01dBzaQ1D1g2JrUDpWCjx6koMStlLoP5eQR4pYRepVqImr9I\nXPTO\nXR8LRocbUxLC8TSr2RFEus4ivJj6Sp7UbOB4ecTy0PFfOJjjSoLYfUQ2UI9nsZRh\nXUu7XghJ3NFmoZ4nz7fKRRmaGogE4xZbCTT2xbyqESLeGeAQ3klIziNvaj6OuT0d\nXXX\nXXXX\nXXXXXX\nXXXXXXXXXXXXX\nXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX\nXY7kmzoNzl100\nXbnLQgYjSY9ZDkfvXfv9whW3ZnA6FbeseAjrpxFW9upngFYGUt95T9FKcHryfj6vFeDySGQhw5TnFWkbYNfYbuybf78zK8kfxtaV7ZTmVAsXrAXT2XMm7SxKuWZzGRLYgL5ckjsxVMzAcEcFyveCeuXNEa9XRsw3NN4NtR7VEPrYhd64RgJyHMsbP8PGgNhZpGRbCw4XYMGLuSemBRpv6G6gsvUxaMhFe8nyBMtT3dMCCxdrTkygsVc9gVQ7KwYM\nXijRGc41BE4eKHl5TJWCA2VuQ0aYfZKW\nXjaHEFMAbG3cEo4igwA6ybOH4qF8FnX3qHTuG4wORussa3hEXAbs5okgG8i1L5gz\nXs6tGtEK#DUWF3L8pSx^qD_52u!tBC$Zf=3!gmDAmK8WfCK5NDH!D8S48DS48DSNX9tEWjue-2p!W9+#FfKeLvYSd%ZR2AjA=Q78x_6Yh%BdB9C#8am6u_FntPj#@%yGmp6QLVf#hR-_rqT*sJ8QX@f$WQ#HHN7kL8GdHLM!svugZz@tgBPG=vagsL!L6ujMth_Ta@rSBT_QMgFQc6hLFvgzXE5R5$B2XvmXV_+wC4MhYRTdEqD*ZtCA%xBszHm\nY2InZKhVNuxi7HXsA2Bq1nCDqWQ9XLQH\nYOUCANDOIT\nYOUR JWT_SECRET\nYOUR KEY HERE\nYOUR SECRECT KEU\nYOURJWTSECRETCHANGEIT\nYOURSECRET\nYOURSIGNINGKEYGOESHERE\nYOUR_ADMIN_API_KEY\nYOUR_JWT\nYOUR_JWT_SECRET\nYOUR_JWT_SECRET_GOES_HERE\nYOUR_JWT_SECRET_HERE\nYOUR_JWT_TOKEN_SALT_STRING\nYOUR_OWN\nYOUR_SECRET\nYOUR_SECRET_HERE\nYOUR_SECRET_KEY\nYOUR_SECRET_KEY_FOR_JWT\nYOUR_SECRET_STRING\nYOUR_secret_key\nYV4bg3LibCiXgP7ppMhz6i6iuzdWXTh9EkOOWjy7h2nacpi7sxyHzcA4YboDUuHs\nYV~B*&xq8WC=h]\nYXSkZmFzZmPhc2ZhZmFhc2RmYXNmMNGFmNDE1NDG0\nYYdqsAVhJ9Fs4fQLSFWNauWSCd2F3EUboo9ZWWRSdPONXmI92jfnlTX9sMXhEZac\nYZY\nY^$B,FVseZ~d,+mrP,#@DM4:U~BU6.=m9QDD+.U\\'yL\"bp-hTS#H+f;UR(+z7./Yf!2z.^-@<}\\h**9)2Lbm[#z}ELwvU\n^hBlHu3pSCX@_KQJSX*6I*CX^brqM=@2nPIU*LSc~;LLwFG-Fk1-3F6WDT][5U\n_/QNgj*DDF|AA:b[)q5eLd-+grM-x6b8L.gO#/nGny<1(:Ls%&E%|wniv?0>By+X\n_5xlnqfkob0qob2Nxwvz4qWpezt46cnTsLQtGwN1BGc\n_Your_super_secret\n___SECRETO_RANDOM___\na\na fun secret\na random string (i use a uuid)\na random, long, sequence of characters that only the server knows\na secret\na secret for local JWT testing\na secret phrase!!\na&*38QthAKuiRwISGLotgq^3%^$zvA3A6Hfr8MF$jM*HY4*dWcwAW&9NGp7*b53!\na-fake-secret-for-development-temp-use\na-secret\na058b0fc-f5b6-4e30-9bb2-00f38d1ea3a8\na0bcbac1-ab14-4de2-b2ad-bad0b5187d9d\na10fe05c-4524-4975-850c-24eb2e9bff8e\na15300ce-f6d9-4a26-989d-9899a5368f9d\na1a8728cdaa8261f9f5d527b7d13d0057ecc34dad1eb430b439d353be6e88338\na25eea2094554f58a87471e3bc9815c4\na2f3a22b-c2bd-4275-8c99-194fa7286abd\na30fbb15-abbf-4563-adb7-45e9e00fb83f\na35c522e698f04484bfacd9f757b5ac61566c30ef6d6a897e4686b1d8415636b5dbcc2bc3fc8382ce844a0d52600b8a2e846a49eec92631d43bc0bf775fc3c31\na39c3363-19a9-4ecc-8c60-2ae6e8703b6d\na3bcec6c-d153-4c85-9553-f70be620c753\na48bf3da-3903-4958-8422-9e9550bc9c8a\na4bf80d6-77e6-41d8-aa67-aafe4ba7e47c\na4e98346-8e23-461b-9722-923ffb0ae18c\na5e9e856-dbfe-465c-b5ed-474f00725c74\na69f2090-3eee-46d4-a4ae-e1aa755a2582\na6a17a5e-60ab-458d-b28f-bc32944ec9c2\na6ce23fc-8515-4e85-b499-04566bba8b71\na7a3cc06-7a17-4b06-8542-f6199b82adc4\na7e6d501-36ff-46b4-b67a-bc4709faf1ae\na85bfffe-1ae5-41c9-865a-2ebdac3d3717\na88ab2289558430620946324bafdfaa2f9a4dbaf6baa45523fbda1ee8185931c40af16013f9b066c45daff67324e1ba97f897673c98f0a'\na8921d9a-0a9a-4db5-a0f0-3590fcf7a115\na8cc3d37-0278-4778-ad20-9dd410b240f5\na8cf117c-a730-499f-a315-29ef7bd268ca\na9303739-df0d-4579-b470-c1339aff7db8\naABVYG66do8ehuFV1lund6YUjm470bC9wpQ0Esl2mqOv9N4pVxgLEc0LafVy1jgm\naGVsbG93b3JsZA==\naMazon_maxIcan_SECRET_KEY\naN5pZ6kA7jW3zC0rU5bB1qT5vH0wW7rS\naSecretKey\naV2DQqn5YkMK6x2flrlrlNQx2ghJ5VBxVfl5Zc5wJfPff0nhATTuWPS9kqB2tN4w\naVerySecretKey\naVyTTwWWrHYDJSkzAyzi\na_hyq!_&%$#gql1024\na_jwt_secret\na_long_secret\na`-7eh3_$?;5=5wxR%@D>X[_NU@_pywJ\naa\naa01330de012031\naa784526-bc31-4de1-8793-d334f862d2f4\naaa967f1-2b08-4dde-a086-5df6bc8eff91\naaaa\naaaaaaaaaaaaaaaa\naaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\naaaabbbbccc123\naajdkajdndlnldnlndw\nab4ccbc4-af0a-46ce-9584-f51bd47b95c9\nab8aa26d-cd55-4444-8d94-b4978b245a9a\nabc\nabc123\nabc123$\nabc123CHATIFY123abc\nabc123abc1234\nabc234\nabcd\nabcd1234\nabcde\nabcdefgh12345\nabcdefghi98764312ABCDEFGHI!@#$%^&*\nabcdefghij\nabcdefghijklmnopqrstuvwxyz\nabcdefghijklmnopqrstuvwxyz1234567890\nabcdoqoweuwqidasdasjhwe2982812d12932109\nabcds3\nabe6abe4-01c8-4a6a-9480-b46800e955e1\nabeartoken\nabkfdsfooi0934\nabracadabra\nac55b7e1-7d7a-43e7-97fc-ad9f71d22978\nac60920b-589d-477e-809a-2c7126031ca6\naccessSecret\naccesssmetst6667hjjsbfdxgcghvsdlknsdknbkjjknkcsazbcoeuw96\nacmesecret\nactivityAuthentication\nad0608a4-973a-4bcb-b4b6-bd9a26b495bf\nad160b59-2a9a-45ae-a1b6-ec104bac96f1\nad38a088-1256-44c4-87d7-432ed6267d67\nad508233-bdd6-48e3-a6b5-3d4a9dd64033\nad8a?897ghtz!\nadb9b737-c2f2-4008-95ce-9fcc8a5ad43f\nadd a .env file to root of project with the JWT_SECRET variable.\nadd third table for many 2 many\naddjsonwebtokensecretherelikeQuiscustodietipsoscustodes\nadmin-api-apikey-secret\nadsadsadasd\nadsfasdfsadfadsfasdfsadf-secret\nae120c49-cd80-493c-a220-0e0dab04c9b6\nae477649-a268-47f5-8d9f-803671275c02\nae5f98d0-6eac-4ea1-8d35-a03a394be7f0\naeufaskfhasuekfhasefukasehukf\naewadsdqdsas123q\naf544744-0a5e-4f97-ad38-f50cd0e0457b\naf5ad5c0-b941-11ea-b448-ab49f3cfe0b2hi\nafa05115-0a5c-4b2b-a498-0fce224518eb\nafdafuwerjqweasdjfafjadgaqjfafads\nafeiuhvdsb23r90u\nagen0003DIGcomp@Newk6y\nahahahahjah\nahfsiaiuGiushauhfuoha\nahmad\nahsduiashduqwjdoasmcns\naj749DCg6G2nq77QVupg7F1MIKdum6Pke9ET0JIeWgWIeK1huJ3M7heQCbG9Z4lB\najdfgdsfrguyg346gjg\nakshdkhaskjhaklkaskhdkjssd\nakuprogramer\nale esta aprendiendo a boxear\nalexitopre\nalfjajklsgfjdshgl\nalmf92Xe2lkkVkpYc0I3qdHW1wavZCUq4hwbpH3A1RdBXvSDrfQKAabyE4zoEdUF\nalphacamp\nalyq7BAfUozggpoL0NCPKAN3gWp9ySlDmeg7za1yyoDx0Me9yeRwZyrcEFAdDAdi\nalysse\namakurunyayo_abikwa_neza@tangizwanubonetse_wese\namazonian\namesh\nand0c2VjcmV0VG9rZW4K\nandri!23\nandroidchatapplication\nangular2-secret\nanimigramteamcsi4999\nanonymous_chicken\nanyRandomSecretKeyWhichWillBeUsedToEncodeTheTokenValue\nany_random_secret_key_for_token_generation&\nanysecret\nanystring\nanytoken\napikey-client-secret\napisecret\napiserversecret\napplergic_*\napplicationsecret\narcobaleno\narkix-2019-interview@\nas34gf3d8ge5r6he0r7\nasa123jsifj0!#!23kfkczz1231^%mladfkk\nasbfqwpoiunb\nasd\nasd2f0a21df03a2df10a5df40s504a53451fad21f50a5d4f0d2f0a5d4f0d2fs\nasd789zx645cqw798ez465fa68sd656czx\nasd789zx645cqw798ez465fa68sd656czx#$$\nasdaasdsadsafdfdghtkuourtytrfyt-dev\nasdasdasdasdad\nasdasdjknalskjvnakljnbiunb8b9h\nasdf\nasdf123\nasdf1234asdg!#%asdf!#$234\nasdfSFS34wfsdfsdfSDSD32dfsddDDerQSNCK34SOWEK5354fdgdf4\nasdfasaf\nasdfasdf\nasdfasdfas1321fasd$%$sdfa%%sdfsdf12132\nasdfasdfjhadjklfhdaks;lfjdjklafhkds\nasdfghjkkjhgfrtyuiopoi\nasdfghjklghfjskhalamsgssjkhshsnsjh\nasdfghjklñ123456\nasdfksdofiasdngnasdfl\nasdfsgasdfg\nasdjhasdjd2312kjgkj2ge\nasdljksad%$#!@!(*&871927)ljalsdkladjkajds\nasdv234234^&%&^%&^hjsdfb2%%%\nasecret\nasecrettoeveryone\nasfdasdf\nasffsfarstbbdyfnyjmdtvdgsdg21231%%4$$sfasdfadsfasdfasdf\nashdfjhasdlkjfhalksdjhflak\nasjkdnfksdn\naskdfjsoweir125#@\naskdjgkjghkjdhgk;jdfgh;kdjfghphurruriperuerre\naskhfoqwihfsdnlsd\naslfsalfJLDSFjlieELEJF932401703iewoqfqwo\nasofhapsohfpyuuu1408$@#@\nassdsdasa\nasupersecretkey\nau7DAwRZRyxAk3maooqt6iXwLNGNDQCMTGFyFZn9gUG4Eo1RwafkQ3XurFSeJCpV\nauth-secret-key\nauth-test-secret\nauthDemo\nauthentication\nauthentication-secret-key-lies-here\nautoai-aid\navailable\naventador!!!\naverylongpassword\navocado-rapid-dev\nawdowadkwaod\naweuruwiedncalslsedjhflak\nawkwardsampleskillfulbagpipepetted\nazBel11040037292011@Isaac_5539614042\naze123\nb020ad52-57c9-47cb-9369-71b2726b17f1\nb0970f7fc9564e65xklfn48930b5d08b1\nb0dff4cc-fced-4422-b225-409102525895\nb14ca5898a4e4133bbce2ea2315a1916\nb1bdce84-d84c-407a-88f9-b361782194b5\nb1d6cac2-41ae-4e3a-951d-a343b067b8dc\nb22540e5-f973-4cd5-9e93-de28426d56cd\nb3500a3a-423e-4552-9c70-27be89209cdd\nb3dfd1d6-058b-4746-b247-cd16a4d6b3a8\nb3eaad0a469d13a884f3d09e0952b72b\nb4fef35e-9b11-4fad-b98f-39b96b0ced3b\nb4n4n4\nb56314db-91fa-4674-ba77-4a902de619ec\nb62d534e-6e87-4f5f-89d1-fb63d0103775\nb6f6e817-90fb-48af-a64b-95e26017f141\nb7025001-67b2-4eb6-9d0b-297040f72d3e\nb71939b9911ea40518c378ab206cba17\nb74026dd-64e2-4911-a231-307f84286ad5\nb746d574-f9fa-404c-8477-263ac6e0083f\nb78ab44f-923b-4fad-96fb-a4294f97cce4\nbA2xcjpf8y5aSUFsNB2qN5yymUBSs6es3qHoFpGkec75RCeBb8cpKauGefw5qy4\nbA2xcjpf8y5aSUFsNB2qN5yymUBSs6es3qHoFpGkec75RCeBb8cpKauGefwabcd\nbCN5WVVP7b2RL76n7AlYpxTap8s134l6eyqZckbryn2UOojCyjfwo2TpFcWXMaXm\nbDHz544I7VX9gcPoi5lJiuqKGygUBRYPgxXcRIMZ3Qg\nbGVvLWV2ZW50cy1pbmRxLTIwMDItcHJvZA==\nbLPQqR7bVcXh3Ppg9Urp9RN2qkUamev9\nbPZNXWT1NMfltdVsh8770MCxq0edknt57RIeDcbF\nbU7y7uyp3LnbrVjbJbnnEemQO7mETeHc\nbUH75katNm6Yj0iPSchcgUuTwYAzZr7C\nbVw8DInyEWsrB79ZXy1kU4l5EKFCwqdnZNoqyR9AqNvaeE4MPzan4nsNF7OLCSql\nbXlzZWNyZXQK\nba51d54wq4d54wqdas4d5sa4d\nba5a9914-f2f5-4552-b281-2afffc4e2a3a\nbacon25\nbad secret\nbad-wolf\nbad5a43ce90eae29d2330a2419a4522e527e85e6edc8e03753b3e8e1b872b5999c511d3170da173ab672b242605778368752cdaf0087c1a507799f9270858c17\nbadbreathbuffalo\nbafe4269-f701-4482-b539-db03a6f64d1d\nbalthazar-lord-of-the-undead\nbase64-encoded-signing-key-here\nbb5826e1-48d0-49d3-b118-4b5fd5a9d2e9\nbbc287d8-dfaa-4547-ac54-6badc3c5df0b\nbbc7783c-4ed3-4fbe-b0dd-9daf165bd765\nbboysoul\nbc40c280-4255-4f5f-adfb-0c57bcb0c1e7\nbcc81731-d08c-4aed-acc3-ea309c8f1d30\nbd2bc693e047f52bb7c9eea04960594552f0d4\nbd70be12-f0fb-4a9d-a1ab-aaf1d70888ef\nbd7a4ea7-de79-4372-94ba-27d14b5dc81c\nbdsh0z8a7ope4krf1ysf23u99\nbe bootcamp my friend\nbe2c38b7-eec0-482b-9362-c2cf3346f911\nbe56fc5a-ed16-469e-bcf3-ede478639069\nbeatsmusic\nbee34f7b-d20f-48cb-990a-7c0411663bc9\nbeerfluplsno\nbeff68f4-0c8a-4580-806b-f9919729d645\nbenjaminnd\nbezKoderSecretKey\nbezkoder-secret-key\nbf667356-202c-4159-be36-1cdbd9401a53\nbf6c7d33-fca4-42b5-a04c-5b4bcfe48131\nbig_apple_in_a_small_tent\nbigfish\nbiking_secret_jwt\nblablabliblabloblablu\nblahblah\nbldstst\nblogs-ZAQ!2wsx\nblueberry\nblyatblyat\nbody\nbogus_secret\nbonobo\nbootcamp malo rulez\nbtnode_secret\nbudgetsecret\nbugovnkl44\nbusiness\nbvhfbjdnnfoiremfkv\nby86R8RnyNRBa46fXkd77b99M6WzD96W\nc008569e-5765-4f5c-b7da-b69d5fdadd5d\nc0a0a147-686f-4d75-8a20-b384448c508e\nc0c604be-4de4-45f6-a2ca-f129418861cc\nc156ab12-522f-41a7-9fb9-c665fcb061b9\nc1d9a361-7363-410d-ad28-3e7cb6b0cfc2\nc26c8ca3-947a-4056-afb5-64eaeb9e74d1\nc2FtaXJtYW11ZGVpdGNyb3dk\nc2VjcmV0\nc2VjcmV0LWtleS1mb3ItYXBpLWluc3RhZ3JhbS1wcm9jZXNzby1zZWxldGl2bw==\nc2bbfcbe2e058644b1e60fb48191d1ec\nc31eb055-18f7-4fe6-9ca8-3e35a8fb8db0\nc33218de-d3b1-4094-9c36-454a33dc4c01\nc33qPZLwgb74V-ysAVu5Eg\nc3bac0cc-02b3-4802-a343-30e048228a68\nc4GS/lhQPY+0k8S9WsDxRUI7ld2tK/BpeFJGRuoGvck4uQqAEa2Dd6LaFaPqnzzTAbB4F/XUbeagL7vGCPkXr8I2S+37HaBRD5+Oagil4artuSbjo/M9D1C3Uec7zxZneare1dcy/pL6qAJUbqn+n1rsWJ3\nc522ad85-5d8d-4307-9ed9-bfd7c2b6385c\nc5eecae4-1cac-4bde-bf5e-856056529ff9\nc64a5e2e-f95d-49bd-9da2-3d1c184bcfec\nc7172e73-2e19-46e3-9b5e-35986f124a00\nc727fdb7a4fecd0bb4dcd27b91a7693336a31a7ac09dbfcaca7fbb90bdf4689f05a4099f750421231a9f36943947cd724ebb782ae6a3e08fe1c51d31e63f7333\nc787de55-83bd-4ada-8911-4c9c9557b40d\nc7a554e0-fde4-4003-a9c9-23463abfdf0b\nc8FPK7giw0ARqp10fBgu6D5SiUPcIz7RoEhspdM10bNjXf6ZPESMYg1lh9nsyHNKqGF5R3r6sveL5NPoYbFswzTtHXdtGD5klIyCN851lf9XCB5U7Ed3YcfgvzOsuJwT\nc8cb6ae1fb193e1e9d3d2d6553479755bbe59e34e2b965629ee4346e4c4902646c93ccd6cd7fd6d2392f300d251632e64bf1a1c260adf1b7219e8caa6dc7d27e\nc956d9a2-04a8-4d0a-b295-4ddab9955fd2\nc98f7e9c-dc1d-4ee1-a380-53c3a7125a7e\nc99ab586-d6e7-44f6-aadc-823cf1ef7853\nc9HHeyVraRh7pCbU84ueqfiZLMtYy3KQ\nc9f47893-233a-4336-a72e-a5aca28a7a22\ncAUv2c2CAbIaOEdiyDyr9gQ9RV42jEZFJSaPcxgdVU8DJlfuc7BTsrMwlj2tW4pw\ncAtwa1kkEy\ncI4nLws4n0aby1GQIeDEqxNluGp1RjDKWIHjgALgbNN1JcnYti1Jv5AYbWZgjPMJ\ncPfG9osVQx80HrUB4S43h8u1zSBXF35paKyyjTf36ppKaa8eTh6c9FmUY3B4jdhG\ncYo4Xes0YeNEG3snE3jdcoNHPNqgyL0Ioipq5ssqvACYe+gt3SJbcwnuFqT8J9H9\ncachopo\ncachorronaosabefalar\ncaf15b87-771d-4ff1-9329-998dd3f92619\ncalendarSecretKey\ncan be anything\ncanbeanything\ncapstone3-secret\ncargomanager\ncartsy-app\ncashruleseverythingaroundme\ncat123\ncats and dogs\ncb648fd5-68d1-40cc-83fc-ed310fe2bdd7\ncbce0987-2d19-44ab-b1a9-ad3844adc4d6\ncbd74d14-8bf2-4abe-a644-3bbf4554bf63\ncc126792f0ad3f48ac7121fbec1a9516\ncc29f9d5-ee61-44fb-9647-cd352e8fdf6e\ncc64aa237334fcf56105a0e7970ac5f50dd61987199bfc4c96520fe2f5a9344e7c571ae458711132526529a8d8fafa94e93b73bf29285018b1f04e4f593036ce\nccbe524c-5d83-4beb-b7ea-fd588e770714\nccfea10d-63c2-4618-b5b1-bd2aff67fe9e\nccnuinformationmanagementmentalhealth\ncd683a69-c8cc-488f-a407-c7ea4f9c09ad\ncea27bcd-e10d-4f94-b5b3-21edebfcc914\ncf4378c6-50ff-45d9-b8ce-847997e4f33b\ncfc6da30-07b1-4f12-8e26-a93af456a344\ncff191bf-618d-405d-9b24-c547cf38807d\nchange me\nchange this secret\nchange-secret\nchange-this-secret\nchangeMe\nchangeThisInToLongSecret\nchange_me!!!!\nchange_this_example_secret\nchange_this_super_secret_random_string\nchangeit\nchangeme\nchangethis\nchangethisinproduction\nchangethisordie\nchangethisoryourplantwillfreeze\ncharge_something_for_i_am_dwindling\nchat21SecretKey\nchefPalace_secret\nchorerunner-jwt-secret\nchrd5hdhxt\nchris\nchunguschunguschunguschunguschunguschunguschunguschunguschungus\nchuongdeptrai\nchurras-tri\ncisecret4\nclaveutrasecreta\nclient-secret\nclientSecret\nclient_secret_jwt\ncnb_jwt_2560\ncodebase\ncodeial\ncodial\ncome-up-with-a-super-secret-token-here\ncontoh\ncookie\ncore\ncra-init-dashboard-graphql\ncranes\ncrud-secret-key\ncrypt_key123\ncustom secret\nd0088d5c-b93a-4679-9ea8-b1412f63724d\nd008a745-f321-49ad-b559-ea2037819a4e\nd09ba321-5483-4c30-be0a-92b8d299f782\nd0bf196f-fe29-480d-b3f5-a40bcf493531\nd0w6Lq(cXUA@Mwp6+!^CQ;ZC7qMWz\\pi5Z.w65^\\YRAb.Cpnwb\nd11e06d3-b20f-4a9b-9120-57ce7bfbaf81\nd15n3t_53cr3t_1d\nd1f22568-ff4b-45ee-8faa-2fc3d6c2a24b\nd28b2864-548f-4169-af37-c3cdc1fd9de3\nd2aa8dda-93d6-45ef-b4ad-c74641568aa8\nd2d8bad4-9097-4e20-85c6-b4b651a7a816\nd3096c8c3effbf43e23e55efec705978500ab8d00f8373bedf3e7319845b5217ee880141560687a28158c343554d21e62d881d0bc30247de4e2830c04cfeed00\nd33ea696-0526-4156-a835-8fabefb87890\nd3a601f5-1334-4e04-9ffb-0be30da4982a\nd3e65348-7ef2-4071-baa2-dca82ebe205a\nd3vS3cr37\nd41d8cd98f00b204e9800998ecf8427e\nd4c06367fc5d987a29e17a3278d264edd162d8f363fb5b54edf9581a60867a21\nd55f6860-5966-4ed5-945e-f587ee94fad2\nd57bc4f3-8023-4138-8700-ca0844ec63b1\nd6310e75-2484-4df9-81af-b2d068b2b135\nd64843ac-ec22-4538-b317-e9b2088e2c9e\nd69c6987-92f2-4679-a972-72b899369d46\nd6b0f91e-da8c-4551-9d1e-84508ad733c7\nd6ba44a0-81ec-436d-b236-238d42e76fcc\nd6f6cb54-e5db-4347-b9d1-71475fdbddf6\nd74802f6-f42a-4412-afc8-ac0a17508e21\nd791f803-2d01-4ab7-b201-19396337e95f\nd7a435b4581bd0751476e1aec3693cfe5c3fd4e15252bf23e582c7f878c5191c2af73b3bf568978f179d68c028b002b41f86e4ba132d5aac631e61474f0bfadb\nd83s0G2s9wm214ahH65a4zPZeo4\nd8bac4f0-38d5-44ac-8e92-5389aa8aaf68\nd8bb8290-7a4e-4c7e-b144-cbc1eee6ea7a\nd8e75735-27d1-4103-b8f2-784a16e25c5e\nd8qOOFIjpU0Fj3ITiKraApaEpvkYEQVM01Bc5ONeAKJzeh1ex0qfzKzQZLyhlVmL\nd9336612-59b6-4665-9d52-515433bafd1d\nd9caede5-1b1e-410a-a796-b2b3e15ce1b9\nd9f39aa6-0e12-4e42-999d-009eb16bbfea\ndEvMoDe!1\ndKeSLgHne5\ndY5E9gcjfHGqktM?85GmnED@q+WxQE7LMrx*rhzq$PDuH4+6p9NfsB-QxeXJd6U+ZqfxSzkc_E?YUL%AFyxz@LKXv?chDVGJL=rd?rxA67&dX_3Gg5EDFdE53F_hxHd3#Ty2QRUA_KGK9Z%ADQv$Kp9Y$e*Jz9^MqAKvafd%73C4_^qhRhYLB9bkN=u$ex@97?PZHKY_d#$-PA#8JQ86J7e8WNKNcT+jt9=$nx@63SV8fjSnq4=qLMn$xf9Eu4sPpWVKjMgV7uY+x9hXQ2n2@UVFqtwzD3hg@WBSsR@gsq5f?GAjGqR!A%GtZ7NyFUfbSg*?cMTR2W+cTR#wBsPSGATvXx$%BLkK#s5T2b*S#rQ4aMq29Xm--ppcV5feQTM*ms-Mt!G4xJ_Kec-SU?Ts!g!JWcW@$&_sV!XZ?8@3Jy@f4V+ZGChy6$gnWUQ?!azNJ-Z3-E4c*Px3Np4tSUhRvCG#kc%dp*Zgp$vPG_M2-p_93p!dH&7+w&s2XcYBJYxj3@sLfyZ#uRHTVqXGUygW6YHsDA6g4*Kz$gs6tzajEeAzD%#-+8sgLZ9KrQg=UD6mHhU#7XykwwEffb9n4tgHa#Ue+&R=2DZ-pBTcp3LZBQL5h*zsCEseBd?gZUNW3ESmazATFe88s!$2^@Gggm?CxyyG7PMmzyJevUWkzxk9!Yp4wn_rE37*Z@YR6QLHnDU+cTSJ6@T*hDbHCPe^rRBGGXUE!Ueg&JBX_2Mypd5+kV37^5$MVw#u&TZD2?#?hrvVXvy&gnd^6#r!UK?TdVkrA5__*!-4mARu^NHCZd=qS3NN@^b+wn!-@_6bMZyE@L?bnDrJ!w5GBSvfAZnqZ2hbdK&K6#E_7w547HK$Hk5sSR-K%-wyAE3@f&whsKA!%^XUFm&E2DR4a7vYHnK_h6#GkruYX@zzN4-fY5V5zCCZb%w7f8MuRs+9a+YakXxYgTUy=Ku_LCCuxGpktb^7ybH#?pSRh^$8d%fNMj3T$sP+@nxJmvz-NW9drGw*GUX#tg7C8876-!66@3qtM_a=98*yCnMW+r4j?^jKgh?LR8Zaw5gBznv^Ks=E5Gw=m23u8_2kjcMdMztTGJYahr4CqP_!sH-+vD+AkDFby9S$LEwL-T=@+wHyW*rFZUuEWVkrejMC3h94MFu#vRA@hDrHTA#??bJE3Lakcazam9zgTcXqQk!GM#t&jcAta6_2qWB9!K@FuX&#tw4dA6g5EFq6k*3GCKm4g4YP=JNM6rejp!CJY?n#eH_wATQ#!kna7e_skE$n99GZRf-27!5Z%qHAD$@GB%4tuqtjzwyn9T^_eeK2!#ycj*-8uM2WzydN-74GKe$Hqv_#hMGUth=fj4UN9ybnn^+yN=DSGNT7sEazzZ@#=Rybq7!DUJdQDM8&jc8rN+n?Necc$x6Xaerkm3ZgHeuqjaK5qUJvFwd=7x6?LyuKQ@?FLPV_$z-bh8!*QW^?!8sccQN!5@Zr@g6%3q7_Sw&%gEK$dJ^9Sfs3WX+Kv5b%+_PxQ92X&j$kUs+PYGnvh%jWBqk?x#ewa+Yxh6e%H%EDrP%DH9SR%pDST#VCw4&muzdpDGRAjgjTLm!66nsk@Zv9HN8ruMAb7S+L!$3Aq=9v?&PF#Ew&p-%BjF9WKVF*Ee^X?9K+Lxgcz7!NYwNx@d3RGW&fm_&&Vc5CTgq42x6#aR9uzpXwvEBP2G@LkFtP-hG=BLfzjT$qN&$5GM-3fg7$FF59!ajPfMvaT3hKUavEqS&k#pFG$P8aDjbT45A9PaU%Q&UPTX-$hE2K7RR#KPW8wezJKj?%FvsS?5Fm2xT22Q95CwERcrq+R%6k?77NzqgyQuBSsf3M533L3M3Mfb9qsHGMB#59V+2hu9EN^SHL3v=hJ+AnU56*#nVe5wRtpbjfAW+-Pwf_d?@n-98HR3nkX9T4yR=K-SFp*_tAFd@*z?-!9_^Hv^PDpRAyE9c*2SFn3uBFX$NZSq^3=N-GyK+-Xc8%HDq_r9H7S^#P=gWjUp*ed+SCK-+aD+y734BMab3tYdD&Q6=Wxv59runjw@78\ndad63bb7-99ad-4d8b-85a4-ad6371904dcc\ndae46df8-a08e-456a-9234-1acba922cafd\ndakommtihrniedrauf\ndasdasdasdasdasdasdas\ndasdjasd8yebj3hbeuyy8b328eb829eyejde\ndasegsnjofadbyiadbno\ndasfewwg589639652251515%$QE#T#$YT$UYUñsdxDXase324\ndasfjhsdjlfhsdfgFDGSLJGFDSKOLJSDGFKFDSgjkljdfgshkljfhdgsjkhfdgasDASDSDGDFHrtyhtryhgtGFDHBNCVBODSTORETER\ndasuhfh84fhjuahddasdafdssdsadasf48ha\ndb3OIsj+BXE9NZDy0t8W3TcNekrF+2d/1sFnWG4HnV8TZY30iTOdtVWJG8abWvB1GlOgJuQZdcF2Luqm/hccMw==\ndbc2EgDM\ndc27dee0-26f3-4b0a-9ea0-8cbba7b1e4e3\ndc5bc62b-5a88-4172-b5ba-1b785e3f51cb\ndct@123\ndcu21d56x91ei45sp1lP\ndd15f9ce-d1d4-4553-83a4-52d5856bebab\nddasdsafa@cawqe6547984a\nddebce2a-1e69-45bd-b7df-0143eb6ce247\nde1e35d5-2c41-4212-8e77-0b7754a139ee\nde27e1e4-52ea-479d-ae19-aaddb9c6c58d\nde575aea-e020-4096-ba9b-0d9a88c5f456\ndef...234\ndefault\ndefault#shared$key\ndefaultSecret\ndefaultSecretKey\ndefaultSecretKeyPrivate\ndefaultjwtsecret\ndelilahRestó123\ndev mode\ndev waffles\ndev-jwt-secret\ndev-key\ndev-secret\ndev-secret-key\ndevJWTSecret\ndevJwtSecret\ndev_jwt_secret_key\ndevelop-key\ndevelop@123\ndevelopment\ndevelopment12345\ndevelopment_secret\ndevglan-secret\ndevias-top-secret-key\ndevicehive\ndevsecret\ndfb79d33-9e7e-4525-b9f9-5c6bf9cfdc1f\ndfea65fa-79a8-4c18-915d-cb3fba13bbea\ndfg54rt>rt$53df@1fgAS\ndfgjkhfdjshwdckszkskiidixx\ndfhdhfsk7iryeiw4wer7458745687cnw\ndfkjehtoirengaljefno34fngkjntr8n\ndhmCkl13kdKpcow09dkbKMxZvVc07y\ndigitalSecretKey\ndishmanager\ndjiasjpasdmasdnmaadask\ndjkshahjksdajksdhasjkdhasjkdhasjkdhasjkd\ndlkmslfmwei09e03edokrg432e4/*e2d6d5sdaf42m32m3urj3j8sdffafaf/34#$%&/()=)(/&%$#\"\"$%&/()=(/&%$#\"$%&/()=/&%$#$%&/(&%$#%&/()/&%$#\"$24dsdf5s6d516s5d1a6s51z6c16sd5c1s6c16s5de84dsa65d4s03ksdmckjxzc9822342302409230''0123323\"##%$%%\"32dsdvkmdflvsdlc\"'34s\ndnVvODY4Yzc2bzhzNzZqOG83czY4b2Nq\ndocker secret create portfolio-secret-jwt\ndoggo123\ndoksel secret\ndon't tell a soul\ndon'tPanic\ndone_list_secret@2020\ndontuser\ndooboolab\ndorbirendorf\ndoyouseriouslythinklol\ndq7HXDLvQuXLyY9XS8qqiFLmiRWdxYuGczUAdRVXQGv6gTvmw7Ra48ytZg8T92iyQcuEzA7KMw4Sbbx8pBbmtGdKzTZNthkWfHi4u9R3RkaXG9teNdadDtJXLZvEk6fN\ndsadj3384@!dkdiEC\ndsakd...rehfnx\ndsfadfdsfasdfsadf\ndsfdsg35kl46j32562346let464g46\ndsfkjhhksdfhklkhdf\ndumbledor\ndummy\ndummy-secretKey-key\ndummysecret\ne0d530e8-8c07-4fce-844e-1a3df2668acb\ne177920e88165bd0090b1c6b544cf7\ne1b93c6e-3514-4061-b68d-6874d1fea13f\ne224a6ed-8ed4-4b1d-83d5-6e321c8d5814\ne22c1c07-0345-462e-acf2-1f4b632ada11\ne29a859383a3f9bcab3cf986d99765dfc114577fe0f680cb528e73b104f03519f4833ae2bfb60d798d85367959cc45518ba5164ada1362c3000eb7bec77dc208\ne2TawGGPSxSyJvKnAEYNzv5KZc9G4jODMql7A6WV3usETJpkmdd9h1bnfeb6wzDX\ne372985389e031db533d2fb315d666f0\ne42d8dd28adf34fc489044d5aa21e5166f22a6ef\ne440d66e-1fec-4ef6-baf6-54fbffb9cdd6\ne555e793-0cc1-4c5d-ad8e-de07ff34f2f5\ne64de51c-9603-43af-b555-2c87920f715b\ne71829c351aa4242c2719cbfbe671c09\ne71a1342-a696-4063-82be-8f6d748438c9\ne743a0c6-71af-44c4-8501-9bbf1e3992fd\ne78h78fg43yuhfwq3hieh2i3\ne8d54d3f-eb74-41b2-8215-15b3231196e3\ne8f4ef2e-957b-4948-bc4f-ab104a64bcef\ne93b13b2-2a2e-4fec-80f9-7f883687729e\ne956367e-a2e9-4310-8f2e-3c28584ed901\ne9697d39-b9d0-4bcd-955d-f6f56cdf519a\ne97b66f0-0dd6-4a20-bab1-64c5c24691d9\ne9cj9kd\ne9rp^&^*&@9sejg)DSUA)jpfds8394jdsfn,m\neAkKRk2BWuvF4zGEoEIHfJqAGFXS3bnPSzmPUlMs4ETOJDMjs3yi8P1x93Zw2Eww\neFczVyFnaEhIZnBDem1leGkmOFVDbU5xKmk4blRYU1E=\neQH0DmWnYWP9UhCQR1gZ2DEU7Pgwbvmh\nea2e95c2-fe97-4b09-8a46-ff23547ed866\nea464ab2-39ed-42f4-9fb6-114532c7ebfa\nea99d5e2-10ef-4daf-bee9-7bac7d85926b\neab6a8a9-3ccf-4555-9c59-e0e83a5fea79\neb32bbfb-6869-4c1f-8eb3-c9b8c254f2f0\nec6916fc-fac0-45aa-ab0f-a1331be72c37\nec78c6bb-8339-4bed-9b1b-e973d27107dc\nec95ca38-6131-49b8-8f15-123a2459c0ef\necb9cd6a-4e28-482b-82a2-081f2edf1d28\necolotusChan\ned55ea37-5095-422a-9275-dbf3b78083a4\nee5ba134-5c16-4107-92cd-dde9d5ce9c0b\nee887df1-aeff-4660-b489-f025fc599666\neebilkitteh\nef6cb05b-bc39-4b04-8158-6cc4dab58ad6\nefeasdfeasdfefewerasdiojon\neffarlkjaskldfhiaasdsdfilayuo\neffegwegrgrgw4\neffegwegwrgrg4\neffegwegwrgrgw4\neffehfkrirn\nefffdgkjdkgj45\nefrdtgyhujh\negsbvjonsbsmcnbnxlhg\nehJWTSecretFyrirSigningJWT\nehudyyfofyfhfezfizuozhddeifgyéduzgdeiyeifzyufrgfigztrfuyzgfzgzu\nejaojeaomlelujua46z485eaz4!!aza\nejemplo\nel padre de mi abuela tenia doble vida\nel secreto es secreto, shhhh\nelcom@123_2020\nelearning\nen realidad son uruguayo (juampi), o sea, un vendido\nen realidad son uruguayo (juanpi), o sea, un vendido\nencodethejwt\nengage123\nenter-a-secret\nenter_your_secret_here\neowfhlvxlbmzvcvzb\nepbr-jwt-secret-production\nere%4324@$&*ghg*dfsdgfgth!W#323F$T%g5G@Fedf@@45\nerpoihnerpnerher430@nroge\nert***\nesta-es-el-reto-tecnico\nestacionamento\nesto-eS-UNA-palabra-SECRET4\neverybody knows it\nevilfactorylabs\newtewrytrejghkkjhl\newtijwebgiuweg9w98u9283982t!!u1h28h1t1h89u9h@$$\nexamnode\nexample\nexample-secret\nexample-secret-key\nexample_key\nexamplesecret\nexpress-typescript-starter-token\nf0C7JKFFXKRu5wH0SElhourvN33lRrJmfhZYVIjv3p7EnuVV4AhaR6hQOUdEHdiSEkjbm05YZCmaPK717zgzf5QE20pvWVW3yZnQQfvoANWKQGxlS4FnzsFvFODXrFkHkA1aX34iJgDiD9ORkx0FdRGzVNf8POpZzGyH4Z3gHZJkB8Fj3gbrcpItEaiCkCVI3lSxvK9mPcOy8hH5sk6e9zZ2PLmn4O1g6RjuiJLaGSdn1YOxjoW9cJV7U6VK8gUz\nf0e30449-558c-4ccd-9440-150f4b87550e\nf0f16d30-a403-4ca6-a960-a9b49de74966\nf12beb37-8401-4e00-afd1-427b7e2bb32a\nf13gK!#op*12f9$\nf1ef8ddf-b504-4e8e-b79b-33b38dad76f5\nf217d38125b18f09b5862eefeaa78f1b\nf262d5ffb7e2ab89536a871111ad6dee272cd10be5d2041537fc080f0686c6ea860e05f026add4cb0e8d5f1e816f3a9d0533a3e11c1dbb211ebe74a1b625f67c\nf26e5f61a99dc2c226431cdbba2f84598873ec33d29c98521c134394f4084f63ec86365b38b9bdd35c1736898237ae71c7a6c97d9fffad4e3f9dacfc4aaf4b43\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\nf3670f4d-d45b-4585-8b7a-86bd2f7c6235\nf3xrlHnKokCT98lSVMCC0z5UHCgnWVUdaJVfnDLj\nf4347794-5613-410c-9fd1-c6c42a9fa471\nf44829180caec73781a2123b40ed3e310f7a0e75af3cc6079e415dac60605a99150857b900f05a625e648f8d107d9cb58cddcd1f03379a2021412b9785840f02\nf603473f-0750-464c-a249-bf035d5e873c\nf6f8aca8-5ae3-4da0-b7f0-0a1215ffc8dd\nf70a0bad-62e9-41fe-ad95-9ece18786426\nf83602ad-7a07-4a87-b667-dccc9fb849d0\nf8916451dab8ccdcfb28158383fd8783c0dcf4b05c5d69cea9b2188fbf62a92\nf8be3390-04a0-4191-bb7d-44e8a5155aca\nf8c811f6-2731-476e-9104-fab2f9a51d81\nf8fbea7f-ca8e-41d9-afc2-7159c0521fc3\nf9156703-f69e-4730-8c94-e3822e58b8b3\nf91697e8-c441-4c2e-b397-e0f912d15903\nf9c0ac32-5738-48e1-9a6a-cde8ebe92fe8\nf9c6f57a-4c80-4c3b-ab97-fe1514cf849e\nfHaiF2FrHfu0RZItqqzmtLwcBi8exu4ZMCmrI7XHnfOk10iNt9W88CTM03V8fVRU\nfYA3#pM5cPSzRDgZ\nfa86da78-44cc-4408-a1ce-d3dd27d73075\nfabaea758d30609e03118bf6331f3bf358b36f24485ff785a66cb5d1104564525bd589261e35ebef53a5afb7a49b7c331b1eebb7c388af1adbda557af42f6d0d\nfacefood\nfadsfjasij4j32r23jfijsd\nfake_jwt_secret\nfastlane-ci-test\nfatboar-ci\nfb283fh23890f734tyu3h4gft74\nfb56530f-8f1b-40b0-8227-d0a057073a0b\nfb9d0fe1d345d9ac7f83d7a1e646b37c554dae8b\nfbaf3014-8066-4a86-8254-92b3b6d6b12d\nfbbbd846-f4bc-48cf-8ea2-7efcc334f381\nfbcf3cec-0891-4846-83d3-b9d675991873\nfbfufvfufs21g1gb5g1bgb1b1ggf5b1gb51b5211h15hkjk5j5h4k5dfLKKJjffrre514vghfhJKhjHKbjvRTctrsreYvuBJF2g1h56h1511g\nfc76f81b-1bc6-4938-be3a-fb43c598873b\nfc7a4b3a-fb0b-4e90-8313-71275fc98214\nfc8e66b1-ab9a-48a6-bc16-407a7020fca6\nfdb6a6f7-ce3e-4995-ba6d-e646547a75cd\nfddfsf*DDs$#&nm,dsddsfs*1FDFS!!#DC\nfdeffzefzefzfz\nfdkjsfsfdskfd\nfe04a2c7-067c-4003-b34d-642cdec0b29b\nfe1a1915a379f3be5394b64d14794932\nfe96bdad-4898-4823-b216-50e206dbcc0f\nfe9d8703f9d008f49a9fb74cb0053e8dff34daf929b6079b3993ea9b282e0981768b5fb105b7ce608d365b3cdd1e3f38945d8dbfa3590485f3550ca3761bd761\nfebfd298-1f1b-4e45-9f46-c3596b0da2b5\nferfromhell2104!\nfgdgf1234567\nfghdkjkfjgfghfjd\nfghe9rp^&^*&@9sejg)DSUA)jpfds8394jdsfn,m\nfidelicard\nfigs have wasps inside so i do not engage\nfinalProject\nfiscaluno\nfjkdlsajfoew239053/3uk\nfkgnsldkjlkasjfl\nfkr30w2RUGN3B9EcnzUOc6Dpb2SS2lkt\nfmaxt3kVhBrz6Ujx4w8DvA2UD9SjJuiQ\nfo98H7sGpD8zlWUrkF9hINg8KBKJVMCY0BUxy\nfoobar\nfoobar123\nfoobar2\nfoobarbaz\nfoodora-super-secret\nfoooo\nfootoken\nforbiddenfruit\nfoxwvwzrUpKWqjGwfGJEqLO2nCRk97J0aLqwuipWICjF4ueITdPyyowM7jZWR3mL\nframework\nfrasesecreta\nfriends_secret\nfrqgqharhhea\nfsdfs8f7ysf9s8fhsdmbfsd8f9435b3453k\nfskjnkjn4bnj43hb\nfssFSS\nftWxELAmqjbnQYMjXGFyLrDSffgfgsHqZWbJN9ZsnbTkw7PPU9\nfu98f6c806ydualcbnwl4zc39b0xgg\nfuckyouasshole\nfundacion-criollos@2018\nfuqiangwcy0203\nfuqiangyaoyao0203\nfutjakot\nfwfNYn5cmyj64kRlQrYU3Z0FM0xO0TvRUUaMsMSQtGW8asIGb8jBzA5dnaDD9LM6\nfxg==213*x\ng65h7yjto5hj5d46y5\ngIYDuai0ZMiaNyn4C21ymubakiG9dfY2\ngLar8xg8WFEMXnmXwdt5uIIfn2TNUqGe\ngT3eL1jU7mF0cQ6fQ7mH4jE9\ngWC93b#gg^s9\ngZH75aKtMN3Yj0iPS4ToroNZUuTwjAzZr9C\ngZH75aKtMN3Yj0iPS4hcgUuTwjAzZr9C\ngallery-api-development\ngallery-api-test\ngam3cub3\ngamete89\ngarcinha1973\ngauravtalele\ngdfj3456nj4n56j7nj32\ngdfx5g45g4sdf5g4df54fx5d\ngdg\ngenerate_strong_secret_here\ngenerated-token\ngeneratetoken\ngetanewone\ngeuAFR83_IXfpwx742$QQwfgiut45_cs\ngf454fdfh5dgh674cd\ngfgfhfh\ngfoKJjCsYy2zkJu7WlnXhxQaqNSy4bjJazBHYzJTULxpjsOW8C7JmAMzwBV5SYcz\ngftr.jhhg56.,jhgfdh\ngfvhdsfdsfdsfns\nggVzgPLLsu5LpSMkgUxAXr3Y3EKwJxT3\nghhodu.,.///rghdkjgnaoeir49340r34253htwkle\nghjdlHskfu@dsds$\nghjfkgjhewo8o\nghoul\ngiovanniSEED123223fksw_Gd._g\ngjal*jkjljo_dsgf_pbwei_65fa9sdf_jcewd112gdsfd161bfof_1564d16\ngk0ra6IcLrAmexlr4tZip9bmRXvRoXtDNNsEQnF1HIT0dI4tNaVbyg6ZhFvffqga\nglabfesecret\ngo-admin\ngocoronago\ngoiabailuminattivoadoracomcaimbranaorelha\ngolden-wings-jojo-anime\ngoldenshop\ngolfer\ngood secret\ngood_luck\ngoodtogo\ngoogle-client-secret\ngoogle_client_secret\ngorm-demo2\ngreenbay\ngrumpycat\ngvfnhcjermherutyuib\ngz8YFK3vXlVkMT2EJpUdccwBtKp0y0L2\nh1j4253j25qrq14331425\nh4tech\nh8566MNQ18oo5cMmHROVh8566MNQ18oo5cMmHROVh8566MNQ18oo5cMmHROVh8566MNQ18oo5cMmHROV\nhGSDAKDKAsakdhakdadkkahdsdsds545464f\nhHFUGUbcsngl7XCVcbuIckVEx8qB69YtCTNFkAWv6sL1t8QMff836TRszbEQ0FCR\nhLNCbKldMtoJZJEAUHJN3h3jJKx7W5cSHFK72gUIS72bBdO8e4UicsxOSmrhTeiE\nhOLALSDJ$91827389HGH98127391887IUWEWER\nhOLAPSKNDCSLD7349834RJ00923\nhPD6bSCPireCuAqap07tdNAavgOrbkflWubwzNEw2ScXVsMMzxjOJ51Eh9VGQTlD\nhaTWqAue7jiFUZCx9v0y7JETsepkSnTCZjXjYNxdnUhHaC3G2TGWe3Lw91fVUpbL\nhackajob2020\nhadfkh\nhahaha\nhakh845q34%@$%wlhqerqERVqer\nhaloha-jwt-serect-ashd8721s-198xb12yy-q2v9q2yeq\nhandsomeUnicorn\nhangang\nhappypaws_secretkey\nhard jwt secret\nhard!to-guess_secret\nhardsecret\nharryPotter\nharshitkishorraviverma\nhashSecretKeyYanusik\nhaskjhj23kjhdfki3adfasdafj3jh34j\nhauvq\nhcndjskalcnjdspwefescdsc56785678sa5cd67as85c6sa78c5a6s8\nhdfsajkfhlsdkja\nhdfsajkfhlsdkjalkj3098098hg09nihdfgn09384509n\nhdgjghdkjghkjjkdgjdgdgkjdghkj\nhdgvfuywtdeu23784528dsvghksadfdamhsdg\nhealthiionssecretcode2020\nhealthy-diet\nheeeeloooo\nhello\nhello Slana\nhello world !\nhello123\nhelloisthismewhouarelookingfor\nhelloo\nhellotheresecret\nhellothisissecret\nhelloworld\nhelloworld!\nhelloworldiliya\nhellp\nheodxx_D998sds12\nhex game secret private key\nhf759390gjhiuejd867465\nhgbyhujionkmjhnbvgvwsqawsxdcrf4323409876778897655tgyhujbnhgbvfrt76765434\nhgdhsbdbubbdjbdjbdj\nhghgdghdshgbnxhjasdhj\nhhAye49oOXSUeXxzjNglLasMd9LeyeuV\nhhbf884hj4/443\nhhj4h545h4j5hj45h5j4h545\nhhlskjflkasjdflkasj;dflk\nhiddentkeyyyyyyyy\nhj2PQxK8W0vYstCuoWLrxHRP3NB3Roi85R2qm2TJTv3FRkhjYzl2lQrTOBBhprmQ\nhjdfhuiklllllnlkbfcagdahsakjsdjdqw\nhjhjhdjjdjf\nhjkhk12312h31kjhj321\nhnabjkewbfjhabvjwerjfhasnfljkahefj\nhohoholololo\nholaadqwdw33r$smdkfmekqpqpfdsf.@avcbhr\nhomologacao\nhong1mu2zhi3ruan4jian5\nhow-do-i-tell-this-girl-that-i-like-her-without-changing-everything?-i-know-say-she-no-like-me-so-make-i-no-go-spoil-ham\nhrenVam\nhrjZTjqJOLtkMHqr52OiOF4EeFhgxFCD\nhsdkhfolkasdk3s0ekskaeijerij3wrwsasd\nhsherehancksrheererscsftrtr\nhu6ANecrAYed2FeBrUYaze34HaWa2ruzaZa6uxEzadREheWepeThEcremuxeJucewab22truteze4rA8ratheps8raSTaca5adruR36\nhuiyhfhkgiow4wfjq23ymo3q4ej86gug78t34p76v8rn1awscplsa\nhvjegwuyig7634g8irghgyyfewkfyervreygkvyurgkervreyyeruwvlgerhglevglevgreuy7438g34t4ty\nhvtschoolsecret\nhydra\nhydrogen_honey\nhyperf-chat\nhyperf.plus\ni hate hakers\ni love cupcakes\ni+#L0v3_!mY(*)PeT5\ni-am-very-secret-key\ni-will-be-a-billionaire-oneday-and-my-family-will-be-proud-of-me\ni1S7WHuFXJNul4t1MXvSb2BDDIv4ZJg8ejMlOq5O4iYEyTLZ7tHCC6c2D28eYzED\ni3_s-t?=8+n~\ni3oifjda9302lr$#@05.\ni91c$#c9r0ejk91n323$89fj398ejvosdj98qj^jsaklfdj83ifeqrnf$fjewlad82qwdkarfd\niDontHaveAnySecrets\niYQyNgxBWOMgFyxYMoy0p3NlvFfHbLsV4pqzHkIQNQAqLuSm9FLUVJ5yCFbAOB3j\ni_am_password\ni_am_secret\niamasonofGodnotaslave\nid498sjOwx\nidontknow\nietqyWp7iXTBmgNM8xxiHQA16s1yY7XyOeL3fAXURensyoWxPJbsrbTwCylxPRUQ\niloveguhyeon\nilovekuma\nilovesmolgurl\nim so lonely\nima_important_secret\nimpulsoh\nin the hall of the mountain king\nincludeiostream\nindique una frase o valor de preferencia.\ninisoa\ninit3z9q9djg993x06fd46\ninline123\ninnoscript\ninsecure\ninsecure_default_secret\ninsert_your_random_key_here\ninstapysecret\ninvocamoselpoderdetomatuyucota1213446\nireallylovetoeatrotifromroopramroti\niron_man\nis it secret, is it safe?\nit can't rain all the time\nit-is-dangerous-to-be-right-when-your-gf-is-angry-and-wrong\nitheima\nits a secret\nits a totally secret thing\nits-a-secret\nitsasecret\niuagfjblisjbfl8IWEIRHNDJSBLIUSBGO;IDSFJNBIJsdbfUYDSBFJHSDVFKUYEWbfhjdsVylidsvbjhvDSKUHFv\niuhosauhuisvbdjlfghdsailbcadsilioidfsapifdockergdsauobsduhacosspancisaphfdusioafhdsuaicouunhdosuinfghsaubcdgfzubdgsazuisdufndjjhdjskkksa\niwCodBa54XpRI9nod0jWmqqdvMLTpXUe\niygkh4NaBIePUkswPkzyZksS3\nizanamiSecret\nizanamiSecretabitmorelongbecauseitdoesntworkwithshorttoken\nj&($GB$*-9v*94j(U$bksd))\nj2390jf09kjsalkj4r93\nj3UJf6_weowTUHUtkOqwmVRaE8hbHwa0pEG2f9mlTezVZuy82F3Xzzzf0N6nKZ3iGkgAm0trMHn53c1kYJ1KxGTmRHiHPyQT4_7GO9ENXLBUQGfl_b_Qul5S7fXIh9XYZaxIapnJkSRr4dSFRm8fqHbLPbtgc9U9n8B4OaB9HvW3eXmESQMl0oBd1ruKuexYe3X7yZRbyMj98DYIVwBu2a5NRP8IFIpW-8kj3PPtbL82evjGwSNjtjCKabdCdzYuo62S1eD395PRJLKGKrzwpCWOSzyQIbntk1Vl8G33SV9bV8OENVcOiirr8YBhT8Bcr4i9tkrF_1Nj6QIY-WK3RQ\nj5jlb34j5bj2lb52jb5j2b5jbtl53frcn4nwr35cpin4ivnevsijcv9s9fsvhsf\njCfyWWwN30AuAm6FkAaMD5DfCY3Irvn52JCvhuk9Z0zMVzwpQG0gtuRbb7DX2omP\njIgBi_F5g5SB_QylpluwfI_QtYOgpgqUScXZI3F6\njMtfPba2gJt0WIapikMAz1gBfnvWOxhW\njSePXmvO.m9RP9gEf90HIO3ZnNEqunxpR1u8Lygq0BQQ9B4ayg2aK\njWtEeV2k19\njWtSeCrEt\njabfkb\njaimeynovingesupetsfr\njaivik-jaayaka\njakusytqrtsgjsk\njalsASDFA3473$438iaha\njanu\njavachinna\njavainuse\njavamaster\njcjbdcvjkbswdakjcvb\njcnfcrecetiejcne\njdnfksdmfksd\njdsjfjkfdjkkkfk\nje suis un secret\njesuisunsecret\njesus-est-mon-bon-berger\njffiuiusddf\njgkjfklffjlfksdf\njhjkhggasdfjgajdf\njhsoo884858k39555j77892939\njiReKLKbTVA2qnjHun8ma2hgDcApuZ\njk0238423.j4012\njkfsbdkjbdfkbsflkqewq\njkrbgiqwvfkbwkjsgws\njksfkjsfd\njl46yLKUHxE5J3L4ypjhT60YWCG6pOkNl0BPdz5b\njlanfrup52\njlksadjoUUWUWaasdaUUUsjdosa\njnNQzYKIQQwdlWFeLHgWXYYEcUhULuop9l68IQgjB2LpeUbXvQm8QLdQXdRPdYhw\njnxasudhakji23289ednaklsndudasdn\njoRDZQq6AfkjQh8b37gwv0mRGwrbnqgp\njobsitychat\njofja9eu94whfoshv983uri34r0uf\njonsoku\njordanisagoober\njose\njowierj09283jr02938rjrkw09efw0e9fk3\njs2onsecreasdte@dsd1$$$@Dsda1dPR0Dsaso###\njsakdlfljadsmview12\njsksfnfisdjdsjsdjdskdfvmfdfsåpsdä2348ej383j\njson-web-token-secret\njson_web_token_secret\njson_web_token_secret_key\njsonwebtokensecret\njuarakodingxbwa123\njujudhaukopaisa200rs\njum_sul_pan_secret_key\njwt\njwt key\njwt secret\njwt secret key\njwt-conduit-secret\njwt-dev-secret\njwt-secret\njwt-secret-SOMETHING\njwt-secret-here\njwt-secret-string\njwt-secret-value\njwt-secret_events\njwt-thinkful-2020-phoenix\njwt-token-secret-key-for-encryption\njwt12345\njwtClave\njwtGrokonezSecretKey\njwtKey\njwtPrivateKey\njwtS3cr3t\njwtSecret\njwtSecret should be declared in .env\njwtSecret-Placeholder\njwtSecret123\njwtSecret_20200914\njwt_hash_secret\njwt_loe_zjsk_0o\njwt_sec\njwt_secret\njwt_secret_1234_abcd\njwt_secret_password\njwt_test\njwt_token\njwtqualquersecret\njwtsecret\njwtsecret1234jwtsecret1234jwtsecret1234jwtsecret1234\njwtsecretkey\njxcvbhbmbvxkhbjkvxh\njxoGfiQqqgvHtv4fLzI\nk2hf504mcxw78kdfy439dhgcfew6\nk4qMeQAaee72ZLZ31CzCm\nkDj3#9848jksdKdj3#$#4dk\nkFW^=2C.77j&2sb>'H]V-WLCz==^XukX\nkK8Z<$hm8BxkujGM\\n7N}{W34q`~H,XFmUcE]*dLXT`X#ty,\"y\nkSoAfgGTda_oAmEY6u2rOETA8qYHO-I9paaOWmrA0kA\nkU8ZOhB00WXGepZRdgJ7lR04EDC76jek\nkV0iL9Ro3zWYKUfhOnFD8WUUE3ArmP6hJnci3ISYawyryKJZR57iBon0HhdQdQem\nkXnN4Y4jtDa2RP4\nkYkE0n6f7k0Sn2Oonbcm2mCusBxKOlmifcHufS55Hb7FJgp2d36HCFnCeVX50EgA\nkaanErSecretKey\nkaikeba\nkajsfakljsdfkahjk98u3464a5df?!$%^\nkalebra versh mern\nkanbu-dev\nkapankaya\nkcJwtSbk74ykKWIL\nkd07aCN38XwwB06cUu4saMaV43GyDMEbRevvb0c80JYEQHmu8k9zdcLpmpIy9P51\nkdfgsuiefguigarsy\nkeep it secret\nkeep it secret keep it safe\nkeep it secret, keep it safe\nkeep it secret, keep it safe!\nkeeyyyyyy\nkejnovalitnejno\nkey_qa\nkeyboard cat\nkeyboard_cat\nkeyboardcat\nkeysecret\nkfjdslk23984203ghhaskfhdksay4348324h32j4hkj31g4k1g34kj12h4jk12321\nkhamsone\nkhbhjjhgcjvhjv\nkjhfsdlkajhsdfasdf24312341_23sda\nkjhsdhgksj65sd465s5d6+as6+d5s6+d5+as9d86a87\nkjhsdjshvkjhkjsdbccsdbckjsbkjvc\nkjrbejfd234i23isfj2nxnx.nxnaD@DE\nkjvnjkkfjbkfjbv\nkmDuxg5675#psguy97\nknkninnfsf,;sdf,ozqefsdvsfdbsnoenerkls,d;:\nkokos\nkuj5AygMRJcyacqax0cLXDvDlYEl4Uu1chqaSWrX1TYvrR2Ev4K0ktViWe0Z2bgz\nkunming\nkwfeknvjbvjrbvrbvjbjjbjbrj\nky2j41NQuxVakcR082xl8FKd4P27vPeI\nl8Kha3Er2i5YRadD8AP0FaPSzHCkMiSE\nlA6pQ1vF2yW7qO2lV\nlDMJnFK0O9kMAvV11JdmPoaQ5YCIau5wtdDpnZiDggcpGSHsCiUAHnfbYOixTnJm\nlQKXInstrevsZIgvgllT5UCgc1Zt2pXsK1SZolP4wA9HgFnt0fE9EIgLr3Wr0BT9\nlRXuR1lqxCe3I6ro9nDYrUsWT8PTeFQsazfqX7Ye4qKft2jZsOB6sw73z6oelKEY\nlakjdlaksj12323\nlakjghdfjhbg\nlaksdfkljakl\nlala#2jdsf\nlalalala\nlamhan\nlaposte2020\nlax\nlearnr-level-seven-classified\nlesecret\nlf9vgCSBiLJ8Uj5S9AxvbFGWkmlPzna1\nli#223GX3$2\nlidhjepalidhje123\nlifeofdevelopersatworld\nligma_b@llz\nlitepost.io\nlitmus-portal@123\nliv-jwt-secret-for-node-program-natours\nlkajsdkasdkajsd,\nlkdjfaoldkfjadfldkjlfkadfkadkjr\nlkdnienwiaa9381ecbuiuw2e89d98\nlkjhgf\nlkskksksksndhddfd\nlm3ViHmU2yYR8LDC8DjW6QaamEhtG6n7zeesGysA7ixKJb0wC61BF5KvE6F9wBip\nlocalhost\nlodaaaaaa\nloginkey2020\nlol\nlolmao12345\nlolo\nlonger-secret-is-better\nlongsecret\nlongstring!!!!!!\nlorem ipsum key\nloveonitisjustachapterinthepastbutdon'tclosethebookjustturnthepage\nlskjjkdgj34343kkk3k3\nlylyly\nlyx&yyc-jwt\nm&XAFzBpM3es\nm4m4m3L$\nm8ctHyBzA6owZbdnQ2gxzzXNC0XuQiRbFr2eGNUdXr75Au34bpEvwg1Ym9xtBVvt\nm==?8AG\"Ik^str0}qxS_4Q%lsb~DUK\nmF8QNsmZpO\nmRJZQrLE6HlStXd4eEQcMLNDDIltgo1eYUzA5TbAcaRlwCX6FI2SLYKjgq19\nmRpHA5FkK1HzlqoZ1Xjn0K0Xxl7aFu6paszqF2xqlk7pKbwaLQrPNyhHvsv0ceWR\nmTVSVrgrPdRE3H8VmwJhCXAwUlO7p1svYSsKvIDWFmdtG15qU8w6vKfbIVRESR58\nmWSeBCibjsGw5AuHIlP7eUGxzXfWIRHW\nmaclesecretedontjesuisleseuleàconnaitrezehahahahahahaha\nmadera_api\nmagapapamatcha\nmake-that-shmoney\nmakeasecret\nmanishforeignnerd\nmarine\nmartolexjwttoken\nmasd82348$asldfja\nmaster_sword\nmath_jwt_secret_01\nmay-the-force-be-with-y0u-and-fuck-disney\nmazhiwen\nmeYEtb3nBkH3pF6RnvmmZkVe71Cv4xI6nJVewHlIfslDPXiOzvF1h4TLI8dGJmUu\nmed-cab\nmeemmemory\nmeme\nmeow\nmernBB-default-secret\nmern_shop_courses_deploy\nmf9a7vtGin1IoDqbzirtSsxdEJnMivWJ\nmiCodigoSecreto\nmiQ9FKGp0vObqfyIR7NFB4oqguhMCsXYGonUNatZrN30FuSD2eJHez2szWi2GCWS\nmiSecretJwtToken\nmiclavedetokens\nmiclavesupersecreta.\nmihir\nminhemlighet\nminimalpm@secretl0ngtext\nmisecreto\nmitokensecreto\nmjUqSyAFfoiivGAxHbtA\nmkFOcbEeBGBHLKiMxM6m\nmkT23j#u!45\nmnsdiueqsdhguesgkuywfuwgdfywtfuygfg\nmockSecret\nmocksecretjwt\nmodals\nmodeDeveloppement\nmofath\nmohamedtalaat\nmonbeaupotager\nmost_secret_key\nmothors_stone\nmr7baaaa\nmsCaseStudies\nmsadmlmclfkmkvlmv\nmude isso em produção\nmweifhbwehfewijkfwe\nmy Secret key!\nmy secret\nmy secret string\nmy top secret key\nmy$ecretK3y\nmy-256-bit-secret\nmy-32-character-ultra-secure-and-ultra-long-secret\nmy-application-efficiently-encrypted-and-protected\nmy-dummy-jwt-token\nmy-dummy-token\nmy-example-secret-jwt-token\nmy-first-jsonwebtoken-secret-is-made-on-14-09-2020\nmy-jwt-secret\nmy-name-debarshi-mondal-secret-token\nmy-name-is-shubham-and-i-am-bad-boy\nmy-node-supercut-secret\nmy-own-special-jwt-secret\nmy-own-very-deadly-secret\nmy-secret\nmy-secret-from-env-file-in-prod\nmy-secret-jwt-key-placeholder\nmy-secret-key\nmy-secret-key-for-jsonwebtoken\nmy-secret-key-which-should-be-changed-in-production-and-be-base64-encoded\nmy-secret-token\nmy-super-secret\nmy-super-ultra-long-secure-password\nmy-ultra-secret-and-ultra-long-code\nmy-ultra-secret-can't-won't-be-getted-because-@#$%&*(wer)\nmy-ultra-secure-and-miximise-long-secretly\nmy-ultra-secure-and-ultra-long-secret\nmy-ultra-super-secure-and-super-long-secret\nmy-very-best-jsonwebtoken-unique-key\nmy-very-unique-secure-secret-long-long\nmy-very-very-very-long-secret\nmy0ultra0secure0and0ultra0long0secret\nmyApiKeyClientSecret\nmyJWTSecret@789012345\nmyJWTsecretKeepThisSafe\nmyJwtSecret\nmyS33!!creeeT\nmySecret\nmySecretKey\nmySecretStr\nmySecretToken\nmySecretjwt\nmySuperSecureSecret\nmy\\$ecreEtKeY@123\nmy_precious\nmy_secret\nmy_secret-key\nmy_secret_jwt\nmy_secret_key\nmy_secret_key_12345\nmy_special_secret\nmy_super_secret_key\nmy_super_secret_password\nmyadminsecretkey\nmybizcorner\nmyideapool-session-secret\nmyjwt\nmyjwtscrete\nmyjwtsecret\nmyjwttokensecret\nmylibauth\nmylittlesecret\nmynameisjeff\nmyrewolf-secret\nmysJwtSecret\nmysU1p3rsEcreTpasSworD\nmysecreEtKeY@123\nmysecret\nmysecretisnothere\nmysecretisnotheretoo\nmysecretkey\nmysecretpassword\nmysecretsshhh\nmysecrettoken\nmysupers3cr3tsharedkey!\nmysupersecret\nmysupersecret_secretkey!123\nmysupersecretpassword\nmysupersecretpasswordencryptingthetoken\nmysupperpasswort\nmyteste\nmyverysecretword\nmyverysecuresecret\nn2127bOgmzao67RiW3umlVs16GL9fEj+JQRDaaN5E9G7yC/b\nn2r5u8x/A%D*G-C*F-J@NcRf\nn2r5u8x/A%D*G-KaPdSgVkYp3s6v9y$B&E(H+MbQeThWmZq4t7w!z%C*F-J@NcRf\nn2r5u8x/A%D*G-KaPdSgVkYp3s6v9y&E(H+MbQeThWmZq4t7w!z%C*F-J@NcRf\nn2r5ñ5x/A4D*G-KmPdSgVkYp226v9y$B&E(H+MbQeThWmZq4t7w!z%C*F=J@NcRf\nn84duyqoe5inui67fap5op4ir203945u3m4ofnyiytpwrmo\nnA8KR643k8wOlQp3kM0WBdFaoWHvZBvwOxV37VZXeRqPYnw1jMIFKA0txSF59AlN\nnAcYmDpO3tk06M6dj8SSuQqkhW1M0jKKGtLjOQcsSLjlKLeDm1jHihcuP4wFdZA\nnTEN9CPA3NAA\nnTzg7**T$zzn$6Qu\nnWSEuoWcbeKSN\nnamdepzai\nnanana\nnd838dun3w98ydb38ibd939y48brf834f394yuf84\nneed_a_better_secret\nnest-generic\nneura mocha\nneverstoplearning\nnevtopisthebrandnameofmilaanaamavenwhichmeansneverstop\nng8qLoie62Y1m3U0[http://www.inrice.com]\nngEurope rocks!\nngorut80ur0e09dkfj\nniceSecret\nnimSiOeejfjfCMO3qPJdxd52ktlSxn9owtRUVzHWKndDoDUINa47byRXAQilbaiE\nnjk23j42bh12221ddd\nnjsgjsnjkgjsjkgbsjk\nnjxkklkxskl\nnksdmlkfmfsd\nnlGSpemKKXCRpe33syUshUU8aJnr84NdxqXxFzi9JoQNUy1PIgVka10DRBuZZJ99\nnmCiULQqc5tddb1ZqTqajpx1cQ0m6DwExUEZdha6c00YE9fxypk7VUEt6DbQ7Xg7\nno-secret\nnoclue\nnode-core-app\nnode-start\nnode.js Andrew Mead´s Udemy course secret seed 123@#$%¨&*(~ç\nnoob-olympics-will-be-best-event\nnooneshoutouchhere@#&*1\nnoonewilleverguess\nnosecret\nnososecret\nnot-so-secret\nnot_a_working_secret\nnot_secure\nnotasecret\nnotasecret!\nnotasecreta\nnote_dev\nnotsecure\nnova scotia scova notia\nnpm-WARN-natours@1.0.0-No-descriptionnpm-WARN-natours@1.0.0-No-repository-field.-summary:-type:Stringqwertyuiopasdfghjkl;\nnruR3@_123dri!aS\nntJJIqQ0rphzn9mMgMpM\nnull\nnuo\nnusaeduberkah!2020\nnvadov;inavawevaio32rbabaeenernar\nnwt6B8fj9YEgz7y5jcIDZSGyGcmGd7OA\no-allah!-i-seek-refuge-from-hell\noMnN2cIfCiY5AHVuwIsdPo95F0GUa7sd\noW1JQohesx9hKgm8\noauth\noaw15WMA1Wnh5u\nobOoFDiAihNZE6kPtX6WQXOErPvuY3Oe\nobTVtYBgPXqeFSW47S1WLOY5MFLJrdE5Ip7j8387qywfgtfGUIhAG8SaR89mCYm5xt2mCwIrF8BgQUtSa\noethjiothjpj\nogA9ppB$S!dy!hu3Rauvg!L96\noijsdfogij02349sdpok\noirgdjnc$@dfg\noj2130sdjk120asdim2u2\nolsZNjx87lz9uX2Zr0ksX7D5rwuvPAjLIbIFAvSmYUBE9sLeFgQHL2OGi98SAqj8\nomg wtf bbq bojap ftw awesome legit\nomq208fn197gvvbf292\noqldBPU1yMXcrTwcha1a9PGi9RHlPVzQ\norion collab\noskarroSecretKey\noudelali\nour biggest secret\noursecret\nousecret\noxbridgeAuthentication\noxygen\noygNsNl1i2FgpfReDI95jWZSAaxhXjElxhKHFAST0bRRJ1cjvV8ZS0syJMZXUaN5\np\np*x*R7T&Hs$p?h$J\np4sta.w1th-b0logn3s3-s@uce\np5PnUtQItNE5IvJRPtbEVvu8Y8VXa41GBO66SAaGLWxv4Gad7TCyYTv5z4IbUviH\np7fTW+gyYSZ[X2?6\npIbYPv4BmuhshGlXOA52tNtzX81HwG3hvPzKTP8OQ2ZF\npKqSvxNgogrkJtFynGLb2p2oCbUCDSQ72T6Eo6fpLksDQoBGraYE8vRrf4gA5UlR\npN9#hY1,vO0;tM4%dU0}aJ0(jL5,tW8$\npVumoNHbXFSI8FUBH1zqVtT8irfCI7rsO15jZsGEFfKncto8qYyV3VNIWLPa7r43\npagarme\npakiSTAN\npancakes\npandathumazaknhi8800\nparaguiapoa\nparkingManage123\npassphrase big very huge man\npassword\npassword1\npassword123\npenguins live in the desert to eat cactus\nperro:loco2315_lo\npfe2020\nphie6vaecheliekeeru8aiy4shuafiJ0\nphper666\nphudeptrai\nphuu5eefiebawooFofieto5niezae2iu\npimpmasterguapo\npin-kod\npinkflyingmonkeysarefunny\npleaseChangeThisSecretForANewOne\npleaseuserandomuniquekey\nplz set up secret.\npm8bQIvgA8qZgfaTACjI6aFe7GAZYcCw\npodiumJSRocksJWT\npojiaj234oi234oij234oij4\npolarbear\nporonpompero\nposqdi974lkdjsqo@@mlds86546789\npp\nppmzzrJ6L6AzjS8mM5mPzTUb\npqfofegjoafejnmka1i0l4u03v02idkblwhpor\nprdxn\npricetagit_thekey\nprime256v1\nprod-jwt-secret\nprodSecret\nprojectauthentication\nprojectsecret\nps_jwt_secret_key\npsssst!\nptit\npublic\nput_a_secret_here\nput_your_secret_in_env_variable\nputidemojwtseCrect013keyideO\npxYVpCBnZHd40bQAFEHp7OARSW8WJ1INjGV8cIVnWKyX0r9UEqrMxWuv1FuCnxAr\nq.nF9L\\v8gLT\\M:KxYd$#f*m#3`gJ*uZ\nq12w23er45tyu90oplu65edrt6789jh\nq3YaZPNxZDkXvfhpJ7GzpZ69R7EEp4edTi21oSdiNmgr87uzELBhh0BptF3aQzEb\nq3t6w9z$C&F)J@NcRfUjWnZr4u7x!A%D*G-KaPdSgVkYp2s5v8y/B?E(H+MbQeTh\nqQFkIPJhAYFWYKMciqk1EExA4n/xq1lWvxek5CJ4BbmbkGzxdzjKfHIf4292B2rR\nqUmfJ6IjWjxPtVSGeIIde6MNu5xjYODS\nqeD`i3AHn'MbR)H[DS>'<7(YxNpX,8M`>]m6LA/s\nqeuioajklsdzcmadsqew\nqgqhqeghwgwebrwnwe\nqhP34Alx3MGAgEteQ8VzXnk977wWvuOceNKZ6pS6\nqpkalu0tyhB1o0dDsBNhFoD23JTR8dKvK03G1BzhRWvhMW1jC-9rVuMFxFExCbLUbTvhR9aRz-16zd0P0d545L6QSlrXx0SGoUdKMIrOQgHqL0Xe_1Srqkt5SnUU2c_85AX1otndRP2XTuYMVhTIrmupArIWBTCHIoa7YvPy6uF6gWzec1lIrSPq0L8Alt-yy9BUTehkX1il3goPRn0VbEbUnWtTli5OfVLwldHNFFc_9RmWbTT7RNEL_OAFeraKfTZ95XrSfXW-U50Embca1yBHzKYz9PG7Y1jBJ2Fm-WqkAdeCC93lUOsoNXsDOLSuQCiQfWpMZLOoUqMHXzL9dQ\nqqq\nqqqqwwwweeeerrrrttttyyyyuuuuiiiioooo\nqrBp0KmaYaCOnh4MePxRugtDRqhwEcPVz2VftgHfyWvtlLEwzZhIIdUGlQ9649v5\nqschhh\nqsjdhfkqjsdfjklhqsdflkjqsIUYghj$\nquinoa-shop\nquora\nqwaqwa\nqwe1r3f\nqweoi432f3in398c838ao\nqweqweqw\nqwerstdgwvdwqtdvqwvdhgvdshg\nqwerty\nqwertyuiohgfdsdfghj\nqwertyuiop\nqwertyuiopasdfghjklzxcvbnm123456\nqwertyuiopasdfghjklzxcvbnm123456ss\nqwertyuiopasdfghjklzxcvbnm12912\nr5Iw6SbVlMBXHxyNtQk9WehmaO1CopEi\nr69+T3ExQgCbWzHF8u+SJetNPGMBDe30\nrahasia\nrahasia-negara\nrandom\nrandom sign key (CHANGE IT!)\nrandomSecretJustToRunSomeTests\nrandomText\nrandom_string\nrandomrandom\nrandomstring\nrandomstringgg\nreact_chat\nreally-secret-key-here\nreallyreallyreallyreallyverysafe\nrecipe-journal\nrelax take it easy\nreplaceThisSecretWithStrongSentence\nreplacethis\nrh0LiNdhTIovxRVDiMJWhoaemKpCQOfN28N+TXQR\nricoduukasecrets\nrj321#241Aionas#@*%asnd*23N324$13kH3#4&\nroger-takeshita-secret\nronin\nroomtaskcontroller\nroot\nrrroorerew\nruibarbosafcrb\nrutnviprojectissoawesome\nrweesdfgdfhhfgii31\ns##47qyxE3k+}5#WHZznQXdzf8=Znnddffdj7E)ApKV_ypd9_n(W-S%hd>83;USkU+aFwe+`5~c\\(KR?&PfsfsY~4t2VRBVu9r(p44z?_$j:yhS`Ms9(HjyYf/z9C[fcajn{n;]RPy[>xHG%LfWDe2PXW?^\\\\p3~dnc^pQ7$!8MnyQ7hUzZ\nvrZtOEfYGhMcc68b329da9893e34099c7d8ad5cb9c940\nw22H2asuFa95sdoXx8DJRIlcOJzPWXpa\nw9sXfDAnywi7WBHsSmqNwXish4JShKfm\nw9zxXN7XLPq2DMftAaOcD71tj9kHMWB9\nwYbUgUPYWxHd9y\nwYbUgUPYWxHd9y5rtd\nwalker\nwashington\nwave\nwbyjy456g@5h$5bv34ev34!\nwe should keep this a secretmaybe\nwearemeanpeople\nweatherapp\nweb_app\nwebstore-ZAQ!2wsx\nwefhwqiugh3fuihrewofiwqerhgtq\nwefohwrejl3425\nwelcomehomemrfrog1944\nwelcomeinno$10000\nwelcometoironman\nwell-known-value\nwewhatsgram jwt\nwhatever your secret for your jwt is\nwhatever99\nwhatinthewld\nwhere-the-challenge-begins-ultra-secure-secret\nwilson-moraes\nwiqo3i4i39j9[fsjdfsdif343911\nwjjEQRQvCYX5e3ClaPTy8jaYapwWacJiAHnyRNXoHlge7iWjLSo7PDqitV9FnYsS\nwoBtyUyPhI0iNiCDJsp4Dei-jB6Ep0nORWwTYqpCAQO_Jad9P9SbDr8SdRkz7zZGgDPtW5WLN-Lfng3kNTE0_K7zFaShY9WFK4A4fePLgCiQiC_1T7QvyG2FIOEndRyjx0pI9B9pCY1hfn7A97XrtM30xtLhu97ub0xVLuW4gR0\nwonderfulevergreensecret\nwoo\nwoqkfmiwmUAzw5hr3d8q9TjQeHq747nKyWMEJ\nworking_on_weekends_fucking_suuuuuuuuuuuuucks\nwow so secret\nwow_this_is_some_secure_password\nwoyebuzhidaoxiediansha\nwqBhr5pH1EMkx6SQJgN1CKQFdTC9DyGR\nwrite_something\nwutangclan\nx51boct1235455aazgq31\nxCA01pBA8bf4IxvL\nxF7vW4qJ6xG0lE9hK4xS8lY7tZ8tM0dV\nxGPbhZH0TM1NakjgWjGtwFqocBUNlrsi\nxStmbyc066BOFn40gIr29y09Ud94z1P7\nxW43DEhmDdGZl4oW6ezFNI5QBFGrhG9X\nxablau\nxbsabdRs\nxkMBdsE+P6242Z2dPV3RD91BPbLIko7t\nxkfo02fySirnyk&aj4iZkjeo\nxmoMtn5YelPZsYAnQRKBNxUOiIwhR3Sf\nxoiafiho2y89pq4t2p8hawgiuwafeiur8923\nxswords\nxswordsUserServerSecret\nxtech20200919\nxtytzt00700tytx\nxxx\nxxxx\nxxxxx\nxxxxxx\nxxxxxxx\nxxxxxxxx\nxxxxxxxxxxxxxx\nxxxxxxxxxxxxxxx\nxxxxxxxxxxxxxxxxxxxxxx\nxyz123\nxz?_fd-BE\\#:K/+Fb[b7DQ'gPhWW^fU!7Hk$G7+7eX$EWK_N-r\nxz?_fd-BE\\\\#:K/+Fb[b7DQ'gPhWW^fU!7Hk$G7+7eX$EWK_N-r\ny0urS3cr31l5fj |bx(o[$x412>YVXd}cJv+6+}Hdac[r;:TTd&6a^\nyarimasune\nyassine\nyeWAgVDfb$!MFn@MCJVN7uqkznHbDLR#\nyeiyeiyeiyeiyeiyeiyeiyeiyeiyeiyei\nyetgTXUzFG3sLviN\nyippy\nyiw1z2XJKQ7VHI...\nyolopass\nyor secret key\nyou secret string\nyou wish!\nyouhavetochoseone\nyoullneverguessthishahaha\nyour JWT secret.\nyour client secret\nyour json token secret\nyour jwt secret\nyour personal secret goes here\nyour secret API key\nyour secret key to SIGN token\nyour signature secret\nyour super secret key\nyour-256-bit-secret\nyour-hidden-secret\nyour-jwt-secret\nyour-secret\nyour-secret-code\nyour-secret-jwt-key\nyour-secret-key\nyour-secret-whatever\nyour-super-secret-string\nyour-top-secret-key\nyourSuperSecretPassword\nyour_client_secret\nyour_jwt_secret\nyour_jwt_secret_key\nyour_jwt_secret_word\nyour_secret\nyour_secret_here\nyour_secret_jwt_key\nyour_secret_key\nyour_secret_keys\nyour_secret_string\nyour_secret_token_or_key\nyour_secret_value_dont_share_this\nyour_super_secret_secret\nyouraccesstokensecret\nyourappkey\nyourjwtsecret\nyoursecret\nyoursecrethere\nyoursecretkey\nyt_target_okr\nyuanchangjian199305221\nyxcvbnmnbvcxyxcvbnm\nyyyy\nyyyyyy\nz43t78z4f3g87tz4387tz\nz6dl6gOuGtZj26ipPx5mgbHABkmCKNrqBwZON555Rx96UR7jDl7iuO5ONZoldMj5\nz70H2htNWxLMqi9oBD3f0ij9AzeeaSGy\nzEYi10LSgle2w0me3tIAl3UKjLh8j2nLoe9j0pGIlLW1izsRz6CA8r38Twi6u6IO\nzK7fUOck9oz9hjXtRhfMuXj1H642gLp9\nzM/@'!u!Rzv,,bRex(?;_];e;Brg)6=;a}f8+6_RC'.XA[>J/;\nzTP4jTKHWtWWDrgiOIs7gBBIWU03PITi\nzX4qU6uV3jY5tT9oO8lD4gP2eC5bM9sV\nzaq!@wsxCDE#\nzarkansas1298\nzawarudo\nzenvarocks node .\nzenvarocks nodemon .\nzfgm7r19arm0f5a3j839\nzwc1R0lRU327XJnqBGzcIv3aBr4Mrvcb\nzx8qaNifAmuR2lHe4N0G716ywEw9IF7V\nzxcvz\nzxsde====zaaa\n{bcrypt}$2a$10$vCXMWCn7fDZWOcLnIEhmK.74dvK1Eh8ae2WrWlhr2ETPLoxQctN4.\n{cas-cipher}eyJhbGciOiJIUzUxMiIs...\n{noop}secret\n{very secret key}\n{xor}LDo8LTor\n{{ oidc_playground_jwt_secret }}\n}x\"aEZkk24cbXc$&/Q7cD6KtR]]^?4\nñsda%%··$$·%jdjasrg80(/(&9432$·&·6\nТайна\n密钥\ngo-admin\n9AU8YmXVa4P8ukcXbglh9vZxiMMo4wGA6mduqqRW\n06583af2-03ff-47fa-aa43-5f54e2d7b04a\n`&L94*B:3,uYe3FEzHFq\nanother_secret\n7c10615c946ddf4de8dd2fbf6469aeb8eb4c48c6\naen7ieCahc9eC9aequ7eib4ogei4Afei\npapibaquigrafo\nD6VLjHFBXJtfvAnyFihaCXYzSJvmqzqZoO3OxWmVmqOauKxGKc3vkaIPoAYChX8r\nAkZmLGvZI9gMYc6GHAjL8Jv2SWuDt#dvL&6@ZyzS&cjex%sdiM\nqrD6h8K6S9503Q06Y6Rfk21TErImPYqa\nc0rlhqelhas8m2agg8ttg10lqk2e7smn\npoobarbee\nPKOukFHr1oEsK9XbgJ5aVoB3YN8Fq5fP\n6067dba9-1234-1234-1234-92208c77ce77\nECCJZNJWLPEA3YB6Y2LTQGQD3GJZ3F93\n639259d4-9dd8-4b25-bf01-95f9567eaf4b\nLS4ApnJHvw1oXcS1Aqa3HQUa5aEFBKpf8eRbuBlOjTQD03WxHLzMxsXuVquMMO0\n66ztrd875ZT6755%TEWHt3%kjG;%8753Fhje%%)0khestshq4823528%(/8(82rtzeiwstsAKRHAEJ%4\nlAnJWK[lFyj/zJb]oyvpUdrXZQYYaroZnL=`_UDUeM?7xkpH1@l5`e:s]_tP>qgY\n365b0ef82c42562a443cd8a9fcd9efa499f69669\nqsfdgvrzezvzsdv\nq6s5dg168r1gf61\nshhhhhhared-secret\nddsae316542tggu45532rgd\nZDIyOGQ0YjM0YTJhNjlhZDhjNzNjMzBjNWEwMjU4NmFmMThhOTUyNGRhNDk5NTBiZjhkZmQ0NTU2Y2ZjMDI1Yw==\nkkkkk\nsNzk2YJxJLvqvcZsCaEqwY8zZvbusd6q\nIjdBdlgcuN>kqgY\n365b0ef82c42562a443cd8a9fcd9efa499f69669\nqsfdgvrzezvzsdv\nq6s5dg168r1gf61\nddsae316542tggu45532rgd\nZDIyOGQ0YjM0YTJhNjlhZDhjNzNjMzBjNWEwMjU4NmFmMThhOTUyNGRhNDk5NTBiZjhkZmQ0NTU2Y2ZjMDI1Yw==\nkkkkk\nsNzk2YJxJLvqvcZsCaEqwY8zZvbusd6q\nIjdBdlgcuN>k!N\naishiteru\naishangni\nais\nairforce\naipgd\naipcti\nainiyongyuan\nainiyisheng\nainiyibeizi\nainiwuhui\nainidewo\nainideren\nainibubian\nainibaobei\nainiaini\naini5201314\naini3344\naini1314521\naini1314520\naini1314.\naini123456789\naini123456\naili1314\nailaopo1314\naijing1314\naiinter\nai7758521\nai5201314\nai1314520\nai123456789\nadrienne\nadmintus\nadminsa\nadministrators\nadminabc\nadmin79\nadmin78\nadmin75\nadmin63\nadmin47\nadmin321\nadmin32\nadmin297\nadmin282\nadmin234\nAdmin2013\nadmin13906271234\nadmin125\nadmin123@#\naDmin123\nAdMin123\nAdmin@huawei.com\nADMIN@123\nadmin@#\nadmin*123\nadmin$123\nadmin$\nadmin!@#$%^\nAdmin!@#\nADMIN\nadidas\nadapter\nadam\naceracer\nacer\naccpaccp\nabwdxwtz\nabcdefghijk\nabcdefg1234567\nabcdefg12345\nabcdefg1234\nabcdefg1\nabcdef1234\nabcdeabcde\nabcde123456789\nabcde123456\nabcd987654321\nabcd789456\nabcd654321\nabcd5678\nabcd5201314\nabcd456789\nabcd36888\nabcd147258369\nabcd147258\nabcd13579\nabcd1314520\nabcd1314\nABCD123456789\nabcd12345678\nabcd1234567\nabcd1234!\nabcd-1234\nabcd123321\nabcd123123\nABCD123\nabcd0123\nabcd@1234\nabcabc123\nABCabc123\nabc987654321\nabc987654\nabc88888888\nabc88888\nabc888\nabc789456123\nabc789456\nabc7758521\nabc7758258\nabc666666\nabc654123\nabc651114\nabc54321\nabc520520\nabc258369\nabc159357\nabc147258369\nabc13579\nabc1314520\nabc123789\nabc123654\nabc123456abc\nabc1234\nabc123,./\nabc123!@#$^\nABC123\nabc000000\nabc@1234\nabc!@#123\nab1314520\nab12345678\nab1234567\nAb123456\nab123123\naasd123456\naasd.12345\naaron\naabbccddee\naabb123456\naaasssddd\naaasss\naaaqqq123\naaabcabc\naaabbb123\naaaaaaa1\naaaaaaa\naaaaaa5061313\naaaaaa123456\naaaaaa111111\naaaaaa11\naaaaa12345\naaaaa123\naaaaa\naaaa8888\naaaa123456\naaa654321\naaa5201314\naaa456789\naaa222\naaa147258369\naaa147258\naaa135246\naaa1314520\naaa123aaa\naaa12345678\naaa1234567\naaa123321\naaa123!@#\naaa111111\naaa000000\naaa000\naa789456\naa654321\naa520520\naa1314520\naa123654\naa123456aa\nAA12345678\naa1234567\nAa111111\naa100200\na999999999\na9876543210\na963852741\na89400ab\na88888888\nA88888888\na8888888\na88778877\na789789\na789456123\na7777777\na77493618\na741852963\na5845201314\na520520aa\na520520520\nA5201314\na369258147\na369258\na258369\na23456789\na2345678\na1s2d3f4g5h6\na1s2d3\na1b1c1d1\na1a2a3a4a5a6\na1a2a3a4a5\na1a1a1a1\na147852369\na123b456c789\na123b456\na123b123\nA123a123\na123654789\nA123456A\na123456987\na12345678a\na123456789b\na1234560\na123456!\nA123456\na1234.1234\na12301230\na1230123\na123000\na123.321\na1111111111\na100200\na0123456789\na0000000000\na000000000\na@123456\n9o0p-[=]\n9i9i9i9i\n9i8u7y6t\n999wf\n999999999a\n9999999998\n9999999990\n99999998\n9999900000\n99995555\n99991111\n999666\n9992000\n999000\n999\n99889988\n9988776655\n99819981\n9981\n996633\n9960\n990123\n9898998\n9898989898\n988888888\n98787\n9878\n98769876\n987654321qwe\n987654321qq\n987654321qaz\n987654321abc\n987654321aa\n98765432123\n9876543210a\n-987654321\n987654320\n98765431\n98765321\n-98765\n98764321\n98761234\n98741236\n987321654\n987321\n987123456\n987123\n986753421\n9861250123\n98188729\n97654321\n976431852\n969696\n963852741a\n96385274100\n96321478\n9632147\n963.963.\n963.8520741\n96111111\n960806\n95959595\n953139\n95313\n9527999!!!\n9527\n95217\n952\n951753456\n951753123\n951357\n933\n9182736455\n90op90op\n90987\n9098\n90909098\n9090909090\n90332773\n9033\n9000000\n8uhbnji9\n8ik,9ol.\n8i8i8i\n8989898989\n896352639\n895623741\n891129aaa\n891023hh\n89080620084\n8899\n88982866\n8890\n8889999\n888999000\n888899999\n88888999\n88888899\n8888888a\n88888889\n8888888899\n8888888889\n888888881\n888888880\n88888887\n88888881\n88888880\n88888866\n88888800\n88888168\n88887777\n8888666\n88885555\n88884444\n88883333\n88882222\n8888168\n88881234\n88881111\n8882009\n8882008\n8882006\n8882003\n8882000\n888\n88778877\n88776655\n88771024\n8877\n886886886\n88668866\n885522\n88488848\n8848\n882627.8\n88123456\n880128\n880127\n88008800\n88\n8787878787\n87654322\n87654321a\n876543219\n87654312\n87654123\n870903114\n8686886\n86680101\n8630516boss\n85411165\n852963741\n852963\n852852852\n852852\n852799!!!\n852741\n8522\n84821742\n846528ydt\n84423196\n840425\n840328\n83869247\n83383325\n831101qsl\n8288\n82828282\n826826826\n82537724\n82468246\n820927\n820213\n81915944\n81828384\n81592109\n812345678\n81234567\n811009\n80908090\n8012160713\n801212\n80119\n801078604\n800800800\n800201\n80008000\n80000000\n80\n8.52457E+11\n8.30721E+11\n7ujm8ik,\n7daysinn\n797979\n7946138520\n794613258\n7914888\n790709\n790611\n790528\n790297648\n790203\n789qwe123\n789qwe&*(\n789987789\n789852123\n789852\n78978978\n7896541230\n789632147\n789512357\n78951230\n789456qwe\n789456asd\n789456abc\n789456123q\n789456123abc\n789456123a\n78945612300\n7894561\n78945600\n7891234560\n78907890\n7890123\n7878787878\n7869616\n784951623\n784512963\n78157878\n780429\n7788999\n778899123\n7788521521\n77885210\n77881230\n77788899\n77779999\n77777778\n77776666\n7772009\n7772008\n7758522\n7758521aa\n775852188\n7758521456\n7758521241\n775852121\n7758521125\n7758521110\n775852111\n7758521..\n7758520520\n7758258qq\n775825888\n7758258521\n7758258369\n77582581314\n7758258110\n7758258000\n775825800\n775201314\n7715123\n771126\n771102\n771020\n770880990\n7708801314\n770520\n76787678\n76767676\n767676\n7654321q\n7654321`\n761127\n753951852\n753951123\n75395100\n752883855\n75237523\n7510147433\n748748748\n748596123\n74747474\n7474741\n745201314\n74511940\n742141189\n741852963a\n74185296300\n741258\n741236987\n74123698\n7412369\n74108520963\n7410852\n7410258963\n7374521\n733833999\n731731731\n731129\n730901\n730428\n729729729\n7215211314\n718293456\n70701111\n700704\n700629gh\n7.89457E+11\n7.84534E+11\n7.75852E+12\n7.53952E+11\n7\n6yhnmju7\n6y7u8i9o\n6tfcvgy7\n68973435779\n68856636\n6868686868\n6868668\n67899876\n67896789\n67891234\n6789012345\n678678678\n6767676767\n676767\n66889900\n66888888\n6677889900\n66700388\n66688899\n66688888\n6668888\n66688800\n666777\n666688888\n6666699999\n66666668\n6666666\n66666\n66665555\n66663333\n66661111\n66660000\n666333\n6662009\n6662008\n6662000\n662766\n66079350\n6565656565\n656565\n654654654\n654654\n654321qweasd\n654321qwe\n654321qw\n654321qq\n654321qaz\n654321qa\n654321q\n654321aa\n6543211qaz@WSX\n65432111\n646656xz7\n6368656\n63636363\n636363\n6308\n630158513\n624624624\n623623\n6230\n62\n619030475\n614614614\n6111\n60729043\n602602602\n60200946\n601601601\n60106010\n6.66667E+11\n5tgbnhy6\n5t4r3e2w1q\n5i5i5i5i\n5ds65tr5as\n59595959\n59505950\n594201314\n589632147\n588888888\n58888888\n588588588\n5858588\n5858585858\n5845203344\n5845131421\n5845131420\n58451201314\n5843344521\n5843344520\n584334421\n584251314\n5841314920\n5841314\n5841201314\n581166701\n58080596547\n56tyghbn\n568568568\n567891234\n5678910\n5678901234\n567890\n5656789\n56567878\n5656565656\n5656\n56545654\n563214789\n56215487\n560111aa\n556688op\n55668899\n556677889\n5566123\n55588888\n555666888\n55559999\n55557777\n55555333\n5555500000\n55554444\n55552222\n55551111\n55550000\n555\n5544332211\n55201314\n551648586\n55\n5488142\n546546546\n54565456\n545454\n5454\n545007273\n54321qaz\n5432167890\n543212345\n54185418\n541236987\n54107338\n53589793\n53215321\n5301314\n52771314\n527527527\n5271314\n526526526\n5261314\n525252\n5251314\n523698741\n521laopo\n5217758521\n5217758\n5.21522E+11\n5215211314\n5215210\n521478963\n5213713752\n521224727\n5212009\n5212008\n5212006\n5212003\n5212000\n521131488\n5211314789\n52113147758\n5.21131E+13\n5211314520\n52113143344\n521131421\n5211314123\n52113141\n5211314000\n521131400\n5211314..\n5211258\n5.21126E+11\n5211251314\n521123456\n52111314\n5211111\n52100000\n5210000\n521\n520woaini\n520fagnsg\n52088888\n5208888\n5207758258\n5207758\n5205301314\n52052052\n520520123\n52052000\n5205200\n5203344520\n520201314\n5202012\n5202011\n5202010\n5202009\n5202008\n5202007\n5202006\n5202005\n5202004\n5202003\n5202002\n5202001\n5202000\n5201989\n5201988\n5201987\n5201986\n5201413\n5201315\n5201314zhang\n5201314z\n5201314yy\n5201314yu\n5201314yang\n5201314yan\n5201314y\n5201314woaini\n5201314wei\n5201314wang\n5201314wan\n5201314w\n5201314ok\n5201314mm\n5201314love\n5201314ll\n5201314li\n5201314l\n5201314asd\n5201314as\n5201314abcd\n5201314aaa\n5201314999\n5201314920\n52013149\n5201314888\n5201314886\n520131478\n52013147758\n520131477\n520131466\n520131455\n5201314521\n520131452\n5201314258\n520131422\n5201314168\n52013141516\n520131414\n520131412\n5201314110\n52013140000\n5201314+\n5201314...\n5201313\n52012345\n5201234\n520123123\n5201111\n520090025hgb\n520025520\n5200000\n520@1314\n520.1314\n5188888\n51851888\n516516516\n515151\n513tyml.com\n513513513\n51166701\n510510510\n510406030\n508508508\n507507507\n504504504\n503503503\n5021314\n501501501\n5000000\n5.84521E+11\n5.84131E+11\n5.20131E+11\n4r5t6y7u\n4r3e2w1q\n4aadmin\n492357816\n4867086\n47\n4654654\n46\n45874587\n456987\n456852852\n456852456\n456852123\n45685200\n45683968\n456789asd\n456789abc\n4567891230\n45678912\n4567890123\n4567890\n45674567\n4567\n45654565\n4564564\n456123abc\n4561237890\n456123456\n456123123\n45612312\n456\n4545454545\n4545\n4455667788\n44446666\n44445555\n4444444\n44443333\n43434343\n43420024\n4321qwer\n4321ABCD\n43218765\n43215678\n43214321\n43211234\n4294967296\n4202000\n42011178\n416416416\n415415415\n415263\n412412412\n411192710\n410410410\n408408408\n406406406\n405405405\n403403403\n402402402\n401401401\n4.56853E+11\n4.56789E+11\n3HIDC!!#\n3H8IDC72sanhe000\n3gqq.com\n3G\n3edcxsw21qaz\n3edcvgy7\n3edcvfr4\n3edc\n3e4r5t6y\n395835961\n383838\n38183818\n3815151\n3764\n37214728\n3721\n3714261985\n36988888\n36987412\n3698741\n3698521470\n3693903\n36936936\n369258147a\n36925814700\n36925814\n365obsserver!\n365\n363636\n361\n360360360\n357159\n353535\n35201314\n34erdfcv\n3456789\n345678\n3456\n345345\n34373\n343434\n3434\n3389style\n33787943\n33669988\n3366994qaz\n33669900\n33668899\n3345678\n33455432\n3344556677\n3344521521\n3344520520\n33445200\n3344179\n3344\n334205265\n333888\n333777\n333666888\n33355555\n333444555\n333444\n33339999\n33337777\n33335555\n3333388888\n33332222\n33331111\n33330000\n33123456\n326598\n326326326\n326159487\n325325325\n32345678\n32343234\n3232323232\n3232\n321abc\n3216732167\n321478965\n32145678\n32132132\n32132100\n32123212\n32103210\n321.abc\n3203672\n319319319\n31496081\n314314314\n31415927\n3135134162\n31313131\n3113388\n3106028011\n3100\n31\n309309309\n308308308\n30798764681\n307307307\n306306306\n305488940\n305305305\n304304304\n303303303\n303030\n302302302\n301301301\n3000000\n3.69369E+11\n3.36699E+11\n3.34452E+13\n3.14159E+15\n3.1415927\n3.01416E+11\n2WSXZAQ1\n2wsx1qaz\n2w3e4r5t6y\n2w3e4r5t\n2w2w2w2w\n2sqlserver2000\n2999811983\n2876180com\n2870873859\n282828\n2718281828\n27182818\n27105821\n26511314\n262626\n261412\n26\n259695\n25897758\n258963\n258852\n25836900\n2582597758\n2581314\n258000\n258\n254044375\n25262526\n2.51314E+11\n250976046\n2503687\n2501314\n246813579\n24681013579\n2468101214\n246802468\n24242424\n235689741\n235689147\n2345678910\n2345678901\n23456781\n234561\n23456\n23454321\n23452345\n2345\n234234234\n234234\n23232345\n2323232323\n2323\n23212321\n2312\n2269439999\n22558800\n2244\n223456789\n22345678\n22336688\n2233445566\n222555888\n222333444\n22229999\n22228888\n22227777\n22226666\n22225555\n22224444\n2222288888\n2222211111\n22222\n22220000\n222111\n222\n221221221\n22\n21wqsaxz\n21vianet!@#\n21882188\n2188\n21876346a\n216216216\n21436587\n214214214\n213546879\n213456789\n213213\n21232123\n2121521\n2121241\n2121212121\n2121\n21122112\n209209209\n208208208\n207207207\n206206206\n205205205\n204204204\n202202202\n2020520\n2014520\n2013woquni\n2013style\n2013happy\n2013520\n2.01314E+11\n20131415\n20131400\n2013104quni\n2013@2013\n2013.happy\n2012zxc\n2012style\n2012qwerasd\n2012qwer1234\n2012qweasd2012\n2012qwe\n2012happy\n2012asd\n2012abcd\n2012abc\n2012888\n2012520\n20122013\n2012123\n20121221\n20121212\n2012@2012\n2012\n2011888\n2011520\n20112012\n2011123\n20111111\n2011111\n2011\n2010comer\n2010888\n2010520\n20102000\n2010123\n20101010\n2010001\n20100000\n2009888\n2009520\n200919ab\n2009163\n2009123\n2009111\n20090101\n2009001\n2008woaini\n2008999\n200888888\n2008888\n200888\n2008666\n2008521\n20085201314\n2008520085\n2008520\n2008518\n2008512\n2008200\n20081990\n2008168\n2008163\n2008126\n2008123\n2008111\n2008110110\n2008110\n2008101\n20080101\n2008008\n2008007\n2008002\n2008001\n2008000\n2007520\n20072006\n20072000\n2007163\n2007123456\n2007123\n20070101\n2006888\n2006521\n2006520\n20062000\n2006126\n2006123\n2006\n20052003\n20052002\n20052001\n20052000\n2005123\n20051115\n2005\n20042002\n20042000\n2004123\n200401265\n20032001\n2003123\n2003\n20022000\n2002123\n20021212\n2002\n2001\n20002010\n2000123\n2000008\n2000000\n200000\n2000\n2.58258E+11\n2.0092E+11\n2.0082E+11\n2.0072E+11\n2.0052E+11\n2.00505E+11\n2.0032E+11\n2.0002E+11\n1z2x3c\n1w1w1w1w\n1rtj689d\n1r2t3y4u\n1qwertyuiop\n1qwertyu\n1qwedcvbnm\n1qw23er45t\n1qw23er4\n1qw21qw2\n1qazzaq1\n1qazxsw23e\n1QAZXSW2\n1qazXSW@3edc\n1qazXDR%\n1qazxcvbnm\n1qazxcvb\n1qazse4rfvgy7\n1qazse4rfv\n1qazse45\n1qazse432w\n1qazse432\n1qazse4\n1qaz741\n1qaz3edc\n1qaz2wsx#EDC\n1qaz123456\n1qaz@WSX2012\n1qaz@wsx#edc\n1qaz@2wsx\n1qasw2\n1qasde32\n1qa2ws3ed4rf\n1q2w3e4r5t6y7u8i\n1q2w3e4r5t6\n1q2w3e4r5\n1Q2W3E4R5\n1q2w3e4R\n1q2w3e,./?><\n1Q2W3E\n1q2w1q2w\n1q2w#E$R\n1q2w\n1q21q21q2\n1q21q2\n1q1q2w2w\n1Q1Q1Q1Q1Q\n1q1q1q1q1\n1q\n1loveyou\n1h2h2h3h4h\n1a2s3d\n1A2B3C4D\n1a2a3a4a5a6a\n1a2a3a4a5a\n1a2a3a4a\n19999999\n1999999\n1999123\n19990125\n1998123\n199771\n19972010\n1997123\n19970701\n1996123\n19952008\n1995123\n19950812\n19950601\n1994520\n19942008\n1994123\n19941128\n1993520\n1993123\n19930906\n19930328\n1992520\n1992123\n1992111\n1992\n1991520\n1991123\n1991121\n1991111\n1991\n1990525\n1990521\n1990520\n1990518\n1990513\n1990214\n19902010\n19902009\n1990126\n1990125\n1990123456\n19901230\n1990123\n19901227\n19901225\n19901224\n19901221\n19901220\n1990122\n19901218\n19901215\n19901214\n19901213\n19901212\n19901211\n19901210\n1990121\n19901206\n19901130\n19901129\n19901128\n19901127\n19901126\n19901125\n19901124\n19901123\n19901122\n19901120\n1990112\n19901117\n19901115\n19901112\n19901111\n19901110\n1990111\n19901105\n19901102\n19901101\n1990110\n19901030\n19901029\n19901028\n19901027\n19901026\n19901025\n19901024\n19901023\n19901022\n19901021\n19901020\n19901019\n19901018\n19901017\n19901016\n19901015\n19901014\n19901013\n19901012\n19901011\n1990101\n19901008\n19901003\n19901002\n19901001\n19900916\n19900910\n19900824\n19900820\n19900818\n19900811\n19900801\n19900718\n19900711\n19900707\n19900624\n19900526\n19900525\n19900523\n19900520\n19900516\n19900513\n19900512\n19900510\n19900505\n19900504\n19900503\n19900415\n19900329\n19900321\n19900320\n19900314\n19900312\n19900307\n19900306\n19900301\n19900228\n19900227\n19900219\n19900218\n19900217\n19900216\n19900215\n19900214\n19900213\n19900211\n19900210\n19900209\n19900208\n19900207\n19900206\n19900205\n19900203\n19900202\n19900201\n19900126\n19900125\n19900124\n19900123\n19900122\n19900118\n19900113\n19900110\n19900109\n19900108\n19900105\n19900104\n19900102\n19900101\n1989815\n1989521\n1989520\n1989222\n1989129\n1989128\n1989126\n1989125\n1989123456\n19891231\n19891230\n1989123\n19891229\n19891227\n19891226\n19891223\n19891222\n19891221\n19891220\n1989122\n19891219\n19891218\n19891217\n19891216\n19891215\n19891214\n19891213\n19891211\n19891210\n1989121\n19891209\n19891208\n19891207\n19891206\n19891205\n19891204\n19891203\n19891202\n19891201\n1989120\n198912\n1989119\n1989118\n1989117\n1989116\n1989115\n1989114\n19891130\n1989113\n19891129\n19891128\n19891127\n19891126\n19891125\n19891124\n19891121\n19891120\n1989112\n19891119\n19891118\n19891117\n19891116\n19891115\n19891114\n19891113\n19891112\n19891111\n19891110\n1989111\n19891109\n19891108\n19891107\n19891106\n19891105\n19891104\n19891103\n19891102\n19891101\n1989110\n198911\n19891031\n19891030\n19891029\n19891028\n19891027\n19891022\n19891014\n19891011\n1989101\n19891009\n19891008\n19891007\n19891006\n19891005\n19891004\n19891003\n19891002\n19890929\n19890928\n19890927\n19890926\n19890925\n19890924\n19890923\n19890922\n19890921\n19890920\n19890919\n19890918\n19890917\n19890916\n19890915\n19890914\n19890913\n19890912\n19890911\n19890910\n19890909\n19890908\n19890907\n19890906\n19890905\n19890904\n19890903\n19890902\n19890901\n19890830\n19890829\n19890828\n19890827\n19890826\n19890825\n19890824\n19890823\n19890822\n19890821\n19890820\n19890819\n19890818\n19890817\n19890816\n19890815\n19890814\n19890813\n19890812\n19890811\n19890810\n19890809\n19890808\n19890806\n19890805\n19890804\n19890803\n19890802\n19890801\n19890729\n19890728\n19890727\n19890726\n19890725\n19890724\n19890723\n19890722\n19890721\n19890720\n19890719\n19890718\n19890717\n19890716\n19890715\n19890714\n19890713\n19890712\n19890711\n19890710\n19890709\n19890708\n19890707\n19890706\n19890705\n19890704\n19890703\n19890702\n19890701\n19890630\n19890629\n19890628\n19890627\n19890626\n19890625\n19890624\n19890623\n19890622\n19890621\n19890620\n19890619\n19890618\n19890617\n19890616\n19890615\n19890614\n19890613\n19890612\n19890611\n19890610\n19890609\n19890608\n19890607\n19890606\n19890605\n19890604\n19890603\n19890602\n19890601\n19890529\n19890528\n19890527\n19890526\n19890525\n19890524\n19890523\n19890522\n19890521\n19890520\n19890519\n19890518\n19890517\n19890516\n19890515\n19890514\n19890513\n19890512\n19890511\n19890510\n19890509\n19890508\n19890507\n19890506\n19890505\n19890504\n19890503\n19890502\n19890501\n19890430\n19890429\n19890428\n19890427\n19890426\n19890425\n19890423\n19890422\n19890421\n19890420\n19890419\n19890418\n19890417\n19890416\n19890415\n19890414\n19890413\n19890412\n19890411\n19890410\n19890409\n19890408\n19890407\n19890406\n19890405\n19890404\n19890403\n19890402\n19890401\n19890329\n19890328\n19890327\n19890326\n19890325\n19890324\n19890323\n19890322\n19890321\n19890320\n19890319\n19890318\n19890317\n19890316\n19890315\n19890314\n19890313\n19890312\n19890311\n19890310\n19890309\n19890308\n19890307\n19890306\n19890305\n19890304\n19890303\n19890302\n19890301\n19890228\n19890227\n19890226\n19890225\n19890224\n19890223\n19890222\n19890221\n19890220\n19890219\n19890218\n19890217\n19890216\n19890215\n19890214\n19890213\n19890212\n19890211\n19890210\n19890209\n19890208\n19890207\n19890206\n19890205\n19890204\n19890203\n19890202\n19890201\n19890130\n19890129\n19890128\n19890127\n19890126\n19890125\n19890124\n19890123\n19890122\n19890121\n19890120\n19890119\n19890118\n19890117\n19890116\n19890115\n19890114\n19890113\n19890112\n19890111\n19890110\n19890109\n19890108\n19890107\n19890106\n19890105\n19890104\n19890103\n19890102\n19890101\n1988888\n198888\n1988818\n19885510\n1988521\n1988520\n1988222\n19882010\n1988128\n1988126\n1988125\n1988123456\n19881231\n19881230\n1988123\n19881229\n19881222\n1988122\n1988121\n19881209\n19881207\n19881206\n19881205\n19881204\n19881203\n19881202\n19881201\n1988120\n198812\n1988119\n1988118\n1988117\n1988116\n1988113\n1988112\n19881119\n19881110\n1988111\n19881109\n19881108\n19881107\n19881106\n19881105\n19881104\n19881102\n19881101\n1988110\n198811\n19881031\n1988101\n19881009\n19881008\n19881007\n19881006\n19881005\n19881004\n19881003\n19881002\n19880929\n19880928\n19880927\n19880926\n19880925\n19880924\n19880923\n19880922\n19880920\n19880919\n19880918\n19880917\n19880916\n19880915\n19880914\n19880913\n19880912\n19880911\n19880910\n19880909\n19880908\n19880907\n19880906\n19880905\n19880904\n19880903\n19880902\n19880901\n19880831\n19880830\n19880829\n19880828\n19880827\n19880826\n19880825\n19880824\n19880823\n19880822\n19880821\n19880820\n19880819\n19880817\n19880816\n19880815\n19880814\n19880813\n19880812\n19880811\n19880809\n19880807\n19880806\n19880805\n19880804\n19880803\n19880802\n19880730\n19880729\n19880728\n19880727\n19880726\n19880725\n19880724\n19880723\n19880722\n19880721\n19880720\n19880719\n19880718\n19880717\n19880716\n19880715\n19880714\n19880713\n19880712\n19880711\n19880710\n19880709\n19880708\n19880707\n19880706\n19880705\n19880704\n19880703\n19880702\n19880701\n19880630\n19880629\n19880628\n19880627\n19880626\n19880625\n19880624\n19880623\n19880622\n19880621\n19880620\n19880619\n19880618\n19880617\n19880616\n19880615\n19880614\n19880613\n19880612\n19880610\n19880609\n19880608\n19880607\n19880606\n19880605\n19880604\n19880603\n19880602\n19880601\n19880531\n19880530\n19880529\n19880528\n19880527\n19880526\n19880525\n19880524\n19880523\n19880522\n19880521\n19880520\n19880519\n19880518\n19880517\n19880516\n19880515\n19880514\n19880513\n19880512\n19880511\n19880510\n19880509\n19880508\n19880507\n19880506\n19880505\n19880504\n19880503\n19880502\n19880501\n19880429\n19880428\n19880427\n19880426\n19880425\n19880424\n19880423\n19880422\n19880421\n19880420\n19880419\n19880418\n19880417\n19880416\n19880415\n19880414\n19880413\n19880412\n19880411\n19880410\n19880409\n19880408\n19880407\n19880406\n19880405\n19880404\n19880403\n19880402\n19880401\n19880331\n19880330\n19880329\n19880328\n19880327\n19880326\n19880325\n19880324\n19880323\n19880322\n19880321\n19880320\n19880319\n19880318\n19880317\n19880316\n19880315\n19880314\n19880313\n19880312\n19880311\n19880310\n19880309\n19880308\n19880307\n19880306\n19880305\n19880304\n19880303\n19880302\n19880301\n19880229\n19880228\n19880227\n19880226\n19880225\n19880224\n19880223\n19880222\n19880221\n19880220\n19880219\n19880218\n19880217\n19880216\n19880215\n19880213\n19880212\n19880211\n19880210\n19880209\n19880208\n19880207\n19880206\n19880205\n19880204\n19880203\n19880131\n19880130\n19880129\n19880128\n19880127\n19880126\n19880125\n19880124\n19880123\n19880122\n19880121\n19880120\n19880119\n19880118\n19880117\n19880116\n19880115\n19880114\n19880113\n19880112\n19880111\n19880110\n19880109\n19880108\n19880107\n19880106\n19880105\n19880104\n19880103\n19880102\n1988\n1987911\n1987828\n1987815\n1987654321\n1987626\n1987625\n1987623\n1987621\n1987620\n1987521\n1987520\n1987321\n1987222\n1987214\n19872007\n198712821\n19871271987\n1987127\n1987126\n1987125\n1987123456\n19871231\n19871222\n1987122\n19871208\n19871207\n19871206\n19871204\n19871203\n1987120\n1987119\n1987117\n1987115\n1987114\n19871130\n1987113\n1987112\n1987111\n19871109\n19871107\n19871106\n1987110\n19871031\n1987102\n1987101\n19871009\n198710086\n19871007\n198710\n19870930\n19870929\n19870928\n19870927\n19870925\n19870924\n19870923\n19870922\n19870921\n19870919\n19870918\n19870917\n19870916\n19870915\n19870914\n19870912\n19870909\n19870908\n19870907\n19870906\n19870905\n19870904\n19870903\n19870902\n19870831\n19870830\n19870827\n19870826\n19870823\n19870822\n19870819\n19870818\n19870817\n19870816\n19870814\n19870813\n19870812\n19870811\n19870810\n19870809\n19870807\n19870806\n19870805\n19870804\n19870803\n19870802\n19870730\n19870729\n19870728\n19870727\n19870726\n19870725\n19870724\n19870723\n19870722\n19870721\n19870720\n19870719\n19870718\n19870717\n19870716\n19870715\n19870714\n19870713\n19870712\n19870711\n19870710\n19870709\n19870708\n19870707\n19870706\n19870705\n19870704\n19870703\n19870702\n19870701\n19870630\n19870627\n19870625\n19870622\n19870619\n19870617\n19870616\n19870614\n19870613\n19870611\n19870609\n19870608\n19870607\n19870605\n19870604\n19870603\n19870602\n19870531\n19870530\n19870529\n19870528\n19870527\n19870526\n19870525\n19870524\n19870523\n19870522\n19870521\n19870520\n19870519\n19870518\n19870517\n19870516\n19870515\n19870514\n19870513\n19870512\n19870511\n19870510\n19870509\n19870508\n19870507\n19870506\n19870505\n19870504\n19870503\n19870502\n19870501\n19870430\n19870429\n19870428\n19870427\n19870426\n19870424\n19870423\n19870422\n19870421\n19870420\n19870419\n19870418\n19870417\n19870416\n19870415\n19870414\n19870413\n19870412\n19870411\n19870410\n19870409\n19870408\n19870407\n19870406\n19870405\n19870404\n19870403\n19870402\n19870331\n19870330\n19870329\n19870328\n19870327\n19870326\n19870325\n19870323\n19870322\n19870321\n19870320\n19870319\n19870318\n19870317\n19870316\n19870315\n19870314\n19870313\n19870311\n19870310\n19870309\n19870308\n19870307\n19870306\n19870305\n19870304\n19870303\n19870302\n19870301\n19870227\n19870226\n19870225\n19870224\n19870223\n19870222\n19870221\n19870220\n19870219\n19870218\n19870213\n19870212\n19870211\n19870210\n19870209\n19870207\n19870203\n19870131\n19870130\n19870128\n19870127\n19870126\n19870123\n19870122\n19870121\n19870119\n19870118\n19870117\n19870116\n19870115\n19870114\n19870113\n19870112\n19870111\n19870110\n19870109\n19870108\n19870107\n19870106\n19870105\n19870104\n19870103\n1987000\n1987\n1986521\n1986222\n1986126\n1986122\n1986121\n1986119\n19861130\n1986112\n1986111\n1986110\n19861031\n1986101\n19860929\n19860928\n19860924\n19860922\n19860921\n19860920\n19860919\n19860918\n19860917\n19860916\n19860915\n19860914\n19860913\n19860912\n19860909\n19860908\n19860907\n19860906\n19860905\n19860904\n19860903\n19860902\n19860830\n19860829\n19860828\n19860827\n19860826\n19860825\n19860824\n19860823\n19860822\n19860821\n19860820\n19860819\n19860818\n19860817\n19860814\n19860813\n19860812\n19860811\n19860810\n19860809\n19860808\n19860807\n19860805\n19860804\n19860803\n19860802\n19860729\n19860728\n19860727\n19860726\n19860725\n19860724\n19860723\n19860722\n19860721\n19860720\n19860719\n19860718\n19860717\n19860716\n19860715\n19860714\n19860713\n19860712\n19860711\n19860710\n19860709\n19860708\n19860707\n19860706\n19860705\n19860704\n19860703\n19860702\n19860701\n19860630\n19860629\n19860628\n19860627\n19860626\n19860625\n19860624\n19860623\n19860622\n19860621\n19860620\n19860619\n19860618\n19860617\n19860616\n19860615\n19860614\n19860613\n19860612\n19860611\n19860610\n19860609\n19860608\n19860607\n19860605\n19860604\n19860603\n19860602\n19860601\n19860530\n19860529\n19860528\n19860527\n19860526\n19860525\n19860524\n19860523\n19860522\n19860521\n19860520\n19860519\n19860518\n19860517\n19860516\n19860515\n19860514\n19860513\n19860512\n19860511\n19860510\n19860509\n19860508\n19860507\n19860506\n19860505\n19860504\n19860503\n19860502\n19860501\n19860429\n19860428\n19860427\n19860426\n19860425\n19860424\n19860423\n19860422\n19860421\n19860420\n19860419\n19860418\n19860417\n19860416\n19860415\n19860414\n19860413\n19860412\n19860411\n19860410\n19860409\n19860408\n19860407\n19860406\n19860405\n19860404\n19860403\n19860402\n19860401\n19860330\n19860329\n19860328\n19860327\n19860326\n19860325\n19860324\n19860323\n19860322\n19860321\n19860320\n19860319\n19860318\n19860317\n19860316\n19860315\n19860314\n19860313\n19860312\n19860310\n19860309\n19860308\n19860307\n19860304\n19860301\n19860227\n19860226\n19860225\n19860224\n19860223\n19860222\n19860221\n19860220\n19860219\n19860217\n19860216\n19860212\n19860211\n19860209\n19860208\n19860207\n19860205\n19860204\n19860203\n19860201\n19860128\n19860127\n19860125\n19860124\n19860123\n19860122\n19860121\n19860119\n19860118\n19860117\n19860116\n19860115\n19860114\n19860113\n19860112\n19860111\n19860110\n19860109\n19860108\n19860107\n19860106\n19860105\n19860104\n19860103\n19860102\n198600\n1986\n1985520\n19851231\n19851222\n1985121\n19851209\n19851207\n1985111\n19851108\n19851107\n19851031\n19851009\n19850930\n19850929\n19850928\n19850927\n19850925\n19850924\n19850923\n19850922\n19850920\n19850919\n19850918\n19850917\n19850916\n19850915\n19850914\n19850913\n19850912\n19850911\n19850910\n19850909\n19850908\n19850907\n19850906\n19850905\n19850904\n19850903\n19850902\n19850901\n19850829\n19850828\n19850827\n19850826\n19850825\n19850824\n19850823\n19850822\n19850821\n19850820\n19850819\n19850818\n19850817\n19850816\n19850814\n19850813\n19850812\n19850811\n19850810\n19850809\n19850808\n19850807\n19850806\n19850805\n19850804\n19850803\n19850802\n19850801\n19850730\n19850729\n19850728\n19850727\n19850726\n19850725\n19850724\n19850723\n19850722\n19850721\n19850720\n19850719\n19850718\n19850717\n19850716\n19850715\n19850714\n19850713\n19850712\n19850711\n19850710\n19850709\n19850708\n19850707\n19850706\n19850705\n19850704\n19850703\n19850702\n19850701\n19850630\n19850629\n19850628\n19850627\n19850626\n19850625\n19850624\n19850623\n19850622\n19850621\n19850620\n19850619\n19850618\n19850617\n19850616\n19850615\n19850614\n19850613\n19850612\n19850611\n19850610\n19850609\n19850608\n19850607\n19850606\n19850605\n19850604\n19850603\n19850602\n19850601\n19850530\n19850529\n19850528\n19850527\n19850526\n19850525\n19850524\n19850523\n19850522\n19850521\n19850520\n19850519\n19850518\n19850517\n19850516\n19850515\n19850514\n19850513\n19850512\n19850511\n19850510\n19850509\n19850508\n19850507\n19850506\n19850505\n19850504\n19850503\n19850502\n19850501\n19850429\n19850428\n19850427\n19850426\n19850425\n19850424\n19850423\n19850422\n19850421\n19850420\n19850419\n19850418\n19850417\n19850416\n19850415\n19850414\n19850413\n19850412\n19850411\n19850410\n19850409\n19850408\n19850406\n19850404\n19850403\n19850402\n19850401\n19850330\n19850329\n19850328\n19850327\n19850326\n19850325\n19850324\n19850323\n19850322\n19850321\n19850320\n19850319\n19850318\n19850317\n19850316\n19850315\n19850314\n19850313\n19850312\n19850311\n19850310\n19850309\n19850308\n19850307\n19850306\n19850305\n19850304\n19850303\n19850302\n19850301\n19850228\n19850227\n19850226\n19850225\n19850224\n19850223\n19850222\n19850221\n19850220\n19850219\n19850218\n19850217\n19850216\n19850213\n19850212\n19850211\n19850210\n19850209\n19850208\n19850207\n19850206\n19850205\n19850204\n19850203\n19850202\n19850201\n19850130\n19850129\n19850128\n19850127\n19850126\n19850125\n19850124\n19850123\n19850122\n19850121\n19850120\n19850119\n19850118\n19850117\n19850116\n19850115\n19850114\n19850113\n19850112\n19850111\n19850110\n19850109\n19850108\n19850107\n19850106\n19850105\n19850104\n19850103\n19850102\n19850000\n1985\n198499\n1984520\n19841231\n1984123\n19841229\n19841223\n19841222\n19841209\n19841207\n19841206\n19841205\n19841202\n19841119\n19841116\n19841115\n19841114\n19841110\n1984111\n19841109\n19841108\n19841107\n19841106\n19841104\n19841031\n19840930\n19840929\n19840928\n19840927\n19840926\n19840925\n19840924\n19840923\n19840922\n19840921\n19840920\n19840919\n19840918\n19840917\n19840916\n19840915\n19840914\n19840913\n19840912\n19840911\n19840910\n19840909\n19840908\n19840907\n19840906\n19840905\n19840904\n19840903\n19840902\n19840901\n19840829\n19840828\n19840827\n19840826\n19840825\n19840824\n19840823\n19840822\n19840821\n19840820\n19840819\n19840818\n19840817\n19840816\n19840815\n19840814\n19840813\n19840812\n19840811\n19840810\n19840809\n19840808\n19840807\n19840806\n19840805\n19840804\n19840803\n19840802\n19840801\n19840730\n19840729\n19840728\n19840726\n19840725\n19840724\n19840723\n19840722\n19840721\n19840720\n19840718\n19840717\n19840716\n19840715\n19840714\n19840713\n19840712\n19840711\n19840710\n19840709\n19840708\n19840707\n19840706\n19840705\n19840704\n19840703\n19840702\n19840701\n19840629\n19840628\n19840627\n19840626\n19840625\n19840624\n19840623\n19840622\n19840621\n19840620\n19840619\n19840618\n19840617\n19840616\n19840615\n19840614\n19840613\n19840612\n19840611\n19840610\n19840609\n19840608\n19840607\n19840606\n19840605\n19840604\n19840603\n19840602\n19840601\n19840529\n19840528\n19840527\n19840526\n19840525\n19840524\n19840523\n19840522\n19840521\n19840520\n19840519\n19840518\n19840517\n19840516\n19840515\n19840514\n19840513\n19840512\n19840511\n19840510\n19840509\n19840508\n19840507\n19840506\n19840505\n19840504\n19840503\n19840502\n19840501\n19840429\n19840428\n19840427\n19840426\n19840424\n19840423\n19840422\n19840421\n19840420\n19840419\n19840418\n19840417\n19840416\n19840415\n19840414\n19840413\n19840412\n19840411\n19840410\n19840409\n19840408\n19840407\n19840405\n19840404\n19840403\n19840402\n19840401\n19840329\n19840328\n19840327\n19840326\n19840325\n19840324\n19840323\n19840322\n19840321\n19840320\n19840319\n19840318\n19840317\n19840316\n19840315\n19840314\n19840313\n19840312\n19840311\n19840310\n19840309\n19840308\n19840307\n19840306\n19840305\n19840304\n19840303\n19840302\n19840301\n19840229\n19840228\n19840227\n19840226\n19840225\n19840224\n19840223\n19840222\n19840221\n19840220\n19840219\n19840218\n19840217\n19840216\n19840215\n19840213\n19840212\n19840211\n19840210\n19840209\n19840208\n19840207\n19840206\n19840205\n19840204\n19840203\n19840202\n19840201\n19840131\n19840130\n19840129\n19840128\n19840127\n19840126\n19840125\n19840124\n19840123\n19840122\n19840121\n19840120\n19840119\n19840118\n19840117\n19840116\n19840115\n19840114\n19840113\n19840112\n19840111\n19840110\n19840109\n19840108\n19840107\n19840106\n19840105\n19840104\n19840103\n19840102\n1984\n1983726\n1983520\n19831231\n19831230\n1983123\n19831222\n19831211\n19831209\n19831207\n19831205\n19831204\n19831203\n19831201\n19831128\n19831127\n19831119\n19831118\n19831117\n19831115\n19831114\n1983111\n19831109\n19831108\n19831107\n19831106\n19831103\n19831031\n19831030\n19831029\n19831019\n19831014\n19831009\n19831008\n19831007\n19831006\n19831005\n19831004\n19831003\n19831002\n19830930\n19830929\n19830928\n19830927\n19830926\n19830925\n19830924\n19830923\n19830922\n19830921\n19830920\n19830919\n19830918\n19830917\n19830916\n19830915\n19830914\n19830913\n19830912\n19830911\n19830910\n19830909\n19830908\n19830907\n19830906\n19830905\n19830904\n19830903\n19830902\n19830901\n19830830\n19830829\n19830828\n19830827\n19830826\n19830825\n19830824\n19830823\n19830822\n19830821\n19830820\n19830819\n19830818\n19830817\n19830816\n19830815\n19830814\n19830813\n19830812\n19830811\n19830810\n19830809\n19830808\n19830807\n19830806\n19830805\n19830804\n19830803\n19830801\n19830729\n19830728\n19830727\n19830726\n19830725\n19830724\n19830723\n19830722\n19830721\n19830720\n19830719\n19830718\n19830717\n19830715\n19830714\n19830713\n19830712\n19830711\n19830710\n19830709\n19830708\n19830707\n19830706\n19830705\n19830704\n19830703\n19830702\n19830701\n19830629\n19830628\n19830627\n19830626\n19830625\n19830624\n19830623\n19830622\n19830621\n19830620\n19830619\n19830618\n19830617\n19830616\n19830615\n19830614\n19830613\n19830612\n19830611\n19830610\n19830609\n19830608\n19830607\n19830606\n19830604\n19830603\n19830602\n19830601\n19830529\n19830528\n19830527\n19830526\n19830525\n19830524\n19830523\n19830522\n19830521\n19830520\n19830519\n19830518\n19830517\n19830516\n19830515\n19830514\n19830513\n19830512\n19830511\n19830510\n19830508\n19830507\n19830506\n19830505\n19830504\n19830503\n19830502\n19830501\n19830429\n19830428\n19830427\n19830426\n19830425\n19830424\n19830423\n19830422\n19830421\n19830420\n19830419\n19830418\n19830417\n19830416\n19830415\n19830414\n19830412\n19830411\n19830410\n19830408\n19830407\n19830406\n19830405\n19830404\n19830402\n19830401\n19830330\n19830329\n19830328\n19830327\n19830326\n19830325\n19830324\n19830323\n19830321\n19830320\n19830318\n19830317\n19830316\n19830315\n19830314\n19830313\n19830312\n19830311\n19830310\n19830309\n19830308\n19830307\n19830306\n19830305\n19830304\n19830303\n19830302\n19830301\n19830228\n19830227\n19830226\n19830225\n19830224\n19830223\n19830222\n19830221\n19830220\n19830219\n19830218\n19830217\n19830216\n19830215\n19830213\n19830212\n19830211\n19830210\n19830209\n19830208\n19830207\n19830206\n19830205\n19830204\n19830203\n19830202\n19830201\n19830130\n19830129\n19830128\n19830127\n19830126\n19830125\n19830124\n19830123\n19830121\n19830120\n19830119\n19830118\n19830117\n19830116\n19830115\n19830114\n19830113\n19830111\n19830110\n19830109\n19830108\n19830107\n19830106\n19830105\n19830104\n19830103\n19830102\n19830101\n1983\n19821231\n1982123\n19821229\n19821228\n19821227\n19821226\n19821223\n19821222\n19821221\n19821219\n19821218\n19821217\n19821214\n19821213\n19821209\n19821208\n19821207\n19821206\n19821205\n19821204\n19821203\n19821202\n19821201\n19821130\n19821127\n19821126\n19821125\n19821124\n19821119\n19821118\n19821117\n19821116\n19821115\n19821114\n19821113\n19821112\n19821111\n19821110\n1982111\n19821109\n19821108\n19821107\n19821106\n19821105\n19821104\n19821103\n19821102\n19821101\n19821031\n19821030\n19821009\n19821008\n19821007\n19821006\n19821005\n19821004\n19821003\n19821002\n19820930\n19820929\n19820928\n19820927\n19820926\n19820925\n19820924\n19820923\n19820922\n19820921\n19820920\n19820919\n19820918\n19820917\n19820916\n19820915\n19820914\n19820913\n19820912\n19820911\n19820910\n19820909\n19820908\n19820907\n19820906\n19820905\n19820904\n19820903\n19820902\n19820901\n19820830\n19820829\n19820828\n19820827\n19820826\n19820825\n19820824\n19820823\n19820822\n19820821\n19820820\n19820819\n19820818\n19820817\n19820816\n19820815\n19820814\n19820813\n19820812\n19820811\n19820810\n19820809\n19820808\n19820807\n19820806\n19820805\n19820804\n19820803\n19820802\n19820801\n19820729\n19820728\n19820726\n19820725\n19820724\n19820723\n19820722\n19820721\n19820720\n19820719\n19820718\n19820717\n19820716\n19820715\n19820714\n19820713\n19820712\n19820711\n19820710\n19820709\n19820708\n19820707\n19820705\n19820704\n19820703\n19820702\n19820701\n19820629\n19820628\n19820627\n19820626\n19820625\n19820624\n19820623\n19820622\n19820621\n19820620\n19820619\n19820618\n19820617\n19820616\n19820615\n19820614\n19820613\n19820612\n19820611\n19820610\n19820609\n19820608\n19820607\n19820606\n19820605\n19820604\n19820603\n19820602\n19820601\n19820530\n19820529\n19820528\n19820527\n19820526\n19820525\n19820524\n19820523\n19820521\n19820520\n19820519\n19820518\n19820517\n19820516\n19820515\n19820514\n19820512\n19820510\n19820508\n19820506\n19820505\n19820504\n19820503\n19820502\n19820501\n19820429\n19820428\n19820427\n19820426\n19820425\n19820424\n19820423\n19820422\n19820421\n19820420\n19820419\n19820418\n19820417\n19820416\n19820415\n19820414\n19820413\n19820412\n19820411\n19820410\n19820409\n19820408\n19820407\n19820406\n19820405\n19820404\n19820403\n19820402\n19820401\n19820330\n19820329\n19820328\n19820327\n19820325\n19820324\n19820323\n19820322\n19820321\n19820320\n19820319\n19820318\n19820317\n19820316\n19820315\n19820314\n19820313\n19820312\n19820311\n19820310\n19820309\n19820308\n19820307\n19820306\n19820305\n19820304\n19820303\n19820302\n19820301\n19820228\n19820227\n19820226\n19820222\n19820221\n19820220\n19820219\n19820218\n19820217\n19820216\n19820215\n19820214\n19820213\n19820212\n19820211\n19820210\n19820209\n19820208\n19820207\n19820206\n19820205\n19820204\n19820203\n19820202\n19820201\n19820130\n19820129\n19820128\n19820127\n19820126\n19820125\n19820124\n19820123\n19820122\n19820121\n19820120\n19820119\n19820118\n19820117\n19820116\n19820115\n19820114\n19820113\n19820112\n19820111\n19820110\n19820109\n19820108\n19820107\n19820106\n19820105\n19820104\n19820103\n19820102\n19820101\n1982\n198198198\n19811231\n19811230\n19811229\n19811228\n19811227\n19811226\n19811225\n19811224\n19811223\n19811222\n19811221\n19811220\n19811219\n19811218\n19811217\n19811216\n19811215\n19811214\n19811213\n19811212\n19811211\n19811210\n19811209\n19811208\n19811207\n19811206\n19811205\n19811204\n19811203\n19811202\n19811201\n19811130\n19811129\n19811128\n19811127\n19811126\n19811125\n19811124\n19811123\n19811122\n19811121\n19811120\n19811119\n19811118\n19811117\n19811116\n19811115\n19811114\n19811113\n19811112\n19811111\n19811110\n19811109\n19811108\n19811107\n19811106\n19811105\n19811104\n19811103\n19811102\n19811101\n19811031\n19811030\n19811029\n19811028\n19811027\n19811026\n19811025\n19811024\n19811023\n19811022\n19811021\n19811020\n19811019\n19811018\n19811017\n19811016\n19811015\n19811014\n19811013\n19811012\n19811011\n19811010\n19811009\n19811008\n19811007\n19811006\n19811005\n19811004\n19811003\n19811002\n19810930\n19810929\n19810928\n19810927\n19810926\n19810925\n19810924\n19810923\n19810922\n19810921\n19810920\n19810919\n19810918\n19810917\n19810916\n19810915\n19810914\n19810912\n19810911\n19810910\n19810909\n19810905\n19810902\n19810901\n19810828\n19810826\n19810825\n19810824\n19810823\n19810817\n19810816\n19810815\n19810813\n19810812\n19810808\n19810801\n19810723\n19810721\n19810720\n19810719\n19810712\n19810711\n19810707\n19810705\n19810701\n19810629\n19810628\n19810627\n19810626\n19810624\n19810623\n19810621\n19810620\n19810619\n19810618\n19810617\n19810610\n19810609\n19810606\n19810601\n19810528\n19810527\n19810521\n19810510\n19810504\n19810425\n19810416\n19810412\n19810327\n19810325\n19810323\n19810320\n19810318\n19810314\n19810312\n19810311\n19810310\n19810307\n19810306\n19810304\n19810301\n19810228\n19810221\n19810219\n19810217\n19810214\n19810213\n19810212\n19810206\n19810203\n19810202\n19810201\n19810126\n19810124\n19810121\n19810119\n19810116\n19810101\n198019\n19801231\n19801230\n1980123\n19801229\n19801228\n19801226\n19801225\n19801224\n19801223\n19801221\n19801220\n19801219\n19801218\n19801217\n19801216\n19801215\n19801214\n19801213\n19801212\n19801211\n19801210\n19801208\n19801207\n19801206\n19801205\n19801204\n19801201\n19801130\n19801129\n19801128\n19801127\n19801126\n19801125\n19801124\n19801123\n19801122\n19801121\n19801120\n19801119\n19801118\n19801117\n19801116\n19801115\n19801114\n19801112\n19801111\n19801110\n19801109\n19801108\n19801107\n19801106\n19801105\n19801103\n19801102\n19801029\n19801028\n19801027\n19801026\n19801025\n19801024\n19801023\n19801022\n19801021\n19801020\n19801019\n19801018\n19801017\n19801016\n19801015\n19801014\n19801013\n19801012\n19801011\n19801010\n19801009\n19801008\n19801007\n19801005\n19801003\n19801001\n19800916\n19800819\n19800812\n19800613\n19800405\n19800312\n19800216\n19800101\n1980\n197912wsr\n19791229\n19791228\n19791226\n19791225\n19791224\n19791220\n19791218\n19791217\n19791214\n19791213\n19791212\n19791208\n19791127\n19791125\n19791123\n19791120\n19791119\n19791111\n19791109\n19791108\n19791105\n19791104\n19791102\n19791101\n19791030\n19791029\n19791028\n19791027\n19791026\n19791025\n19791024\n19791023\n19791022\n19791021\n19791020\n19791019\n19791015\n19791013\n19791012\n19791010\n19791008\n19791001\n19790916\n19790909\n19790822\n19790630\n19790318\n19790315\n19790203\n1979\n19781230\n19781228\n19781226\n19781225\n19781224\n19781223\n19781221\n19781220\n19781215\n19781212\n19781211\n19781210\n19781203\n19781202\n19781128\n19781126\n19781123\n19781122\n19781121\n19781120\n19781118\n19781116\n19781115\n19781113\n19781112\n19781111\n19781104\n19781101\n19781028\n19781026\n19781025\n19781023\n19781022\n19781021\n19781018\n19781015\n19781012\n19781011\n19781010\n19781001\n19780926\n19771126\n19771105\n19771020\n19771010\n1977\n19760620\n19740302\n19691126\n194983521\n19491001abc\n1949\n1928374655\n19216801\n1921\n191919\n1912\n191154120\n1.89532E+11\n189189189\n18888888\n1888888\n18859297516\n188188188\n188\n187222455\n186186186\n184866884\n1828384858\n18283848\n18273645\n1818181818\n17951\n178678789\n176219444\n175638080\n174292xy\n172839456\n172\n171717\n17051974\n16897188\n1688988\n168888888\n1688888\n1682008\n16816888\n16816868\n16816800\n1632008\n162534\n161616\n159951159\n159875321\n159753aa\n159753852\n1597534682\n159753258\n159753159\n159632478\n159632\n159487263\n1593574682\n1593572486\n159357159\n1593570\n159263487\n159263\n159258357\n159\n15890193764\n153624\n151515\n1515\n147963\n1478963258\n1478963250\n147896320\n147895623\n1478523690\n14785236\n147741\n14736900\n147258qq\n147258asd\n147258abc\n147258aa\n147258963\n14725888\n147258369z\n147258369w\n147258369qq\n147258369qaz\n147258369q\n147258369asd\n147258369abc\n147258369aa\n147258369+\n147258369..\n147258369*\n1472583\n1472580369\n1472580\n1456789\n145236\n142753869\n141725\n141592653\n14159265\n141414\n1413520\n141242343\n13920225257\n13919936479\n13888888888\n13888888\n13860745234\n1383838438\n13801001020\n13800138\n137138139\n13709394\n13654006821\n13628792658\n13579abc\n1357997531\n135798642\n1357924681\n13579246\n1357911\n1357908642\n135521234\n13530023404\n13527380230\n13524678\n135136137\n135135\n135\n134567890\n134135136\n13324016206\n133\n132456\n13243546\n1321321\n132132\n1314zhiaini\n1314woquni\n1314love\n1314aini\n1314999\n13149286ab\n1314925\n1314921\n13148888\n1314888\n13147758521\n13147758258\n131456789\n1314555\n1314530\n1314527\n1314526\n1314525\n1314522\n1314521a\n13145211314\n1314521123\n1314521000\n1314520woaini\n1314520w\n1314520qq\n1314520q\n1314520love\n1314520li\n1314520asd\n1314520aa\n1314520999\n131452099\n1314520888\n1314520886\n131452088\n13145208\n1314520789\n13145207758\n131452077\n1314520584\n1314520530\n13145203344\n131452020\n1314520110\n131452011\n1314520025\n1314520000\n1314520...\n1314512\n1314502\n13143344521\n13143344520\n13142659\n1314250\n131420520\n1314179\n1314168\n1314159520\n1314151617\n13141314520\n1314125\n1314123\n13140000\n1314000\n131400\n1313131313\n13128255707\n13093313856\n1305821983\n12wsxzaq\n12wqasxz\n12wq12wq\n12wedfvb\n12w12w12w\n12qwerty\n12QWASZX\n12qwas\n12qw34er56ty\n12qw34er\n12qw12qw\n12qw!@QW\n12qazwsx\n12q12q12q\n129129129\n128128\n128\n127127127\n126126126\n1259312593\n12593000\n12580000\n125478963\n12481632\n1245\n124124124\n123zxcvbnm\n123zxc456\n123zhang\n123z\n123wsx\n123woaini\n123w123w\n123sa\n123qwertyuiop\n123QWErty\n123qwert\n123qweqwe\n123qwe63\n123qwe62\n123QWE456tyu\n123qwe@#\n123qwe,./\n123qwe!@\n123qqq\n123qq123\n123qaz123\n123qaz!@#\n123ewqasd\n123edsaqw\n123edc\n123asdfghjkl\n123asd456zxc\n123abcdefg\n123abcdef\n123abcde\n123abcabc\n123abc456def\n123abc456abc\n123abc!@#\n123aaa123\n123aa123\n123a456b789c\n123a456b\n123a321\n123a123\n123987654\n123963\n12388888\n1238888\n123888\n12378945\n1237890o0\n12378900\n1237890\n1236987456\n12369874123\n1236987410\n123698547\n123698\n123695847\n12369\n123666\n123654abc\n123654aa\n123654789a\n1236547\n12365412\n123654.com\n1235813\n1235789\n1235698\n1235689\n123567890\n1235678\n123520520\n1235201314\n12351235\n1234qwerQWER\n1234qwerasdf\n1234qwer!@#$\n1234QWER\n1234qazwsx\n1234eszxcv\n1234er\n1234asdfASDF\n1234ASDFasdf\n1234asdf!@#$\n1234ABCD\n12348888\n1234789\n12347\n12346899\n123467890\n1234678\n1234656\n12346\n12345trewq\n12345tgb\n12345t\n12345style\n12345qwer\n12345qaz\n12345q\n1234598765\n123459\n1234589\n12345888\n1234588\n12345876\n123458\n123457890\n1234578\n1234576\n123456zzz\n123456zxcvbnm\n123456zxcvbn\n123456zxcv\n123456zhu\n123456zhao\n123456zhang\n123456zaq\n123456yuiop\n123456ytrewq\n123456yt\n123456yj\n123456yh\n123456yang\n123456yan\n123456y\n123456xy\n123456xxx\n123456xiao\n123456x\n123456wu\n123456woaini\n123456wei\n123456wan\n123456uiop\n123456tyh\n123456ty\n123456TT\n123456trewq\n123456th\n123456t\n123456sa\n123456s\n123456QWEASD%\n123456QWE\n123456qa\n123456ppp\n123456op\n123456oo\n123456nm\n123456ni\n123456mn\n123456mmm\n123456ma\n123456love\n123456long\n123456lll\n123456lj\n123456lin\n123456kl\n123456kkk\n123456jkl\n123456hu\n123456hao\n123456gg\n123456ff\n123456chen\n123456bbb\n123456asdfgh\n123456asdfg\n123456asdf\n123456aq\n123456aini\n123456ai\n123456abcdefg\n123456abcde\n123456aaaa\n123456Aa\n123456a@\n123456a?\n123456a.\n123456A\n123456999\n12345690\n123456890\n1234567yh\n1234567y\n1234567u\n1234567qq\n1234567ll\n1234567l\n1234567k\n1234567i\n1234567b\n1234567ab\n1234567aa\n123456799\n123456790\n12345678u\n12345678qw\n12345678p\n12345678ok\n12345678o\n12345678m\n12345678i\n12345678A\n123456789zzz\n123456789zz\n123456789zxcv\n123456789zxc\n123456789zx\n123456789zhang\n123456789zaq\n123456789yu\n123456789yang\n123456789xx\n123456789www\n123456789ww\n123456789wo\n123456789wang\n123456789qwert\n123456789qwer\n123456789qw\n123456789qqq\n123456789pp\n123456789oo\n123456789ok\n123456789n\n123456789mn\n123456789mm\n123456789ma\n123456789love\n123456789ll\n123456789liu\n123456789li\n123456789kk\n123456789j\n123456789h\n123456789g\n123456789f\n123456789d\n123456789bb\n123456789az\n123456789asdfg\n123456789asdf\n123456789as\n123456789ai\n123456789abcde\n1.23457E+17\n12345678998\n12345678990\n12345678988\n1234567897\n12345678963\n1234567893\n1.23457E+15\n1234567890qwe\n1234567890qq\n1234567890q\n1234567890-=\n1234567890..\n123456789+++\n123456789++\n123456789@#\n123456789?\n123456789/*\n123456789/\n123456789,./\n123456789***\n123456789**\n1234567879\n1234567878\n1234567876\n12345678123\n1234567812\n1234567811\n1234567800\n12345678@\n12345678..\n123456778\n123456765\n12345675\n123456700\n1234566789\n123456678\n123456521\n1234564\n1234563\n1234562\n1234561234\n1234561230\n123456110\n1234560a\n1234560789\n123456+++\n123456+\n123456@@\n123456@#$%\n123456.a\n123456.789\n123456.1235\n123456.123\n123456,./\n123456***\n1234556789\n1234556\n1234555\n1234546789\n1234546\n12345432\n1234521\n1234520\n1234512\n1234511\n123451\n1234506789\n1234500000\n12345000\n1234500\n123450\n123447\n1234456\n1234455\n1234444\n12343456\n1234321234\n12342345\n12342008\n12342000\n1234123\n1234000\n1234@abcd\n1234@#$\n1234.zxcv\n1234.qwer\n1234.com\n1234.asdf\n1234!@#$qwer\n1234!@#$asdf\n1233456\n1233333\n1233321\n123321ww\n123321a\n12332188\n123321520\n1233214\n1233212\n1233211\n123321...\n123321..\n12331\n1232456\n12323456\n123234345\n123212321\n12321232\n12321\n1232012\n1232011\n1232010\n1232009\n1232008\n1232007\n1232006\n1232005\n1232004\n1232003\n1232002\n1232001\n1232000\n1232\n1231qaz2wsx\n1231988\n12316\n123147\n1231456\n1231321\n1231314520\n1231314\n123123zxc\n12312388\n123123789\n123123520\n1231234567\n1231233\n1231232\n123123123q\n1231231\n1231230123\n123123000\n123123...\n1231212\n12312\n1231123\n1231111\n123098\n12304560789\n1230123456\n1.23012E+11\n123012300\n1230101\n1230012300\n123000123\n1230000\n12300\n1230.1230.\n1230..\n123+123\n123@#qwe\n123@#\n123.zxc\n123.asd\n123.789+\n123.456.789.\n123.456.\n123.456\n123.123.123\n123.0123.0\n123..123\n123...\n123,./\n123,.\n123$qwer\n123$%^789\n123#@\n123!123\n123!@#abc\n12281228\n12261226\n12251225\n1225\n12241224\n1223456\n12231223\n12222222\n1222222\n122122122\n1220\n122.224\n12191219\n12171217\n1217\n12152205\n12151215\n12141214\n1213456\n1213\n1212qwqw\n121234567\n12123456\n1212345456\n12123434\n121234\n121232343\n121212qw\n121212as\n12121234\n121212123\n1212112\n12121\n12111211\n12101210\n121\n1205\n12041204\n12031203\n12021202\n120110119\n12]\n119\n11881188\n1188\n118118\n117117117\n116688\n116116116\n115599\n11336699\n1133557799\n11335577\n1129\n11271127\n1126\n11251125\n11241124\n112345678\n11234567\n1123123\n11228899\n11226688\n112244abc\n11224455\n11223456\n11223388\n11223366\n11223355\n11223345\n11223344556\n1122333\n1122330\n112233..\n112200\n112113114\n11211121\n1121\n11201120\n111qqq!!!\n111999\n111888\n11185\n111666888\n111333555\n111333\n11123456\n1112223\n1112222\n111213\n1112009\n1112008\n1112000\n11117777\n11116666\n11115555\n11114444\n11113333\n1111222\n11111q\n11111aaaaa\n11111a\n1111199999\n1111188888\n1111155555\n1111123\n111112222\n11111222\n1111122\n111111qqq\n111111qaz\n111111abc\n11111118\n111111121\n111111111q\n111111111a\n1111111111a\n1.11111E+19\n11111110\n1111110\n1111000\n1107\n11024568\n1102008\n110120123\n110119112\n110119110\n110112114\n11011101\n1.1011E+11\n1100000\n1100\n110\n106106106\n105105105\n1039\n103103103\n10293847\n102938\n1027\n10261026\n10251025\n10221022\n1022\n10211021\n102102\n102030123\n1.0203E+11\n10191019\n10181018\n10161016\n10121012\n1012000\n10111011\n101101\n10102020\n100dns\n10086123\n10086111\n10086000\n10041004\n1.002E+11\n100200100\n10020000\n1002000\n1001010010\n10001000\n1000010000\n1000001\n1000000\n10\n1=2-30495867\n0p9o8i7u6y\n0p0p0p0p\n0okmnji98uhb\n0o9i8u7y6t\n0o9i8u7y\n0O0O0O0O0O\n098plmokm\n0987poiu\n09876yhn\n0987654321qaz\n0987654321q\n8080808\n80808\n7736056123\n734\n7070707\n061112abc\n6060606\n578\n0340412124abcd\n308\n3030303\n30303\n277\n2020202\n20202\n1579\n012520wadll\n0123456a\n0123456789q\n0123456789abc\n0123456789a\n0111424dd\n101\n77\n7008009\n7007007\n00123456...\n00123456..\n1001\n000ooo\n000123!@#\n0000oooo\n0000aaaa\n000000qq\n000000q\n000000abc\n000000000a\n0000000000a\n000000...\n00000.....\n0-0-0-0-\n000...\n0.123\n0.0.00..\n0.0.0.0.0.\n0.0.0.\n=]-[0p9o\n~15\n~@#$%&*()_+|\n~!@#$%^&*()_+|\n`1qazxsw2\n`1q2w3e4r\n`1234567890\n`12345678\n`1`1`1`1\n````````\n^YHN&UJM\n][poiuytrewq\n@WSX#EDC\n@ssw0rd\n@admin\n@12345678\n@1234567\n@123456\n@$$word1\n@$$word\n@$$w0rd123\n@$$w0rd1\n@$$w0rd\n@#456&*(\n@#123\n@#$qwer\n@#$%&*()_+\n@#$%&*()\n@#$%\n@#\n..123456\n..0\n.......199@\n.......199\n.........\n....\n,ki89ol.\n,./,./\n*IK<(OL>\n*********\n******\n(OL>)P:?\n&UJM*IK<\n%username%123\n%username%12\n%TGBVFR$#EDCXSW@\n%TGB^YHN\n$RFV%TGB\n$RFV#EDC\n#EDC$RFV\n#@!ewq\n#@!321\n#@!123\n!QWE!asd\n!qazxsw@]\n!QAZ1qaz\n!qaz@WSX\n!q2w3e4r\n!Q2w3e4r\n!Q@W3e4r\n!Q@W#E$R\n!2#4%6&\n!@QWASZX\n!@#59560955\n!@#456&*(\n!@#321\n!@#19841010\n!@#123qwe\n!@#$5678\n!@#$%12345\n!!!!!!\noracle@123 \nkrinsyod\n2wsx@WSX\ntran2013\nmisc2013\nsjzf2013\nLihui111\nwusd1234\njihb2017\n111qqq!\nyuanms23\nabc!@#12\ncuiwl123\n000001\n000000\npass_123\np@33_123\np@ss_!@#\npass_1234\nqwe_1234\nbes_528!\ndomonitor\nbes\nSCOTT\nprecise\nlinym\nhanjianguo\nibmpm\narbitrary\nswmaster\nOperator\nnaricom\nfdwe\nsshuser\nwphdadmin\ngrid\nitnmagt\n!!!!!!!!\n!$&@%*#^(\n!123456!\n!1987112!\n!@#$%%$#@!\n!@#$%67890\n!@#$%^&*()_+\n!@#$%^123456\n!@#$%^zxjhxy\n!@#$1234\n!@#$qwer\n!@#$qwerasdf\n!@#101921\n!@#123abc\n!@#qwe123\n!@#QWE223328\n!@#qweASD\n!@#zxc123\n!qaz@wsx#edc\n#####*****\n#$%^&liu1!FENG2@\n#123456#\n#include\n#wgf920138\n\"$123,456,789 \"\n$dufeng19850707\n$yoshiki$\n)(*&6543\n*&*%&@#%\n*&^%$#@!\n**********\n***************\n***123456\n***???78618\n**123456\n**123456**\n**159326\n**74747474**\n**win5i5\n*.*198512\n*02h2601*\n*123*321*\n*123456*\n*123456789\n*123456789*\n*13678988165*\n*19781201\n*1980*0701*\n*5131421*\n*5211314*\n*58702019*\n*94d!yqt\n*963./8520\n*963/852\n*hope8848\n++++++++\n++++++++++\n++--**//\n++1982sky\n+-*/+-*/\n+-*//*-+\n+-*/0000\n+-*/05324sxm\n+-*/123456\n\",123456,395690879@qq.com\"\n\",420750,395690879@qq.com\"\n-139048821\n-206105882\n-210778420\n-269961902\n-42711908\n-73408043\n-944373895\n-946952286\n-949293905\n................\n....0000\n...333...\n...FHY...\n..123123\n./123456\n.0.0.0.0\n0.0123456\n0.012345679\n.123.123\n.123456.\n.123456789.\n.3253288.\n.369.369\n.799716.\n.820.4979\n.8956230..\n.adgjmptw\n.com.com\n.yang527\n/г╗p09ol.\n/*-+/*-+\n/*-/*-/*-\n////////\n//////////\n//334425\n//ZWHUAN18\n/581578/\n0.1.2.3.\n0.10.20.3\n0.1230.123\n0.12345678\n0.123456789+\n0.142857\n0.3698741\n0.369874125\n0.6180339\n0.65394145\n00..00..\n00.00.00\n000...000\n138\n000000000ccc\n19\n43\n00000000aa\n00000000l\n00000000q\n00000000z\n420\n0000000b\n0000000o\n0000000q\n0000000z\n18\n45\n78\n90\n98\n99\n000000aaaa\n000000aaaaaa\n000000ab\n000000abcd\n000000as\n000000asd\n000000bb\n000000cxy\n000000gg\n000000ha\n000000lin\n000000ll\n000000mm\n000000mmmmmm\n000000ok\n000000oo\n000000ooo\n000000OOOOOO\n000000pp\n000000qaz\n000000qqq\n000000wei\n000000yy\n000000zx\n000000ZZ\n139\n171\n416\n428\n713\n723\n815\n910\n916\n921\n963\n000009abc\n00000aaaaa\n00000lllll\n00000ooooo\n00000PPPPP\n00000qqqqq\n1168\n1197\n2180\n252077\n000032dm\n3386\n4587\n5244\n610000\n6582368\n6602201976\n6938\n7083\n761027\n0000761266wln\n7682\n804804\n8341\n850825\n8708\n0000938spider\n9988\n0000abcd\n0000OOOO\n0000pppp\n0000qqqq\n0000zzzz\n10001\n100010\n10002\n10010\n000105_hzl\n109021\n11000\n111000111\n11101\n11101010\n11122\n11189\n000111abc\n000111okok\n12091209\n1230406\n00012316zhou\n000123ok\n142368\n151987\n15425\n1587117\n168000\n16985\n19400\n000214zs\n000223lin\n23708831\n30007\n31118\n312012322\n33028\n333000\n40007\n41167\n42178713\n43119\n50785\n000520asd\n555333\n000566fyDH\n56992\n60004\n63054\n64005\n66612345\n70007\n70101\n000705kk\n80008\n81129\n8316979\n86419\n8642000\n888104\n91175\n000945aa\n990330\n000a19730127b000\n000aaaaa\n000abc339\n000c00EC\n000cw000\n000ds000ds\n000f276E\n000ing2009\n000mm111\n000OOO000\n000OOO000OOO\n000OOO0O0O\n10000100\n1001002\n100123\n1002003004\n1007008\n101008\n101500\n1018001018\n102000\n102400\n001030514wc\n107896\n108369\n11001815\n110022\n00110108zxfasf\n11032120\n00112233..\n112244\n112700\n112900\n113322\n115468\n001189fk\n0011feixiang\n0011yyyy\n120012\n120400\n121500\n121600\n001218415191tang\n121900\n001222abc\n122800\n123600\n124123\n001243ff\n00125abs\n130013\n13102300\n133104\n001359..\n00137abf\n145018\n150015\n15578427\n160016\n1607217\n1681664\n170017\n180018\n181010\n186900\n189800\n19131913\n197100\n197278\n197390\n1973900\n197974\n001asktang\n200020\n2016074\n210021\n2100258\n220022\n225062\n226688\n230023\n2300470053\n236800\n240024\n246151\n250018\n250025\n2510812\n270027\n271704\n2783201\n002b31bd\n300030\n3002001\n3003003\n305090\n3090112\n310031\n31120118\n314200\n31500315\n315200\n320032\n320231\n324110\n3261543\n330033\n339977\n340034\n3461123456\n352561\n360036\n003650llx\n370037\n370468\n390039\n003aicai\n003z003z\n4004004\n401122\n404018\n4040205\n404100\n406914\n412130\n417510\n420013\n420042\n4298008\n430043\n4372002031\n440044\n441054\n4428237\n4477721224\n450053\n450107\n45202123\n458700\n004b155c\n5005005\n510051\n52000520\n52100521\n52250081\n005321bf\n005387162yyy\n5400321\n54400544\n544944\n550055\n5511443322\n55712604\n557711\n560056\n578484\n581976\n6006006\n006006rose\n6007008\n0061330f\n63100631\n6312326\n6357651\n6566040370\n660066\n660088\n66041922\n661101\n006677yang\n690604\n6959156\n006D3bc8\n700070\n700700\n7007007007\n7007008\n007007abc\n007007zxw\n700800\n7008007008\n710071\n712345\n7123456\n71314520\n00717f4f\n718688\n724015\n007356bb\n746746\n007471xp\n750511\n75201314\n00752817c\n754312\n760076\n7666007\n770077\n007762A0\n780078\n7825359\n00783DC6\n790079\n790080\n790083\n007921may\n794555\n007D29a5\n007dm425\n007F6b10\n007jacky\n007kevin\n007lnlmxd\n007slm911\n800080\n800083\n8008008\n810081\n810509\n810723\n811500\n8123456\n008130fly\n820327\n820428\n82112700\n008300*/qq\n830083\n008308ms\n850928\n85200852\n00852ilu\n860086\n860807\n86306108\n870087\n8800520\n880066\n880088\n882255\n885788\n8858521\n8.86226E+11\n89112007\n008d640b\n008ganggang\n9008007\n9009009\n9023050\n906153831\n9113335\n00925klh\n940094\n00950e1c\n9601728\n9681219\n97120800\n979800\n980098\n980712\n990099\n990199\n00991225qq\n992233\n009981glg\n99887700\n009weilai\n00a15b15c\n00a19730127b00\n00a40717\n00b62FDC\n00crystal\n00D87004\n00D96ccb\n00db5dba\n00E062ab\n00ef7954\n00F41801\n00fm2171\n00kj123456\n00OO**ta6\n00OO**tb10\n00oo00oo\n1000100\n1001000\n10010001\n10010010\n10020030\n10021212\n1005000\n1006499\n1010005\n1010011\n10100202\n1010091\n010101..\n101010101\n1010102\n1010202\n101061202\n1010801\n1011010\n1011220\n1011221\n1011234\n1011443\n101152209\n1011977\n1012101\n10123456\n10123456789\n1012891\n1013891\n1014891\n01014891pan\n1015401\n1015402\n010158da\n1016891\n1017891\n1019825010\n1020102\n1020300\n10203000\n1020301\n10203010203\n1.0203E+14\n1020305\n10203123\n10203456\n010203abc\n1020815\n1024205\n1024208\n10250407\n102662434\n0102mima\n1030103\n1030215\n10305050\n103050709\n10310316\n10311024\n1031116\n1031225\n1031832\n1031985\n10321421\n10330419\n10336200\n103599724\n1040104\n10403010\n1041230\n1041301\n010413sy\n104150298\n10415063\n1041982\n1041986\n1042039\n1042114\n104260726\n1044210\n1045136\n0104bluesky\n1050045\n1050105\n1051119\n1051220\n10515010515\n10516129\n105201314\n1055168\n1058693321\n1058791\n0105sisi89\n1060103\n1060106\n1060616\n1060928\n1061001\n1061583\n1062007\n10634410\n1063547165\n1068508899\n1069745577\n0106v1009\n1070107\n1070502\n1071068\n1071981\n1072009\n107201072\n0107713479shi\n0107love1017\n1080108\n10810764\n1081335\n1081728\n1081902\n1081985\n010839sid\n1085678\n1085684\n1086319555\n1089744760\n0108dong\n1090109\n1090803\n1091010\n1091057\n109404015\n1100110\n1100218\n1100326\n1100712\n011008lee\n110092453\n1101001\n1101984\n110200202\n110205234\n11022033\n1103407\n01105czh\n1110111\n1112003\n1115144\n1120112\n11202102\n011214zj\n1130113\n11301469\n1130218\n114006209\n1140114\n114181979\n1150115\n1151982\n1151983\n1160116\n1161027\n11611518\n1161979\n01161B6A\n11641081\n1164216\n1170117\n1170219\n1170615\n1171212\n1171218\n1180118\n1181008\n0118a007\n1190119\n1191982\n1192490\n11992955\n1200120\n120030064\n12011055\n12012012\n1201233\n1204083\n1210121\n1210612\n1211114\n12113720\n12114132\n1213031\n01217891zp\n1220122\n1220223\n1221213\n012236sdd\n1.22898E+12\n012298mm\n0123.0123.\n12312073\n12313579\n1232425\n123401234\n123443210\n0123456789*\n0123456789ABCD\n0123456abc\n0123456hy\n0123456q\n0123456wxq\n12345730123\n0123457abc\n012345hu\n123498765\n123850129\n12397890\n0123abcd\n0123asdf\n1240124\n1241015\n12427521\n1245999\n1250125\n1250316\n1250906\n012540b0\n12542002\n1256789\n1260126\n1260519\n1260621\n12620032\n127011154\n1270127\n1270523\n1271112\n1272004\n1280128\n1280430\n1281015\n1288788\n1290129\n12925073\n012WOAINI\n1300130\n13013013\n1301600\n1302411\n13067912396\n1308813\n1310131\n13116013116\n1325171\n1330133\n1340134\n1350135\n13524502640\n13579013579\n1360136\n1362454\n13704927644\n13770300911\n1380138\n13824733953\n1387528\n13974960142\n13987463045\n013mocer\n14062133\n1406518\n14128116\n14218007\n1425360\n1429101\n1456321\n146582233\n1470147\n1470258\n14702580369\n1477410\n1478520369\n1478529\n14789630\n1480824\n1491625\n1500107\n1504891\n1526928\n1530153\n015404F2\n1580158\n1590159\n1590357\n1599510\n015b0ca9\n016028wj\n1603135\n1608791\n1614075\n1630163\n01651db7\n1680168\n1700424\n017023A7\n1771021\n1780178\n1787459\n1799798\n1810181\n18123070\n1819281\n18260713\n018f152a\n19019019\n1928374\n19290019290\n1932356\n1955426\n195892891\n19610023\n19670906\n19776343\n1980198\n1983228\n198602150\n0198651ou\n1992011011\n019A645a\n01a02b03c\n01A035d4\n01A47568\n01b9586C\n01bd292D\n01c01580\n01e958C3\n01qiaoo201benben\n01wenhua01\n20021630925\n020022c5\n2002790\n020070122les\n2010201\n2010440\n2010621\n2010903\n2010925\n2011029\n20110817\n2011127\n2012322\n20123456\n2016891\n02019831228aa\n2020201\n202020202\n2020309\n2020504\n2021030\n2021986\n2024061\n2030203\n2030405\n203040506\n20304102521\n2030422\n2030929\n020309wm\n2031004\n2031500\n2031986\n2032056878\n2032247\n20340122\n2035583550\n2037214663\n2037588762\n2040114\n2040120\n020401qll\n2040204\n2040506\n2040608\n2040891\n2041105\n2041982\n020479zxl\n2050205\n20504110\n2050413\n2050628\n20530558888\n2054421\n2060111\n2060206\n2061013\n20633000243\n2070198\n2070207\n20710435\n2071103\n2071605\n2073025\n2073232\n2080208\n2080525\n20808129\n2083165\n2090083\n2090209\n2090710\n2091983\n2094006\n2096303\n0209752e\n020a4EF2\n21001263\n2100210\n21009386\n2101127\n2101987\n21021021\n210270717\n2103411\n210971979\n0210longlong\n2110034\n211011051\n2110211\n2110622\n2110909\n21111118\n2111968\n2111983\n2112029\n2114891\n02120122ai3\n2120212\n2120226\n212023320\n2120346\n212061484\n2120904\n2121320\n2128724\n2130213\n21306108\n2131129\n213560\n2140214\n02140809jqh\n2141102\n2141120\n2141986\n2150104\n2150215\n2150514\n2151005\n2151010\n2151983\n2153130\n2154631111\n2157110\n2158839832\n021591tj\n2160216\n2164199268\n2170217\n2170312\n2170905\n2171219\n021768D4\n217874777\n2179908\n2180218\n2190219\n2190711\n2191001\n2192483\n219406064\n2194283\n2200220\n2200825\n2201210\n22029009\n2203035\n22045915\n2210221\n2211986\n2220021\n2220222\n2222830206\n2223013\n2230223\n223151533\n2231982\n2232212\n2238998\n2240224\n2242457\n2250225\n2251983\n2253683\n0225jing\n2260226\n2261236\n2268935\n2270227\n2270919\n2280228\n22850895\n2290229\n2291224\n0229abcdefgh\n2300230\n23004092\n2302001\n23023023\n230261544\n230333604\n230714201\n2310231\n23123023\n23123456\n231378171\n2340234\n2.34082E+12\n2342421337\n2348342632\n2350235\n235083578\n235213352\n2356566389\n2363492\n2365346666\n2365390474\n2367813415\n2368554890\n2368587114\n2370237\n02375566310yu\n2376612179\n2378418142\n23851225\n23861453\n2386303050\n023b2b18\n24011058\n2401573\n24024024\n0241422d\n242031026\n2.442E+11\n2442043420\n24514248\n2468888\n24689089\n2470300\n024b618b\n024E3030\n024lzm1986815\n250202502\n25025025\n2.50515E+12\n251545010\n25201314\n252204765\n2530643\n253353558\n253791983\n254319648\n254829569\n2557263046\n0256564e\n2566915\n2580258\n2580413\n2581177\n2583473996\n2587410\n2588520\n2606949\n2610471\n2625159\n2679070\n2693803\n026d7d4d\n27027027\n2703891\n275869836\n2759607116\n2763055275\n2769570485\n2787458400\n2787619909\n2791600\n027926qwe\n2795151\n28028028\n028107liu\n282613783\n283516426\n2840127\n286308443\n286448169\n2866791021\n287648250\n28771123\n2880288\n2881767126\n028b3a9f\n29210135\n292672304\n293523791\n293532110\n2941228\n296021018\n2980298\n298306509\n298425663\n298462390\n2985664544\n2987662376\n2990299\n029C0795\n029shiliu\n02aa091f\n02ac1712\n02AD29a2\n02BC229d\n02D768f2\n02EF4421\n02FB77bf\n3001209\n300856555\n3010107\n3010301\n3010603\n3011103\n03011111z\n301120029\n3011216\n30113149\n30114109\n3013666\n3013891\n301430545\n0301ldgz\n3020100\n3020302\n3020414\n3020422\n3020930\n30210312\n302152054\n3021984\n3025105\n030303sk\n30305422\n3031969\n030382j9\n304000875\n3040304\n3040506\n030405cdm\n3048858\n3050305\n3050503\n3051314\n3052807\n3059888\n3060306\n3060307\n3060308\n3060628\n3060825\n3061026\n3061116\n3061218\n3062110\n3070016\n3070307\n30734101\n3074124\n3080308\n308060248\n3090309\n3090402\n3091150\n3091215\n3097211\n030f038F\n3100112\n3100310\n3100312\n3101120\n3102120\n3102723\n031038@guiyang\n3105891\n3106075887\n310910204\n0310love\n3110311\n3110312\n3110424\n3111130\n03111810h\n31121210\n3112233\n3116688\n3117779712\n3118579086\n31188961828\n0312007x\n3120101\n3120107\n3120201\n31202123\n3120312\n3120315\n31203798\n31206120812\n3121234\n3121314\n3121982\n3122040114\n3122130\n3125051267\n3125105\n3125136\n3130313\n31313364\n3135055371\n0313yusen0313\n3140122\n3140314\n314198526\n031443dd\n3147065382\n3148035216\n3150312\n3150315\n3151001\n3151021\n3151119\n3151986\n3152678\n3153116593\n3154922665\n3156391571\n3156898\n31578503\n3160316\n3161102031\n3161700\n3163203\n3165112813\n3165951889\n31684897\n3170317\n3179779\n3180318\n3181115\n3181985\n31841336\n3190319\n3190916\n03194261021gjn\n3195632\n0319a0312\n3200320\n32011178685\n3202421\n3203174\n3210222\n3210315\n3210321\n3210906\n3220316\n3220322\n3221302\n3221981\n3230323\n3230915\n3231026\n32314002\n3235362\n3240324\n3241027\n3247688\n3250214\n0325021fei\n3250325\n3251986\n325424082\n3260197\n03260219yhs\n3260326\n32605042007\n32650103\n326503265\n3270327\n327112630\n3271984\n3280328\n3281120\n0328121x\n0328mmtianya\n3290329\n3290505\n0329abcd\n3300221\n3300330\n3301503\n3302891\n033032lws\n3304830\n330504010\n33058136\n3310331\n3311971\n3317845\n332105056\n33270173891\n33311010\n33419850129\n3350335\n33521043\n33534033\n33614625035\n3400340\n3410341\n0348768D\n034b322F\n35035035\n3510351\n3520352\n3536625110\n3537033835\n3539229\n3540354\n3550355\n0355lddice\n3560356\n0357vtop02\n3580358\n3590359\n035C2953\n036160//\n36173581\n3643014\n3654762\n3690369\n3.69122E+12\n3700370\n37090164\n3710371\n3710379\n3712696431\n37168337026\n3717657320\n3720372\n3730373\n374120111\n37418498\n3750375\n3763795\n3770377\n37763121960\n37766269390\n3776913281\n3780378\n3790379\n3791860\n037962639600.ybr\n379850610\n38048811030\n38107125\n3822932\n38236485\n38814034\n3890389\n038b171A\n3913567794\n3916532\n39268123\n3930393\n393061023\n39396759\n3940394\n3944485851\n3950395\n3960396\n3963363\n3966838459\n3967923279\n3980398\n3986926265\n03990405aa\n03B31ce5\n03bd2b63\n03cf3cfd\n03ee0b7c\n03FD6c1f\n03FE7567\n03WENpei\n03winner\n40100574\n4010401\n4011129\n4011305\n401339314\n40203222\n4020323\n4020402\n4021982\n4030201\n4030403\n4030604\n4031020\n4031022\n4031074\n403211726\n4040404\n40404162\n4040601\n4040635\n40408008\n4040924\n4050405\n0405069mzx\n4051129\n4051219\n4051982\n4059247\n4060124\n4060210\n4060406\n4061018\n4070407\n4070728\n04070935lu\n4071200\n407511133\n04080305xin\n4080408\n4080813\n4081980\n4082324\n4085563\n040889clz\n4090409\n4090625\n4100410\n4101006\n4101019\n41010207\n4102124\n4110376\n4110411\n41104110411\n04110634wp\n41151090\n4115160469\n4115631150\n41182944119\n0411lord\n0411love\n4120310\n4120412\n4120529\n4121012\n4125562\n4130211\n4130413\n4130607\n4131249\n4132888\n4138838\n414020209\n4140310\n4140414\n4141208\n41464843\n4150415\n41520041520\n4152527206\n4153447\n415404020\n4160416\n41606160726\n4160624\n4165286122\n041694ok\n4170417\n4175317\n4176669882\n4180418\n4180511\n4190419\n4190517\n4190824\n4191135\n4191982\n419913101\n4200116\n4200420\n4201985\n4210391\n4210421\n4210504\n4220422\n4221010\n422885650\n4230423\n4231109\n4240424\n4250425\n425831314\n4260426\n4270427\n042707letto\n042780coco\n4280123\n4280428\n4280530\n4290429\n4292108160\n4300430\n043016ea\n4310431\n4312611114\n4315107549\n43154888\n4318055\n4320432\n4324661708\n4324798355\n4325033\n4330433\n4332013\n0435094C\n4363238343\n4363247605\n4370437\n43800111\n4380438\n0438109jh\n043987linchen\n4400691\n44060330\n4.41249E+13\n443120541\n04460f0d\n4470112\n4475771\n45010110\n4510451\n4510452\n45147862\n4515287\n45153569588\n4520452\n4523332\n4525158749\n4530453\n4540454\n4550455\n455104551\n45514415\n4551520\n4551521\n4558573279\n4560456\n4568520\n45692045692\n45781462\n458166029\n4587007\n45888856\n4590459\n04592qifei\n4594984698\n4595830404\n045B2d6e\n4649253\n0465601D\n04673ca6\n4675407231\n46779351\n4678197217\n4680468\n4683422582\n046f4cfb\n4700470\n0470belle\n4710471\n47123123\n4714605271\n4716593379\n4716922909\n4743906608\n4750475\n4756900969\n4770477\n4782226185\n04807B89\n48282512\n48398531\n48419303\n4846096\n4870487\n4895204\n048c1BEE\n49074120\n04910219cq\n4947976\n4972066\n4991603\n04a11358\n04A855c1\n04AB667b\n04AD0645\n04ae1cc7\n04B21d0c\n04b9539e\n04cc6E80\n04d94315\n04dianqi\n04E47c7c\n04F06783\n04fd5a70\n04feng8686\n04ls0321\n04xiaoxue\n5010123\n5010227\n5010501\n50105010501\n5011001\n5011985\n50201405\n50202150\n5020502\n5020517\n5021997\n5022229\n5030102\n5030503\n5030970\n5031128\n503151045\n5031929\n5031984\n5033202\n50401100012\n504030201\n5040328\n5040504\n5040729\n5041015\n5041016\n5041994\n50450420\n5049859\n0504busideai\n5050505\n5051013\n5060324\n5060506\n5060512\n5060614\n5060708\n50623000\n506230231\n5070507\n50710218\n507151628\n50724096\n5080508\n5080609\n5081017\n5081136\n050829qp\n0508hb1982\n5090509\n509110888\n5092037\n050929guai\n5094269\n5099613\n5100028\n51000290\n5100510\n5100714\n5100898\n510110162\n5101207\n051023xuyan\n5104913603\n5107016733\n51102007\n5110408\n5110511\n5110512\n051105xwx\n5110604\n5111122\n5113445\n5120512\n5121983\n5121987\n051225ming\n51251023\n51252495868\n5130323\n5130513\n05130574rg\n5131024\n5131026\n51386473159\n51399079\n5140514\n51411540\n5141155\n5142332\n5146120662\n5148222613\n51483520\n51498520\n5150515\n5155223958\n5155227843\n5155753925\n515659500\n5160516\n5161988\n516273849\n516966776\n5170413\n5170517\n5171930\n5178441213\n5180017\n05180307ht\n5180518\n5180912\n5181130\n5185461073\n5190519\n5194888556\n5196988693\n5198249\n5200520\n5201126\n0520only\n5210409\n5210521\n521291789\n5220413\n5220522\n52253719\n5230000\n5230016\n5230523\n5231028\n5236918324\n5238185\n5238221158\n0524030jj\n5240524\n5240618\n5240910\n5241008\n5241215\n5250525\n5251025\n5251207116\n5260526\n52640308\n5268399\n5270527\n5271983\n5273859\n5274720\n5280202\n5280528\n5280707\n5281439\n052823c1\n5290529\n5290711\n052E1f6b\n5300530\n5305147\n5310000\n5310531\n5310532\n5312410\n5318815\n53188940010\n0531taiwan\n5320531\n5320532\n53208530958\n5325456603\n53283080999\n53284312622\n5328888\n0532gaoguoliang\n5330533\n5338341\n5340534\n5350535\n5360531\n5360536\n5363201366\n5370537\n5374218535\n5375937809\n5377191982\n5380538\n5386308265\n5390539\n5395672272\n5396747163\n54050325\n54050403\n54090241\n5.41161E+12\n05412dang\n05412dangyan\n5413330\n541744539\n5418000\n5430543\n54601010\n5460546\n5468215798\n05469b716\n54821054821\n054999zl\n5500550\n5510551\n5520552\n5523115482\n5525053688\n5530553\n5536852\n5540554\n5542214890\n5546632339\n5556151\n5556872897\n5560556\n5562071200\n5562400098\n5562812655\n5562821959\n5568521076\n5570557\n5575362732\n055779cy\n5580558\n5583721548\n5588227591\n5590559\n56063253\n560718099\n5610561\n5612024\n5617023122\n5617931805\n5.61875E+12\n5620562\n5630563\n5640564\n5641818\n05642211011rain\n5643350\n5643358\n56444920\n5644990236\n5649335\n56493358\n5650565\n5654818218\n5656365151\n5660566\n5699927\n056C7fab\n056e7153\n5700000\n5710571\n5710574\n571310015\n57181325310\n5723925017\n5730573\n5735015693\n5740571\n5740574\n57465365730\n5750575\n57584016807\n5758566821\n5760232\n5760576\n5761314\n5766701876\n0576746e\n5770577\n5770755\n57767420831\n57786447825\n5780578\n5790579\n5792363605\n5797477108\n5798841236\n5800580\n5833939\n058540bhud\n5861971\n5875663\n5880588\n5895163\n5910591\n5913425919\n5920592\n5920595\n5920596\n5926056591\n5926582382\n5927807976\n5930593\n5935455\n5940594\n5948287609\n5950595\n595812345\n59585127433\n5960596\n5966200431\n597159755\n5974509\n5976598375\n5980598\n5982331965\n5990599\n5992323167\n5998063\n5998469\n5998730001\n05a861C1\n05b47F96\n05C30fbd\n05C553b7\n05c8173e\n05d31F3A\n05E557ca\n05z375586911\n6010601\n6020602\n60305205\n6030603\n603100211\n604010232\n604041123\n6040604\n6041981\n060420.0+\n6043353201\n6044294\n6045524\n6050407\n6050605\n6051135\n060527jing\n60595362331\n6060524\n6060603\n6061954\n6065201314\n607031122\n6.07031E+12\n6070607\n6070809\n6071028\n0607ing=\n6080608\n6081963318\n6090119\n6090609\n6091971\n60956208\n6100610\n6101019\n6101120\n61040705\n6110611\n061142bb\n06114aa1\n6120612\n061214canjun\n6121981\n6121984\n061219qq\n6124308030\n6130308\n61303227\n6130613\n6130722\n06131010yytk\n61352021\n061402cy\n6140407\n6140614\n6140725\n61407319\n6150615\n6150829\n6151217\n6151230\n6152433\n6160616\n6161980\n6170617\n6171218\n6171906\n6180000\n6180339\n6180501\n6180618\n6190619\n620000000\n6200620\n6201845\n62102501232\n6210621\n6216481\n6220622\n6230623\n6231226\n6238940\n6240624\n6250104\n6250331\n6250428\n6250625\n625109029\n6251982\n62561281\n62581123\n6260626\n6260912\n6261985\n6270627\n0627windy\n6280628\n6280706\n628620899\n62864897\n6289390\n6290629\n6291020\n6291218\n6298336\n062983lhq\n0629tang\n6300115\n6300630\n6310631\n631252408\n6317054\n6318721003\n6320632\n6.33061E+13\n6330633\n0634-8891382\n6345889\n6350635\n0636748C\n6369378\n6371428\n64950230\n06497B07\n6510651\n6.51547E+11\n65201314\n6536865\n6549335\n6550986\n065575D8\n6590659\n065e6dd5\n6600660\n6603342928\n6606882108\n6620662\n6625958\n6627342500\n6630663\n6630754\n6680668\n6680755\n6682696203\n6685709201\n6701326\n6727346\n67342067342\n6748617\n067a4D3C\n067B1b27\n067b1f1a\n6801927\n6820682\n691179441\n069B72ef\n06A32e2c\n06A617f0\n06a81a0c\n06A94264\n06B11498\n06B52218\n06c4132e\n06ce21AC\n06e65b3b\n06E8669e\n06utmmrKCw\n06vtmmrJCw\n06vtnlqJBw\n06vtnlrJBw\n06wtnlqJBw\n06wtolqIBw\n7010209\n7010701\n7011124\n0702.ygs\n7020000\n7020702\n7021214\n703070126\n7030703\n7031983\n7040223\n7040704\n0704197eight\n70443812\n7044755\n0704pppp##\n070502jiyan\n7050630\n7050705\n070518drkldm\n7060706\n7061169\n7070924\n7071220\n7071984\n7080708\n7080910\n7090126\n7090709\n7090929\n7091002\n7100710\n7103220713\n0711007a\n7110711\n7111028\n71120891\n71121915\n7112415721\n0711abcd\n0711lyj197828\n7120712\n7120920\n7130000\n713022009\n7130515\n7130713\n7130808\n7131011\n71319752512\n7131982\n7132092206\n7137412\n714010218\n7140714\n7141126\n7141983\n7145426930\n7148762992\n0714feidao\n7150045\n7150715\n7151217\n7160716\n71619880206\n7162534\n7165660594\n7165880341\n071676b0\n0716asDF\n7170717\n7171228\n7171979\n7178682\n7180718\n7181983\n07186b91\n71900224\n7190719\n7190726\n0719house\n071xj914\n7200720\n7210721\n7217310\n0721liubu\n0721woaimaguo\n7220722\n7221104\n7230723\n7231564\n723198636\n72323250\n723273548\n72350516\n723915042\n7240217\n7240616\n7240724\n7241018\n7250408\n7250725\n7260726\n7261021\n0726love8798\n7270727\n727151279\n7280728\n7283267716\n7289292\n0728sharon\n7290729\n7291928\n7.29912E+12\n7300730\n7305570545\n7307230910\n7310731\n7317726264\n7318831722\n7320732\n7330733\n7334329809\n7340734\n7341106\n7344717963\n7350735\n735232748\n7360736\n7362665562\n7380738\n7383731358\n7384421375\n0738lqsb\n7390739\n073910OK\n7394518\n7398681721\n7421471\n7450745\n7452255476\n7460746\n07463ee3\n7465251701\n7466225339\n7480748\n074E3f6e\n7500750\n7.50135E+13\n7505466236\n7507458\n7512681186\n7513613829\n7520752\n7527781761\n752961557\n7530753\n7538833278\n7540754\n7545500678\n07548101a\n75488221386\n7550668\n7550755\n75510210\n7551981\n75519811018\n075529730741tj5\n7556228500\n75582755856\n75583018986\n7558315673\n75583406767\n75583529598\n7558535715\n7560756\n7570757\n757393496\n75788821446\n7580758\n7583336541\n07585f1a\n7590759\n759125184\n7600760\n7621077728\n7630763\n7632821802\n7680768\n7690769\n76928257356\n76988507100\n076loveyou\n7700770\n07703265434d\n7706231\n7710668\n7710771\n7713274515\n7717055048\n0771teambuy\n7720772\n7723251107\n7728112568\n7730773\n7731064\n773168188\n7738922457\n7741791\n7742216\n7750775\n7751111\n7753655127\n7753779459\n7756692101\n7762568\n77662133\n077745f2\n7780778\n7785214151\n7785820785\n7793915056\n779948260\n7833225\n7840520\n07875d55\n7890789\n078915wang\n0789dhjk\n078A6629\n790100680\n7910791\n7915703470\n7918108720\n7920792\n7922561485\n7.92322E+13\n7930793\n7942125\n7948442170\n0795022hans\n795198412\n7956419077\n07956533273q\n7956602139\n7960796\n7963261233\n7965855220\n79664585\n7970797\n79782528\n7980798\n7993471978\n07a425C5\n07AA530f\n07AE00cd\n07BE4524\n07c31DCA\n07e44cc5\n07fb3868\n07FB3c5a\n07succeed\n07utmmrKCx\n08-14-1979\n8000928\n8002120\n8010128\n8010801\n8012428\n080201fc\n8020802\n8020815\n8021202\n8021218\n80300286\n8030803\n8030922\n8035155\n8040804\n8050805\n8051981\n80520410\n80602151207\n8060806\n8060922\n08061715tianya\n8070807\n80710109\n8080624\n8081980\n808198500\n8090809\n8091128\n8091209\n8100306\n8100530\n8100810\n8101014\n8110811\n8110926\n8111001\n8120812\n8120928\n8121208\n8122613783\n8128513\n0812qq99yl\n8130215\n8130813\n8130915\n8131131\n8131986\n8132411\n8140814\n8140817\n0814lovepp\n8150815\n8151210\n8151224\n081520HOT\n815771127\n8160816\n8161010\n8.1612E+11\n8162278704\n8162689112\n08165bb9\n8170817\n8171792\n8173813\n8180312\n8180818\n8183456\n8187477459\n8190424\n8190819\n8191984\n8200511\n8200820\n8201121\n8210821\n0822010036hs\n8220793\n8220814\n8220822\n82222000\n0822skylove\n8230823\n8231225\n82359036\n8240114\n8240824\n8241016\n8241020\n8241944\n8250825\n82523274\n8254718\n8260508\n8260826\n8261012\n8263225372\n8264673\n8270569\n8270605\n8270827\n8275166\n08275463193zq\n8276211\n8277093\n8280828\n082815aa\n8290829\n8291010\n8300830\n8310831\n8312436\n08320817huang\n8320832\n8322051923\n8328058\n0832llyy\n834251212\n8.37143E+12\n0837sususheeivy3\n8390839\n8393351967\n8404260\n84119084123\n8.42E+17\n8463399\n8468549\n084872xx\n084E2531\n8510851\n8515805665\n0851DSLAK520\n8520852\n85225125\n852443018\n8543411344\n8564587\n8570857\n8575926\n8580858\n085833jiao\n08587CF0\n085a2892\n864213579\n864297531\n8660034\n86932521\n086a70DB\n086e5de8\n087020b5\n87087087\n8710871\n087121chf\n8713620126\n08729yxwlxm\n8760876\n8790872\n8792600\n8800880\n88175170\n8831660\n8856660\n887415157\n8885183666\n8910891\n8916812026\n08942f82\n8970126\n08975c86\n8980000\n8980898\n89808980898\n8980899\n898111111\n898123456\n89823368\n89823512622\n89828456323\n89868915021\n8987758258\n0898801120wen\n89883660147\n8990899\n899958782\n08a14572\n08a724d0\n08AE23f8\n08ed1565\n08f648BE\n08FB0cfe\n08j802100\n08wwrainjay1102\n09.11.11\n900850291\n9010227\n9010830\n9010901\n9011115\n9013009\n9015517\n9020902\n9021002\n9027019\n9030903\n9031003\n9031019\n9031113\n9040904\n904130415\n9041982\n9050905\n9051128\n905401758\n9060906\n090612cc\n9061980\n9070907\n9071984\n9080706\n908070605\n9.08071E+12\n9080908\n9085857\n9090528\n909078084\n9090808\n90909100924\n090909yfh\n90987654321\n090yj811\n9100910\n9101005\n9101015\n9102970\n9110911\n9112332\n9120409\n9120912\n9120925\n9121111\n091219()\n091219133ymm\n9121982\n91280447\n9129122\n9130913\n9131010\n9131975\n9131981\n9132123385\n9135218865\n9138850974\n0913kimi1015\n9140914\n9150000\n9150728\n9150915\n9151028\n0915422x\n9156822367\n9157912151\n9160624\n9160916\n9161217\n09161982ily\n91629471029\n9165375505\n9166411\n9170917\n9171010\n9171213\n9171221\n918000232\n9180918\n9182736\n9187815\n9187920\n091902zhao\n9190919\n091929lar\n9200411\n9200419\n9200504\n9200920\n9201872\n92033092033\n0920blue\n9210921\n9220020\n9220705\n922072992\n9220922\n9221114\n9221533\n9221979\n9225460\n0922and1017\n9230405\n9230923\n9231018\n923217036\n9240924\n9241014\n9241983\n9250925\n9251110\n9252513521\n9260926\n9262221\n9269210\n0926me0225\n9270000\n9270927\n9271983\n9280606\n9280928\n9281730\n9281978\n9289612345\n0928jing\n9290103\n9290823\n9290929\n9291010\n0929lisa\n9300930\n9308066\n93104910\n9310931\n093118kai\n9320932\n9323132\n932313520\n932313521\n0932313a\n9342149\n9345364\n9346122110\n9350028\n9380938\n9391800\n9435360355\n9451631\n9480948\n094d41A4\n9508161\n9512025460\n95208051320\n9551077\n9558618\n9.59403E+11\n095A1ad6\n0960323**\n9.61515E+11\n962571202\n965209314\n9728713842\n9736951\n097b7749\n097e0a91\n9801367\n9809800\n98098098\n98098100\n98168310\n098358C3\n9870987\n9871234\n987609876\n987612345\n987651234\n09876543mgf\n987667890\n98767890\n09876poiuy\n9877890\n09878i0pp\n9880988\n98890098\n098lyfwanhm\n9900990\n9910802\n9910991\n991125258\n9920062\n992339783\n9925021\n9936103137\n994635100\n0998168clm\n9987581096\n9993088\n099a7d31\n09b665e0\n09c004D2\n09c06B17\n09D174cb\n09e722f6\n09ED4468\n09ee1E2B\n09EE62cf\n0=-p[])+_\n0a0a0a0a\n0a0b0c0d0212\n0a247B50\n0A2A160b\n0A607f07\n0A645857\n0A81099c\n0aaa0D90\n0aac0BB9\n0AB2324b\n0af5459e\n0afd6FAF\n0b05567E\n0B11496b\n0b1b34e6\n0B2D1f8a\n0b2e0c87\n0b3b4D5F\n0b491A0F\n0B523cf4\n0B5B15e0\n0b6343E3\n0B644e8d\n0b6e1DBD\n0b80373c\n0B9B19dc\n0bb4675d\n0bb64675\n0bb66979\n0bc814CE\n0BEB7b42\n0bf60B23\n0bfa69C8\n0C293099\n0C62738f\n0CA61373\n0CC44f63\n0cde3fe6\n0CE64ed9\n0CEC743e\n0CF34f00\n0cf375f6\n0cfb31DD\n0D292c25\n0d2941EE\n0D2A2107\n0D35172d\n0d452155\n0d575dd7\n0D647d0f\n0D6C3793\n0D740737\n0D8029a8\n0dba7D21\n0dc30ed9\n0de64672\n0de955c9\n0df21269\n0DFE1f11\n0e0a08b6\n0e0d3F02\n0E1D5665\n0e2f79d5\n0e3301ff\n0e3408B7\n0E351f3a\n0E567265\n0e5f154A\n0e6b63D0\n0E8D064a\n0E8D23f8\n0EA339c9\n0eb429c2\n0EB52db5\n0EB53aef\n0eb756C7\n0EE235e1\n0ef0203f\n0efb7E0C\n0F02142a\n0f033002\n0f08573d\n0f1e1fdc\n0f1f2924\n0F2475f3\n0f3338E7\n0f3e724E\n0F426ea1\n0f573a79\n0F5D626e\n0f6e11b6\n0F753328\n0F7C63bb\n0F894c33\n0F9127ae\n0FA40896\n0fa644AC\n0fb2671D\n0FB546ef\n0fb81859\n0FB90290\n0FBE73c5\n0FDD4e1c\n0fee336A\n0j44tB0wVO\n0k44tB0vVO\n0k44tB0vWP\n0k44tB0wVO\n0k44tC0vWP\n0k54tC0uWP\n0l54tC0uXQ\n0l54tD0tXQ\n0l54tD0uXQ\n0l55tD0tYQ\n0l55tD1tYR\n0l65tD1tYR\n0lojiaove1\n0m65tD1sYR\n0m65tE1rZS\n0m65tE1sYR\n0m65tE1sZR\n0m65tE1sZS\n0myfriend0\n0n75tF1tAS\n0n75tF1tAT\n0n76tF1tAT\n0n76tF1tzT\n0O0O00OO\n0o0oo0o0\n0o0oo0oo0\n0okm0okm\n0okm1qaz\n0okm9ijn\n0okmmko0\n0oo000oooo\n0pг╗/9ol.\n0p;/9ol.\n0wanjing\n0xiaoming\n1!2@3#4$\n1+121+12\n1+1=2?yes\n1+1=love\n1+1=waNG\n1+2+3+4+5+6\n1..2..3..\n1.1415926\n1.2.3.4.\n1.2.3.4.5.\n1.2.3.4.5.6.\n10.20.30.\n1E+15\n1000000001\n100000001\n10000008\n1000020000\n1000110012\n100016006\n1.00016E+14\n100038625\n1001001001\n1.001E+11\n10010327\n10010768\n10010816\n10010904\n10010924\n1.0011E+11\n100110120\n10011028\n1001110011\n10011101\n10011121\n10011223\n10011355\n10011861\n10011949\n10011981\n10011984\n10011985\n10012002\n100120jenny\n10014891\n10014904\n1001902jyjy\n100200-0\n100200..\n100200...\n10020011\n100200123\n1002001314\n1.002E+12\n100200168\n1002003..\n100200500\n100200520\n100200521\n10020088\n100200aa\n100200abc\n100200clc\n100200li\n100200qq\n100200wang\n100200yy\n10020304\n10021002\n10021003\n10021004\n10021006\n10021020\n10021030\n10021032\n10021209\n10021213\n100213336\n10021980\n10021982\n10021985\n10022001\n100222101\n10023456\n1002771as\n1002831359\n10030824\n10031003\n10031017\n10031117\n10031123\n10031124\n10031126\n1003151300\n10031519\n10031979\n10031983\n10033001\n10033215\n100368abc\n100372213\n10040399\n10040502\n10041003\n10041108\n10041123\n10041984\n10041985\n10044001\n1004432845\n10051005\n10051221\n10051974\n10051983\n10052006\n1005983983\n1006000880\n10060208\n10060228\n10060330\n10060506\n10060812\n10061006\n10061029\n10061111\n1006122338\n10061983\n10063665\n10065403\n10067214\n100688799\n10070229\n10071007\n10071121\n10071129\n10071201\n10071224\n10071227\n10071983\n10071985\n10072215\n10077110\n100786ready\n100800812\n10080828\n10080924\n10081008\n10081009\n10081018\n10081206\n10081212\n10082008\n10083520\n10084312\n10085900\n10086110086\n10086819\n10086abc\n100871028\n100871102\n10088001\n1008abcd\n10090805\n10090823\n10091009\n100910091\n10091123\n10091212\n10091223\n10091982\n100986215\n100fenok\n100years\n101001000\n1010010001\n10100101\n10100214\n101002363\n1.01005E+11\n10100719\n10101001\n1.0101E+11\n10101010a\n10101011\n101010110\n10101012\n10101014\n10101020\n10101022\n101010aA\n101010qm\n10101100\n10101102\n10101111\n10101114\n10101120\n10101121\n10101122\n10101124\n10101127\n10101212\n10101213\n10101216\n10101221\n10101226\n10101227\n10101228\n10101230\n1010123456\n101012kurt\n10101313\n10101915\n10101982\n10101983\n10101984\n10101985\n1010210102\n10102891\n10103030\n10103192\n101032576\n1010813119\n101084liu\n1010900700\n10109696\n1.01101E+11\n10110111\n101101110\n1011012911\n101102103\n10110306\n10110904\n10110918\n10111012\n101110326\n10111201\n1011120709\n10111211\n10111213\n1011121314\n10111986\n10112358\n10113021\n1011722315\n1012003029\n1012010110\n10120123\n101201230\n101202303\n10120918\n10120919\n10120925\n10121007\n10121013\n10121015\n10121019\n1012109356\n10121108\n10121113\n10121123\n10121127\n10121129\n10121211\n10121212\n10121213\n10121314\n1012131415\n10121416\n1012151931\n10121984\n10121985\n10121986\n10121987\n10121988\n1012315168\n10123300\n10123521\n10124206\n10125212\n1012alon\n1.013E+13\n10130105\n101301130\n10130419\n10130419love\n10130606\n10130912\n10130994\n10131013\n10131014\n10131029\n10131105\n10131108\n10131124\n10131127\n10131129\n10131217\n10131314\n10131425\n10131978\n10131982\n10131983\n10131984\n10131985\n10131986\n10135613\n10136496\n10139350\n101394155\n1.01402E+11\n10140419\n10140901\n10140911\n10140917\n10141010\n10141011\n10141014\n1.0141E+11\n10141015\n10141022\n10141025\n10141116\n10141118\n10141119\n10141121\n10141122\n10141123\n10141125\n101412117\n10141239\n10141982\n10141984\n10141985\n10141986\n10142292\n10143723\n10143796\n10145309\n10145b7f\n1014894383\n101495cc\n10150206\n10150504\n10150521\n10150615\n1015062e\n10150709\n10150825\n10150910\n10151015\n10151019\n10151020\n10151024\n10151025\n10151028\n10151101\n10151108\n10151111\n10151116\n10151122\n10151126\n10151127\n10151129\n10151203\n10151215\n10151981\n10151984\n10151985\n10151987\n10152002\n1015212228\n10153028\n10153599\n10160000\n10160923\n10161017\n10161018\n10161108\n10161112\n10161114\n10161123\n10161126\n10161127\n10161129\n10161941\n10161978\n10161981\n10161984\n10162544\n10165283\n10170204\n10170923\n10171016\n10171017\n10171118\n10171121\n10171123\n10171125\n10171201\n10171206\n10171222\n10171226\n10171981\n10171982\n10174591\n101772988\n10177797\n1017795464\n10178301\n10180515\n10180911\n1.0181E+11\n10181020\n10181028\n10181114\n10181122\n10181129\n10181202\n10181212\n10181223\n10181225\n10181227\n10181234\n10181888\n10183796_2006\n1018515767\n10188303\n1018961018\n1018and0823\n1018kzkz\n1018peter\n1018rottenpuss\n1018silver\n10190000\n10190214\n10190903\n10190922\n10191020\n10191025\n10191111\n10191115\n10191123\n10191129\n1.01912E+11\n10191228\n10191976\n10191982abc\n10191989\n10192410\n1019320023\n101tongzhi\n102003000\n1.02003E+11\n10200514\n10200825\n10201003\n10201007\n10201009\n10201011\n1.0201E+11\n10201116\n10201121\n10201123\n10201124\n10201130\n10201211\n10201225\n10201314\n10201809\n1020185j\n102019.a\n10201981\n10201985\n102021che\n10202699\n102030..\n102030000\n10203010\n1.0203E+15\n102030456\n1020304567\n102030aa\n102030abc\n102030zw\n102039MA\n102061512\n10208826\n10209090\n10210000\n10210108\n102101685\n10210218\n102103104\n10210908\n102109508\n10211022\n10211122\n10211222\n10211227\n10211245\n10211252\n10211252lq\n10211983\n10211985\n1.02122E+11\n10213359\n10214034118\n10215094\n10216321\n10218019\n1021810375\n102188hp\n1021980536\n10220000\n10220221\n10220706\n10220910\n10221010\n10221013\n10221023\n10221024\n10221027\n10221115\n10221122\n10221123\n10221125\n10221128\n10221129\n10221212\n10221220\n10221982\n10221984\n10222133\n10222201\n10222210\n10222322\n10225117\n10225230\n102282tsq\n1022love15\n10230000\n10230124\n10230130\n10230234\n10230558zd\n10230908\n10231009\n10231010\n1.0231E+11\n10231024\n10231026\n10231114\n10231115\n10231117\n10231119\n10231122\n10231123\n10231124\n10231127\n10231204\n10231212\n10231215\n10231225\n1023151984\n10231771\n10231974\n10231981\n10231983\n10231984\n10231986\n10231987\n10233201\n10233569\n10234564\n102345678\n10235116\n1023520918\n10236444\n102380ww\n10240000\n10240120\n10240711\n10240927\n10241010\n10241014\n10241015\n10241016\n1.0241E+11\n10241024yl\n10241025\n10241026\n10241107\n10241116\n10241124\n10241125\n10241126\n10241128\n10241210\n10241212\n10241223\n10241982\n10241983\n10241984\n10241986\n10241988\n10242048\n10243268\n10244096\n10244201\n10250000\n10250093\n10250429\n10250621\n10250628\n10250826\n10250909\n10250928\n10251010\n10251020\n10251026\n10251030\n1025111215\n10251117\n10251121\n10251206\n10251215\n10251218\n10251229\n10251314\n10251982\n10251984\n10251985\n10251986\n10252525\n10252537\n102528dandan\n10253636\n10255201\n10255210\n102563144\n1.02573E+11\n102578blj\n1025810258\n1025991213\n1025bill\n10260000\n10260225\n10260314\n10260523\n10260806\n1.02608E+11\n10260910\n102610011\n10261011\n10261027\n10261031\n10261101\n10261113\n10261117\n10261118\n10261122\n10261123\n10261127\n10261130\n10261207\n10261215\n10261216\n10261218\n10261226\n10261231\n10261980\n10261982\n10261984\n10261985\n10261986\n102633ss\n10265532\n10266201\n1026pmd10\n10270000\n10270113\n1.02702E+11\n10270619\n10270924\n10271013\n10271027\n1.0271E+11\n10271028\n10271106\n10271122\n10271123\n10271128\n10271211\n10271212\n10271234\n10274435\n10280000\n10280326\n10280822\n10280923\n10281020\n10281028\n1028110052\n10281117\n10281124\n10281127\n10281129\n10281212\n10281228\n10281982\n10281983\n10281984\n10282003\n1028314216\n1028571149\n10288201\n10288888\n102899::\n1028ai927\n1028lily\n10290000\n10290525\n10290724\n10291024\n10291029\n10291112\n10291118\n10291210\n10291218\n10291299\n10291974\n10291984\n10293022\n10297899\n1029junjun\n10301001\n10301019\n1030102157\n10301030\n10301101\n10301214\n10301230\n10302006a\n10305883\n10306699\n10308888\n10309022\n1030DUDU\n10310509\n10311031\n10311113\n1.03119E+11\n10311981\n10311982\n10313278\n10314027\n103169c0\n10317abc\n1031882511\n103202499\n10321032\n10325.35\n10330456\n10331033\n10341034\n103464436\n1034706534\n10351035\n1.03543E+11\n103602378\n10361036\n10370535bin\n10371037\n10371101\n10372019\n10381038\n10389797\n10391039\n10397a16\n10401040\n104081507\n104104104\n104108182\n10411041\n104154410\n104166434\n10417022tt\n1042052432\n10431043\n10431079\n10441044\n104413255\n10451045\n1.04512E+11\n104520301\n10461046\n10471047\n10481048\n1048910489\n10497109\n10501050\n10511051\n1051632101\n10521052\n105220363\n10523A5C\n105240133\n105257531\n10526842\n105299817\n105300401\n10531053\n1053220211\n105397544\n10561056\n105621814\n105628818\n105672992\n10571057\n10576521\n10581058\n1058660849\n105897825\n105898813\n10591059\n105964682\n1059666caco3\n105e6b34\n106015229\n10603219\n1060409174\n10604113\n1060557090\n10607586\n10609069\n10611061\n106175152\n106226416\n106453da\n106540140\n10661066\n10671067\n1067291026\n10676525\n10681068\n1068856875\n1.06886E+11\n1068895148\n10691069\n1069581210\n1069iinyou\n107020897\n1070302287\n107107107\n107115mh\n107123456\n10712FD1\n10723poppy\n107251515\n107295267\n1073741824\n10741074\n107515911\n107564335\n10771077\n107736770\n10781078\n107906515\n108004137\n10801080\n10802030..\n108078345\n10810888\n1.08109E+14\n108161235\n1082362651\n10824576\n108251174\n10826313\n10831083\n10855127\n108568639\n108585914\n108602342\n10861086\n108629abc\n108693626\n10871087\n108714221\n1088106925\n10881088\n108834685\n108850656\n108859222\n108861313\n108899800\n1088v998\n10891089\n10895115\n10895360\n10901090\n10907182\n1.09085E+11\n109109109\n10911091\n109116320\n10913575\n1092387456\n1092621101\n109346109\n109528064\n10952900\n1095529248\n109638305\n109655907\n10972009\n1097288171\n10976875\n10980002\n10981098\n1098170b0\n1098209531\n1.0985E+11\n10991099\n10995001\n109973852\n109f6020\n10b62a22\n10c25315\n10c70ce0\n10e53307\n10FC116f\n10ff0dc2\n10jiezhida\n10nian1jian\n10qpalzm\n10tracy15\n2011-11-11\n11000000\n11000011\n110001110\n11000118\n11001010\n11001111\n11001122\n11001204\n11002200\n11002233\n11002255\n11002299\n11002958\n11004100\n11005168\n11005A4B\n11006688\n11008888\n11010010\n11010100\n11010101\n11010464\n11010880\n110109800\n11011000\n11011010\n1101101100\n110110110a\n110110112\n110110119\n110110120\n110110123\n11011022\n11011023\n11011026\n110110520\n110110aa\n110110abc\n110110fang\n110110ok\n110110qq\n110110xie\n11011102\n11011103\n1.10111E+11\n110111112\n1101111981\n11011201\n110112110\n1.10112E+11\n110112120\n1101121984\n110112qq\n110113312\n110114119\n11011900\n110119007\n11011911\n1.10119E+11\n110119114\n110119120a\n110119122\n110119123\n11011919\n11011979\n11011986\n110119911\n110119zx\n110120..\n11012000\n11012011\n1.1012E+11\n110120112\n110120114\n110120120\n110122119\n110123110\n11012315\n11012345\n110123456\n110123xx\n11016243342\n11017891\n11017951\n1101818714\n110183879\n11020211\n11020307\n1.10203E+11\n11020823\n11020913\n11020928\n11021010\n11021012\n11021030\n11021102\n11021103\n11021113\n11021120\n11021213\n110218110\n11021914\n11021996\n1102221368\n11023456\n110300312\n11030104\n110301720\n11030212\n11030221\n11030929\n11031103\n11031124\n11031203\n11031206\n11031214\n11031913\n11031971\n11031983\n1103534423\n11035421\n110361447\n11041104\n11043904\n1104762576\n1104boyzone\n11050221\n11051028\n11051105\n11051205\n11051206\n11051215\n11051218\n11053891\n11054110\n11054188\n110550106\n11060925\n1106096160\n11061022\n11061106\n11061107\n11061978\n11061981\n11061984\n1106283667\n110680105\n11068542\n11070105\n11070525\n11070920\n11071013\n11071015\n1.10711E+11\n11071107\n110711110\n11071208\n11071983\n11071984\n11071986\n11074176\n11080000\n11080320\n11080502\n11081013\n11081019\n11081106\n11081108\n11081123\n11081203\n11081226\n11081982\n1108214526\n110823555\n11082700\n110860245\n1.1089E+11\n110891ss\n110907lsj\n11090915\n11091017\n11091109\n11091121\n11091204\n11091212\n11091429\n110929924\n110vey0u\n111-222-1933email@ad\n11100000\n1.11E+11\n111000222\n111000999\n111000aaa\n11100111\n11100200\n11100221\n11100612\n11101011\n11101013\n11101110\n11101216\n11101983\n11101986\n1110201682\n11102a7a\n11104127\n111088cff\n1.11101E+13\n11110902\n11111000\n11111017\n11111021\n111111..\n111111...\n11111100\n111111000\n1111111!\n1111111100\n1.11111E+12\n1.11111E+13\n1.11111E+14\n1111111111q\n1111111119\n111111111z\n1111111122\n1111111123\n1111111155\n111111118\n111111119\n11111111aa\n11111111qq\n11111111z\n111111123\n11111116\n11111117\n11111119\n1111111l\n1111111p\n1111111s\n1111111w\n1111111wz\n1111111z\n11111121\n111111222\n1111112222\n11111123\n11111178\n11111188\n111111_l\n111111aaaa\n111111aaaaaa\n111111ab\n111111abcd\n111111as\n111111asd\n111111bb\n111111ben\n111111cao\n111111cc\n111111cg\n111111fhy\n111111hh\n111111jcs\n111111jj\n111111jlh\n111111kk\n111111kl\n111111li\n111111ll\n111111mima\n111111mm\n111111ok\n111111pp\n111111qqqq\n111111qqqqqq\n111111qw\n111111qwe\n111111ss\n111111ssssss\n111111tbb\n111111ty\n111111wfl\n111111ww\n111111www\n111111xx\n111111xxx\n111111yrfgz\n111111yu\n111111yy\n111111zh\n111111zl\n111111zlf\n111111zx\n111111zy\n111111zz\n111111zzz\n111112113\n11111234\n1111133333\n1111166666\n1111177777\n11111848586@qq.c\n11111917\n11111980\n11111986\n11111aaa\n11111qqqqq\n111121111\n111122223\n1.11122E+11\n11112222a\n11112233\n11112345\n111123456\n11112355\n11114321\n111183cs\n111187devil\n1111911113\n1.112E+13\n1111A1111\n1111AAAA\n1111abcd\n1111llll\n1111o1111\n1111zzzz\n11120616\n11121015\n1112111121\n11121112\n11121113\n1112112144\n11121212\n11121213\n1.11213E+11\n1112132177\n11121980\n11122200\n111222000\n11122211\n111222111\n11122212\n111222121\n111222123\n11122222\n1.11222E+14\n111222333a\n111222333abc\n111222333q\n111222444\n111222555\n111222999\n111222aa\n111222aaa\n111222ab\n111222abc\n111222cyh\n111222qq\n111222qqq\n111222ww\n111222wwwzzz\n111222yu\n11122324\n11122333\n1112234cai\n111224339\n11123087\n11123111\n11123123\n1112332345\n11128800\n11130000\n11131010\n11131017\n11131024\n11131113\n11131227\n11131719\n1113264109\n11132899\n111333333\n11134888\n1113ak47\n1113lltt\n11141114\n11141217\n11141225\n11141985\n11141987\n111444555\n111444777\n111444888\n111458yi\n111492501\n1115001115\n11151019\n11151023\n11151115\n11151220\n11151225\n11151314\n11151985\n11153102\n111555888\n111555999\n1115love\n11161116\n11161219\n11161980\n11161982\n111620901\n111666999\n11167553\n11169290\n11170506\n11171010\n11171117\n1.11711E+11\n11171219\n11171231\n11171982\n1117210q\n111731701\n111777888\n1117oicq\n11180330\n11181013\n11181022\n11181118\n11181119\n11181226\n111819216\n11182528\n11184223\n1118511185\n11188111\n111888666\n1119058936\n11191024\n11191119\n11191120\n11191214\n11191228\n11192545\n11196312\n11199900\n111999000\n111999222\n11199978\n11199991\n111a222b\n111aaa111\n111aaa1a\n111aaa222\n111AAAAA\n111bohai43\n111C7e56\n111jayxixi\n111qqq000\n111qqq111\n111qqq222\n111qqqaaa\n111qqqaaazzz\n111qqqQQ\n11200000\n11200228\n11200603\n11201006\n11201024\n11201025\n1120111201\n11201216\n11201223\n11201226\n11201229\n11201314\n11201982\n11201983\n11201984\n11201985\n11202011\n1120301121c\n1.1203E+11\n11205658\n11205758\n11207799\n11210000\n11210511\n11210520\n11210523\n11210824\n11211010\n11211013\n11211017\n11211026\n1121110119\n11211103\n11211111\n11211121**\n11211122\n11211129\n11211211\n11211225\n11211226\n11211227\n11211229\n1.12113E+11\n11211314\n112113167\n112119110\n11211981\n11211982\n11211984\n11212212\n1121231234\n112130140\n11213141\n1121314151\n1.12131E+11\n11213456\n11213891\n1121419494\n11214841040\n112183609\n1121linXIAO\n1121qing\n11220000\n11220011\n1.122E+11\n11220033\n11220055\n11220099\n11220100\n11220116\n11220121\n11220205\n11220609\n1.12209E+11\n11221013\n11221018\n11221023\n11221026\n11221111\n11221124\n11221127\n11221133\n11221155\n112211gg\n11221212\n11221217\n11221225\n11221314\n11221982\n11221983\n1122198321\n11222211\n11222333\n112224448\n112233.lanxiao\n112233000\n1122330044\n1122331122\n1122332211\n112233321\n11223333\n1122334400\n1.12233E+14\n1.12233E+13\n1.12233E+15\n1.12233E+17\n1122334456\n11223344a\n11223344aa\n11223344qq\n1122334abc\n112233520\n11223356\n112233661\n1.12234E+11\n1122336699\n11223399\n112233aaa\n112233aabb\n112233AABbcc\n112233ab\n112233dd\n112233fox\n112233hahaha\n112233kx\n112233ll\n112233mm\n112233ok\n112233qaz\n112233qiu\n112233qqwwee\n112233qw\n112233qwe\n112233SS\n112233ww\n112233xx\n112233yy\n112233zxc\n112233ZZ\n11223400\n112234aa\n11224433\n1.12245E+11\n1122446688\n11224477\n112254135\n11225500\n11225544\n11225566\n11225588\n112255abc\n11227788\n11228800\n11229208\n11229900\n1122990`\n11229988\n1122aabb\n1122aass\n1122qqww\n11230000\n11230228\n11230325\n11230521\n11230606\n11230721\n112309127\n11231012\n11231015\n11231017\n11231025\n11231111\n11231122\n1.12311E+11\n11231124\n11231213\n11231214\n11231215\n11231218\n11231220\n11231223\n11231226\n11231230\n1.12312E+11\n11231325\n11231325lulu\n11231718\n11231975\n11231982\n11231983\n11231985\n11231986\n11231987\n11231999\n11233211\n1123321165\n11233321\n11233443\n11233455\n112334556\n1123345653\n11234456\n11234562\n112345623\n11234566\n11234567899\n1123530+++\n112354321\n11235800\n11235811\n1.12358E+13\n1.12358E+15\n112358134\n1123581347\n11235853211\n112358?!\n112358abc\n112358zty\n112365876\n11238624\n1123cctv\n11240000\n11240222\n11240708\n11240919\n11241002\n11241010\n11241013\n11241020\n11241022\n11241024\n11241026\n11241111\n11241120\n11241125\n11241127\n11241208\n11241221\n11241225\n112414720\n112418wawzj\n11241980\n11241983\n11241984\n11241985\n1124269217\n11244211\n112451078\n112454649\n11247412\n11249677\n1124mali\n1124suwe\n11250000\n11250402\n11250813\n11250817\n11251006\n11251013\n11251014\n11251020\n11251126\n11251127\n11251203\n11251226\n11251231\n112512345\n11251314\n112517482\n11251981\n11251983\n11251985\n11255211\n112572971\n11257789\n112587394\n11260000\n11260106\n11260428\n11261111\n11261126\n11261218\n11261981\n11261983\n11261985\n11261986\n11261987\n112627521\n11266211\n1.12686E+12\n11270000\n11270204\n11270413\n11271009\n11271016\n11271018\n11271020\n11271023\n11271060\n11271216\n11271230\n1127123210\n1127123216\n11271986\n112730007\n1127711315\n1127720332\n11278181229\n11280000\n11280130\n11280328\n112803316\n11280905\n11280925\n11281014\n11281016\n11281024\n11281127\n11281128\n11281205\n11281225\n11281227\n11281228\n11281229\n11281231\n11281980\n11281981\n11282327\n112866djx\n11290000\n11290305\n11290331\n11290721\n11290923\n11291010\n11291014\n11291015\n11291025\n11291101\n11291129\n11291212\n11291224\n11291984\n11291986\n112946866\n11300102\n113006ok\n11300726\n1130100612\n11301016\n11301026\n11301130\n11301220\n11301974\n11301982\n11301983\n11305566\n1130wwwmmm\n113109111\n11311131\n113114115\n11318214\n11319829\n113198625\n11321132\n113213lz\n113226835\n11329488\n11331133\n11331144\n11332244\n1133238767\n11334466\n11335588\n11336688\n11337788\n11337799\n113392feng\n11339977\n11341134\n1.13426E+11\n11344549\n113473960\n113487990\n11351135\n11361136\n113703686\n11371137\n11374028\n1.13795E+13\n11381138\n11391139\n1139230304\n113F47c5\n114010105\n11401140\n114048552\n1140762474abc\n114092298\n114094695\n11411141\n114115116\n11412242115\n114226cao\n114236844\n11423816\n114284237\n11431143\n11431336\n114315797\n1.14328E+11\n11435611q\n11435611qaz\n11438300\n114411415\n11441144\n11442255\n11445522\n11445566\n11447700\n11447788\n11451145\n114691398\n11471147\n11472258\n11481148\n1148686681\n114873265a\n11488411\n11495609\n114985960\n1149944858\n114e31AF\n11501150\n11501199\n115020347\n115036592\n11509511\n1151106917\n11511151\n115115115\n1151329341\n1152011520\n115201314\n1152111521\n115211314\n11521152\n11521521\n115215425\n11521810\n11531153\n115369497\n115426219\n1154444944\n1154729820\n115493467\n115496313\n11551155\n11554523\n115552727\n1.15567E+13\n11556688\n1155802953\n1.15599E+11\n115599357\n11561023\n11561156\n11561186\n115633540\n11565195\n1156911569\n11571157\n115720328\n115763178\n115789246student\n11578999\n11581158\n11591159\n1159753a\n1160017381\n116096939\n11611121\n11611161\n116116254\n116117118\n116119559\n116136352\n1161982abcdef\n116201629\n116248337\n1164000301\n11642842\n11644009\n116492170\n116551993\n116576173\n116611116\n11661166\n11668899\n116699123\n1167182199\n1167612171\n11677067\n11678520\n1168083681\n11681168\n116830402\n1169232327\n1169447090\n11696116\n116967686\n116a0d24\n11701170\n11703045\n1170324658\n11708607\n11709394\n117117123\n1171173637\n117118119\n1171192009\n117143110\n117148497\n117210198\n117220jing\n1172211722\n11731173\n117314421\n117317517\n117324191\n117325910\n1.17491E+11\n11751175\n117522jiajia\n11769286\n117705300\n11771177\n117713190\n11781178\n117815095\n117815218\n11790b74\n11791179\n117988236\n11801180\n118062jewell\n11810116\n11811181\n1181151539\n1.18119E+11\n11817612\n11821182\n11833355\n118423147\n1185131113\n11861186\n118625hzh\n1187128221\n118825602\n11885009\n1.18851E+12\n11888935\n11889431\n11889900\n11891189\n118912917\n118993288\n11900000\n11900402\n11900581\n11901190\n11901315\n11902891\n11905379\n11909976\n119110110\n119110112\n119110119\n1.1911E+11\n119110120\n119110122\n119110591\n119110qq\n1191111911\n11911191\n119112110\n119114110\n11911844\n119118856\n11911911\n1.19119E+11\n119120110\n119120121\n119141125\n1191843784\n119200939\n11921192\n119215315\n119241116\n119255443\n119283984\n11939311\n1194092175\n11943a9d\n119484950\n119556259\n119571469\n119575819\n11958021\n119585010\n119603720\n11972425\n119768975\n11981198\n11986752886\n119867722\n11989239\n11990000\n11991100\n119911110\n119911119\n1.19911E+11\n1199111991\n11991199\n11992288\n11993377\n11997711\n11997733\n11997744\n11997788\n11997799\n119985872\n11998800\n11998811\n11998822\n11998833\n11998855\n11998866\n11998877\n119hy640317xj\n11a22b33c\n11a27905d\n11AA11AA\n11aa22bb\n11aa22bb33cc\n11aabb22\n11AF61e1\n11bb33dd44ff\n11c04de8\n11c44cca\n11d245C6\n11d76d01\n11de2230\n11EA151d\n11F351bd\n11FE4a73\n11gina119\n11huidaoda\n11nedved\n11q11q11q\n11qq11qq\n11qq11ww\n11qq22ww\n11QQqqsun\n11qqwweerr\n11r33t59\n11wzlldb787\n11zzzzzz\n12#45?sll\n12*Lancy\n12000000\n12001200\n12001983122\n1200202833\n1200312003\n1200416631\n1200890821\n1201.wei\n12010201\n12010302\n1.20103E+11\n1.20104E+11\n12010610\n12010891\n12011021\n12011201\n120119110\n12011984\n1.2012E+11\n120120520\n120120qw\n12012891\n120128abv\n12013891\n120173458\n1201740318\n12020113\n12020915\n12021012\n12021028\n12021979\n12021984\n1202213901\n1202241984\n1.20226E+11\n120254889\n120273xyb\n12028212\n12030400\n1203079c\n12030903\n12031013\n12031014\n12031022\n12031026\n12031029\n12031108\n12031125\n12031129\n12031981\n120331848\n12034409\n1203456789\n120399947\n1203shop\n12040510\n12040523\n120407183\n12040721\n12041020\n12041121\n12041124\n12041129\n12041986\n1204512045\n120459967\n1204748761\n120475485\n12050615\n12050629\n12051205\n120516512\n120518jj\n12051982\n12051983\n12051986\n12052518\n12055713zx\n12061001\n12061029\n12061103\n12061206\n1.20612E+11\n12061212\n12061231\n12061981\n12062026\n12066147\n120675397\n120690870\n12070506\n12070826\n12071207\n12071209\n12075500\n12080000\n12080821\n12081016\n12081117\n12081208\n12081300\n12081618\n12081980\n120820657\n12084332401\n1208520815\n12090502\n12090716\n12091013\n12091208\n12091212\n12091981\n12091984\n120922120\n12094247\n120963336\n120997727\n120largelion\n12100000\n12100121\n12100226\n12100904\n12100911\n12101027\n121013023\n12101987\n12101988\n121021749\n121054323\n121067928\n12107500**..\n121082559\n121084005\n1210980696\n12110000\n12110022\n12110596\n12110608\n12110923\n12110930828\n12111011\n12111022\n12111028\n12111030\n121110cw\n12111111\n12111112\n12111121\n12111982\n12111986\n121121112\n12112112\n1.21121E+11\n121121123\n1211211234\n1.21121E+12\n121121316\n121121aa\n121123321\n1211234567\n121144169\n1.21183E+11\n1211r111225321@q\n12120000\n12120209\n12120505\n12120901\n12120909\n12121010\n12121017\n12121028\n12121111\n12121112\n12121117\n1212112121\n12121122\n12121123\n12121189\n121212100\n1.21212E+11\n12121212a\n12121215\n12121221\n12121222\n12121225\n121212aa\n121212aaa\n121212ab\n121212abc\n121212ccb\n121212QAZ\n121212qq\n121212qqq\n12121313\n12121314\n12121818\n12121973\n12121983\n12121984\n12121986\n12122121\n12122323\n12123123\n121231234\n121233333\n12123344\n12123636\n12124545\n1212520520\n12125408\n121254088\n12125418\n121254188\n12125488\n1212612hy\n12128368\n12128444\n12129622\n1212abcd\n1212xuwenli.\n12130000\n1.21301E+11\n12130502\n12130701\n12131021\n12131028\n12131107\n12131125\n12131210\n12131222\n12131230\n12131400\n1.21314E+11\n1.21314E+13\n1.21314E+15\n121314156\n121314159\n121314520\n12131456\n121314qq\n12131516\n12131986\n12132324\n1213312133\n12134083456\n121340957\n121341599\n12134546\n121351232\n121352188\n12138498\n1213abcd\n1213tong\n12140000\n12140203\n12140803\n12141011\n12141015\n12141018\n12141026\n12141030\n12141108\n12141115\n1214112141\n12141314\n12141516\n12141618\n121416777\n12141981\n12141983\n12141984\n12141987\n12142446\n121425o0\n121432965\n121435115\n121436500\n12144121\n12146868\n12150000\n1.215E+11\n12150016\n12150117..\n12150315\n12150621\n12150629\n12150807\n12151023\n12151024\n12151025\n12151026\n12151114\n12151120\n12151216\n12151314\n12151963\n12152205152\n12152250\n1215225love\n12153554\n12153707\n121566061\n12158206\n1215z1215\n12160079\n121600yjh\n121608175\n12161113\n12161122\n12161216\n12161217\n12161218\n12161979\n12161981\n12161983\n12161984\n12161985\n1.21623E+11\n121624love\n1216335092\n121654202\n121667708\n121674qoy\n1216star\n1216zxzx\n12170000\n12170310\n12170326\n121709770\n12171021\n12171103\n12171111\n12171122\n12171208\n12171218\n12171231\n12171819\n1217198200\n12171983\n12173709\n121757237\n121758941\n121774659\n12180000\n121803111\n121806123\n12180825\n12181013\n12181016\n12181029\n12181115\n12181119\n12181123\n12181124\n12181210\n12181218\n1.21812E+11\n12181317wg\n12181812\n12181982\n12181983\n12181984\n12181985\n121824760\n12183344\n12185205\n1218milan\n12190000\n12190102\n12190130get\n12191010\n12191013\n12191107\n12191113\n1219111888\n12191124\n12191224\n12191314\n12191983\n12191987\n12192169\n1219318914\n121938094\n12197287\n121975zy\n121976618\n12198344\n12198481\n121985530\n1219cold\n121pjh000\n12200215\n12200306\n12201026\n122010mn\n12201220\n12201678asdf\n12201982\n122024617\n1220520025\n12206438\n122065606\n12210000\n12210114\n122101544\n12210409\n12211001\n12211016\n12211122\n12211441\n12211982\n12211984\n12211985\n12212112\n12212121\n12212212\n12212332\n122133144\n12213443\n12213456\n122153400\n12215719\n12220429\n12221111\n12221207\n12221221\n12221222\n12222221\n1222222222\n122232444\n122263555\n12227536\n12230506\n12230610\n122308821\n12231123\n12231203\n12231970\n12233221\n122333123\n122333221\n1.22333E+14\n1223334444s\n122333456\n12233445\n1223344556\n122344566\n12234556\n1223weiwei\n12240000\n12240126\n1224032571\n12240406\n12240410\n12240715\n12240815\n12241025\n1224112241\n12241123\n12241210\n12241225\n1224123ww\n12241978\n12241983\n12241984\n122425326\n12243648\n12244221\n122454001\n122483224\n12250000\n12250119\n12250525\n12250601\n12250805\n12250812\n1225098297\n12251017\n12251018\n12251111\n12251114\n12251157\n12251212\n12251219\n12251223\n1.22512E+11\n12251226\n12251227\n12251228\n122512lydia\n12251314\n12251968aa\n12251980\n12251982\n12251983\n12251985\n12251986\n12254899\n12255221\n12257545\n12260208\n12260507\n12260809\n12261106\n12261107\n12261113\n1.22612E+11\n12261228\n12261980\n12261985\n12261987\n122653445\n12265345@126.com\n12266135\n12266221\n122682706\n12271001\n12271011\n12271227\n12271986\n1227216000\n1227237gyl\n12278543\n1227913\n122798528\n12280000\n12280207\n12281008\n12281030\n12281229\n12281980\n12282003\n12282011\n12282888\n12283023\n122865122\n122866aa\n12288221\n122885432\n1228happy\n12290312\n12290349\n12291027\n12291127\n12291208\n12291229\n12291982\n12291983\n1229337606\n12295200\n1229gg99\n123!@#123\n123*456*\n123+456-789\n123+456=789\n123-456-789\n123.....\n123...123\n123...456\n123..123..\n123..321\n123..456\n123.123.123.\n123.2531\n123.3147283\n123.321.\n123.456789\n1230.123\n1230.321\n1230.456\n123000.+\n123000..\n123000...\n1.23E+15\n1.23E+11\n123000321\n123000456\n123000aa\n123000aaa\n123000az\n12300321\n12300456\n123007418\n12300789\n12300a00A\n12301014\n123010203\n12301023\n12301122\n12301230a\n12301231\n1230123123\n12301234\n1230123a\n1230123wu\n12301891\n12301981\n12301983\n12301984\n12301987\n12302211\n12302800\n12303210\n1.23046E+11\n12304567\n123045678\n1230456a\n1230520po\n1230612306\n12306966\n123072002\n123098123\n1230984567\n12310000\n12310082311\n1231012310\n123102030\n12310700\n123107mjw\n123110110\n12311110\n12311111\n12311113\n12311125\n12311230\n12311231345\n1.23112E+13\n12311892\n12311982\n12311984\n12312123\n1231212312\n1231212315\n123123.123\n12312300a\n123123110\n123123111\n1231231122\n1231231123\n1.23123E+14\n1.23123E+15\n1231231233\n12312312345\n1.23123E+12\n123123123Aa\n123123123ABC\n123123123qq\n123123123QWE\n123123123s\n123123123z\n123123124\n12312313\n123123132\n1231231323y\n12312321\n12312323\n12312333\n123123333\n123123369\n12312344\n123123455\n12312355\n123123654\n12312366\n123123666\n12312378\n123123888\n12312399\n123123a123\n123123ab\n123123abcabc\n123123abcd\n123123as\n123123asdasd\n123123bb\n123123bbb\n123123cbk\n123123ccc\n123123dd\n123123duan\n123123dyf\n123123feng\n123123ff\n123123gx\n123123jj\n123123kk\n123123li\n123123lin\n123123liu\n123123ll\n123123mm\n123123mmm\n123123ok\n123123pp\n123123qa\n123123qazqaz\n123123qqq\n123123qw\n123123qweqwe\n123123sa\n123123tt\n123123wo\n123123wq\n123123ww\n123123www\n123123xx\n123123ygy\n123123yy\n123123z123\n123123zlh\n123123zz\n123123zzz\n123124125\n1231270123\n123128ly\n123129103\n12313123\n1.23131E+13\n123132987\n12313683\n1231421421\n12314564\n123147123\n123147159\n123147258\n123147aa\n12315000\n12315000wf\n12315100\n12315110\n12315111\n12315111c77v\n12315123\n1231512365\n12315160\n123152004\n1.23152E+12\n123153123\n12315315\n12315446\n1231566165\n12315678\n123156789\n12315789\n12315888\n123159147\n123159357\n123159753\n12315987\n12315abc\n123168168\n12316888\n12317155\n123175067\n1231853211\n12319332\n1232008123\n1232112321\n12321233\n123213312\n123213321\n12321456\n1232145654\n12322123\n123223323\n123223333\n1232233362\n123223daye\n12323123\n123231312\n123231321\n123232aa\n1232340150\n1.23234E+11\n12325800\n123258369\n123258456\n123258789\n12325879\n12328183\n1232846739\n123311591\n12331233\n123321.1235\n1233210000\n123321007\n12332101\n1233210123\n1233210a\n123321110\n123321111\n1233211230\n12332112321\n12332112345\n1.23321E+14\n123321123a\n12332112b\n12332113\n123321132\n12332113212\n12332113221\n123321147\n123321213\n12332122\n12332123\n123321231\n12332125\n123321258\n123321321\n12332133\n123321333\n12332134567\n12332144\n1233214567\n12332147\n123321508\n123321521\n12332155\n123321567\n12332158\n123321654\n12332166\n123321666\n12332177\n123321789\n1.23322E+11\n123321888\n123321999\n123321ab\n123321abccba\n123321abcd\n123321as\n123321ASD\n123321bb\n123321ee\n123321hh\n123321kk\n123321li\n123321ll\n123321mm\n123321ok\n123321pp\n123321ppa\n123321qaz\n123321qqq\n123321QW\n123321qweewq\n123321song\n123321SS\n123321tt\n123321ty\n123321www\n123321x42\n123321xyz\n123321zl\n123321zxc\n123321zz\n12333211\n12333321\n12333456\n1233412334\n123345567\n12334566\n1.23346E+11\n12334567\n1233456789\n123357857912@qq.\n123369369\n123369789\n12336987\n123369987\n1.2337E+11\n1233765830\n1234$#@!\n1234*1234\n1234+1234\n1234.1234\n1234.4321\n1234009547\n123404321\n123409547\n12341111\n123411226\n12341210\n12341212\n12341233\n123412341\n1234123412\n1.23412E+11\n12341234a\n12341234abcd\n12341234cm\n12341235\n12341255\n12341314\n123416688\n123417860\n12341qaz\n12342002\n1.23422E+11\n1234234344\n123424158\n12343210\n12343211\n12343215jo\n12343344\n12343767\n12344231\n123443211\n1.23443E+11\n12344321a\n12344321heheQ\n12344321q\n12344321qq\n12344444\n12344540\n123445566\n12344567\n1234456789\n12345%$#@!\n12345007\n12345078\n12345098\n12345119\n1.23451E+14\n12345123456\n12345168\n12345188\n123452009\n123452345\n1234523456\n12345321\n1234543210\n12345520\n1234554123\n12345543\n1.23455E+11\n1234554321abc\n123455543\n1234555544\n123455678\n123456гнгн\n123456!!\n123456!!!\n123456!@\n123456##\n123456&890\n123456*a\n123456+-\n123456+-*/\n123456+789\n123456-00b\n123456-789\n123456-=\n123456-a\n123456.+\n123456....\n123456..0\n123456.1\n123456.abc\n123456.w\n123456/*-\n123456/.\n123456//\n123456/a\n1234560..\n12345600..\n1234560001\n123456001\n1234560010\n123456002\n123456007\n12345600a\n12345600aa\n123456010\n123456012\n1.23456E+12\n12345601h\n12345606\n12345607\n12345608\n12345609\n1234560987\n1234560sz\n12345610\n123456100\n123456119\n123456120\n12345612345\n1.23456E+15\n123456123456A\n123456123a\n12345613\n1234561314\n123456147\n123456159\n12345616\n123456163\n123456168\n123456188\n1234561987\n1234561a\n1234561wz\n12345620\n1234562007\n1234562009\n1234562010\n123456206\n12345621\n123456211\n12345622\n123456222\n12345623\n12345625\n123456258\n12345627\n12345628\n123456310\n12345632\n1234563210\n12345633\n123456333\n12345636\n123456369\n12345641\n12345644\n123456444\n12345645\n12345652\n12345655\n123456555\n12345657\n12345658\n123456610\n12345663\n12345665\n1234566543\n1234566666\n123456677\n123456688\n1234567!\n1234567!?\n1234567#\n1234567+\n1234567..\n1234567000\n123456708\n123456709\n1234567098\n123456712\n12345672\n12345674\n123456741\n1234567520\n123456753\n1234567567\n1234567765\n1234567777\n1234567788\n123456779\n12345678!\n12345678$\n12345678*\n12345678+\n12345678/\n1234567810\n123456785\n1234567852\n123456786\n1234567877\n1234567887\n123456789!@\n123456789!@#\n123456789#\n123456789+++***\n123456789+-\n123456789+-*/\n123456789-\n123456789-+\n123456789/*-\n123456789/*-+\n123456789/.\n1234567890+\n1234567890-\n1.23457E+19\n12345678905\n1.23457E+18\n1234567890@\n1234567890A\n1234567890aa\n1234567890aaa\n1234567890ab\n1234567890abcd\n1234567890abcde\n1234567890abcdef\n1234567890as\n1234567890asd\n1234567890asdf\n1234567890az\n1234567890l\n1234567890ll\n1234567890m\n1234567890ok\n1234567890p\n1234567890qaz\n1234567890qw\n1234567890qwerty\n1234567890w\n1234567890wwwyyy\n1234567890x\n1234567890y\n1234567890z\n1234567890zxc\n1234567890zxcvbn\n1234567894\n12345678951\n12345678955\n12345678987\n1.23457E+16\n123456789_\n123456789_0\n123456789`\n123456789abcdef\n123456789abcdefg\n123456789ac\n123456789asdfghj\n123456789cc\n123456789ccc\n123456789chen\n123456789cy\n123456789dd\n123456789e\n123456789ff\n123456789gao\n123456789gg\n123456789gl\n123456789guo\n123456789gy\n123456789gyn\n123456789he\n123456789hh\n123456789hl\n123456789hu\n123456789huang\n123456789i\n123456789jiang\n123456789jj\n123456789lf\n123456789lh\n123456789lj\n123456789lll\n123456789lp\n123456789lq\n123456789ls\n123456789lt\n123456789LUO\n123456789lw\n123456789lx\n123456789ly\n123456789mmm\n123456789mnb\n123456789mnbvcxz\n123456789nm\n123456789nn\n123456789oi\n123456789op\n123456789poi\n123456789ppp\n123456789qa\n123456789qwertyu\n123456789r\n123456789sh\n123456789shi\n123456789SS\n123456789sss\n123456789sudu\n123456789sun\n123456789sy\n123456789tt\n123456789ty\n123456789u\n123456789wh\n123456789wj\n123456789wl\n123456789WOAINI\n123456789ws\n123456789wy\n123456789wz\n123456789xiao\n123456789xie\n123456789XU\n123456789xw\n123456789xxh\n123456789XY\n123456789xyz\n123456789yj\n123456789yl\n123456789you\n123456789yp\n123456789yt\n123456789yuan\n123456789YY\n123456789ZA\n123456789zF\n123456789zh\n123456789zhu\n123456789zj\n123456789zl\n123456789zm\n123456789zxcvb\n123456789zxcvbnm\n123456789zy\n123456789zzl\n123456789~\n12345678?\n12345678A@\n12345678aaa\n12345678abcd\n12345678as\n12345678asd\n12345678b\n12345678C\n12345678d\n12345678f\n12345678g\n12345678h\n12345678hy\n12345678j\n12345678justme\n12345678k\n12345678kk\n12345678li\n12345678mm\n12345678No\n12345678pk\n12345678pp\n12345678Q\n12345678qaz\n12345678QWE\n12345678qwertyui\n12345678s\n12345678t\n12345678ty\n12345678wr\n12345678ww\n12345678xx\n12345678y\n12345678yy\n12345678zl\n12345678zx\n12345678zz\n1234567980\n123456798a\n12345679a\n1234567@\n1234567aaa\n1234567abcd\n1234567abcdefg\n1234567as\n1234567asd\n1234567bjs\n1234567c\n1234567cc\n1234567d\n1234567dD\n1234567f\n1234567g\n1234567h\n1234567j\n1234567jj\n1234567li\n1234567lj\n1234567love\n1234567ly\n1234567m\n1234567mm\n1234567o\n1234567ok\n1234567p\n1234567pc\n1234567qa\n1234567qaz\n1234567qd\n1234567qqq\n1234567qw\n1234567qwe\n1234567qwer\n1234567qwertyu\n1234567s\n1234567t\n1234567tt\n1234567v\n1234567wo\n1234567x\n1234567xx\n1234567xxx\n1234567xy\n1234567xyz\n1234567yj\n1234567yue\n1234567yy\n1234567zxc\n1234567ZXCVBNM\n1234567zy\n1234567zz\n12345680\n12345682\n12345684\n12345685\n1234568520\n1234568888\n123456897\n1234568a\n1234568k\n123456911\n123456951\n123456963\n12345697\n123456978\n123456987a\n123456987q\n1234569900\n123456998\n1234569999\n1234569a\n123456??\n123456@#$\n123456@byd\n123456^%$#@!\n123456_123456\n123456_789\n123456_abc\n123456``\n123456A!\n123456a...\n123456a1\n123456a123\n123456A123456\n123456a7\n123456a789\n123456aaaaaa\n123456aaabbb\n123456aab\n123456aabb\n123456aas\n123456abc123456\n123456ABC789\n123456abcabc\n123456abcjcq\n123456abs\n123456ac\n123456acb\n123456ad\n123456af\n123456al\n123456an\n123456aoe\n123456apple\n123456asa\n123456asas\n123456asdasd\n123456asdfghjkl\n123456asdzxc\n123456At\n123456aw\n123456AX\n123456AZX\n123456bai\n123456bao\n123456bbs\n123456bc\n123456bin\n123456bing\n123456bj\n123456bl\n123456bn\n123456bnm\n123456bo\n123456boy\n123456bp\n123456BYD\n123456cai\n123456CAO\n123456catv\n123456cb\n123456cba\n123456ccc\n123456CCTV\n123456cd\n123456cf\n123456ch\n123456cheng\n123456cj\n123456ck\n123456CL\n123456cm\n123456cn\n123456com\n123456cq\n123456cs\n123456csdn\n123456ct\n123456cui\n123456cw\n123456cx\n123456cxy\n123456cy\n123456cz\n123456da\n123456dai\n123456dan\n123456dc\n123456ddd\n123456de\n123456deng\n123456df\n123456dfk\n123456dfwy\n123456dg\n123456dh\n123456ding\n123456dj\n123456dl\n123456dong\n123456dql\n123456ds\n123456dsa\n123456dt\n123456du\n123456duan\n123456dw\n123456dwg\n123456DX\n123456dy\n123456ecvv\n123456ee\n123456efg\n123456er\n123456fa\n123456FAN\n123456fei\n123456feng\n123456ffee\n123456fff\n123456fg\n123456fj\n123456flash\n123456fly\n123456fu\n123456fxx\n123456fy\n123456gao\n123456gb\n123456gd\n123456gf\n123456ggg\n123456gh\n123456gj\n123456GL\n123456gn\n123456go\n123456good\n123456gp\n123456great\n123456gs\n123456gt\n123456gu\n123456guo\n123456gx\n123456GY\n123456gyn\n123456gz\n123456ha\n123456haha\n123456haitian\n123456han\n123456hb\n123456hd\n123456he\n123456hg\n123456HH\n123456hhh\n123456hj\n123456hjh\n123456hjk\n123456HJKL\n123456hk\n123456hkk\n123456hl\n123456hm\n123456hn\n123456hong\n123456hp\n123456hr\n123456hrb\n123456hs\n123456hsyy\n123456ht\n123456hua\n123456huang\n123456hui\n123456hul\n123456hxp\n123456hy\n123456hyj\n123456hyl\n123456hz\n123456iop\n123456jay\n123456jb\n123456jdy\n123456jh\n123456ji\n123456jia\n123456jian\n123456jiang\n123456jie\n123456jin\n123456jing\n123456jixiang\n123456jjj\n123456jk\n123456jl\n123456jm\n123456jn\n123456jun\n123456june\n123456jx\n123456jy\n123456kai\n123456king\n123456kj\n123456km\n123456l1\n123456lan\n123456lb\n123456lc\n123456lch\n123456ld\n123456le\n123456lee\n123456lei\n123456lf\n123456lg\n123456lh\n123456lhy\n123456liang\n123456lili\n123456ling\n123456liuan\n123456ljh\n123456ljj\n123456ljl\n123456ljs\n123456ljy\n123456lk\n123456lkj\n123456lld\n123456lld!\n123456llj\n123456llll\n123456lm\n123456ln\n123456lp\n123456lq\n123456lr\n123456ls\n123456lt\n123456lu\n123456luo\n123456lv\n123456lw\n123456lwj\n123456lx\n123456lxf\n123456lxl\n123456lxy\n123456lyf\n123456lyflq\n123456lyh\n123456lyj\n123456lyl\n123456lyp\n123456lz\n123456lzk\n123456lzl\n123456lzy\n123456mao\n123456mc\n123456md\n123456me\n123456mei\n123456meng\n123456mf\n123456mh\n123456mhw\n123456mima\n123456min\n123456ming\n123456mj\n123456ml\n123456MNB\n123456mo\n123456mwy\n123456my\n123456myq\n123456mz\n123456na\n123456nba\n123456niu\n123456nmw\n123456nn\n123456nnn\n123456nw\n123456okok\n123456ooo\n123456pan\n123456peng\n123456pk\n123456pl\n123456plm\n123456po\n123456poi\n123456pop\n123456pw\n123456QAZWSX\n123456qazxsw\n123456qd\n123456qi\n123456QIAN\n123456qiu\n123456ql\n123456qlm\n123456QP\n123456qqa\n123456qqaa\n123456qqqq\n123456qs\n123456qweasd\n123456qwertyuiop\n123456qz\n123456ren\n123456rr\n123456rt\n123456rui\n123456sb\n123456sc\n123456sd\n123456seo\n123456sg\n123456sh\n123456shan\n123456shen\n123456shi\n123456shu\n123456sisu\n123456Sj\n123456sk\n123456sky\n123456sl\n123456sm\n123456sn\n123456snow\n123456song\n123456sq\n123456sss\n123456st\n123456su\n123456sun\n123456sw\n123456sx\n123456sy\n123456syh\n123456sz\n123456ta\n123456tan\n123456tang\n123456tao\n123456td\n123456ti\n123456tian\n123456tiantian\n123456tianya\n123456ting\n123456tj\n123456tom\n123456ttt\n123456tu\n123456tx\n123456txj\n123456uu\n123456uuu\n123456vb\n123456vbn\n123456vv\n123456wa\n123456wasd\n123456wb\n123456WC\n123456wd\n123456WE\n123456weiwei\n123456wen\n123456wf\n123456wg\n123456wh\n123456why\n123456wj\n123456wk\n123456wl\n123456wll\n123456wm\n123456WO\n123456woyo\n123456wp\n123456wq\n123456ws\n123456wsx\n123456wt\n123456wwx\n123456wx\n123456wxy\n123456wy\n123456wyf\n123456wyj\n123456wyq\n123456WZ\n123456wzg\n123456wzh\n123456xb\n123456xc\n123456xd\n123456xf\n123456xh\n123456xia\n123456xie\n123456xin\n123456xing\n123456xj\n123456xl\n123456xm\n123456xp\n123456xq\n123456XT\n123456xu\n123456xue\n123456xuexue\n123456xw\n123456xyh\n123456xyl\n123456XZ\n123456ya\n123456yao\n123456yb\n123456yc\n123456ycm\n123456ye\n123456yes\n123456yf\n123456yi\n123456yin\n123456ying\n123456yk\n123456yl\n123456ym\n123456you\n123456yoyo\n123456yq\n123456YS\n123456yuan\n123456yun\n123456yw\n123456yx\n123456yyl\n123456yyy\n123456yz\n123456za\n123456zb\n123456zc\n123456zd\n123456zds\n123456ZF\n123456zg\n123456Zh\n123456zhb\n123456zhh\n123456zhong\n123456zhou\n123456zhr\n123456zhy\n123456zj\n123456zjs\n123456zk\n123456zl\n123456zm\n123456zn\n123456zp\n123456zpl\n123456zq\n123456zr\n123456zs\n123456zsy\n123456zt\n123456zw\n123456zws\n123456zxcvb\n123456zxh\n123456ZXL\n123456zxy\n123456zxz\n123456zy\n123456zyh\n123456zyl\n123456zyy\n123456zzh\n123456zzl\n123456zzy\n123456ZZZ\n123456zzzz\n123457689\n1234576a\n123457896\n1.23458E+11\n12345815\n12345835\n123458915\n123458aa\n12345919\n12345987\n1234598760\n12345999\n12345a123\n12345a54321\n12345a6789\n12345aaa\n12345aaaaa\n12345abcdef\n12345asDF\n12345chen\n12345fffff\n12345hhh\n12345hui\n12345jun\n12345liu\n12345love\n12345mjs\n12345n09876\n12345poiuy\n12345qqq\n12345qqqqq\n12345qwertasdfg\n12345shf\n12345shshdlh\n12345sht\n12345SSS\n12345sweet\n12345tianya\n12345tmd\n12345ttt\n12345wang\n12345www\n12345xxx\n12345xyz\n12345yifan\n12345zhang\n12345zrn\n12345zxc\n12345zxcv\n12345zxcvb\n1.23465E+11\n12346578\n1234657890\n123465798\n123467895\n12346789aa\n12346872\n123475869\n12347788\n12347896\n123478965\n12347hk8\n12348765liang\n12348765qq\n12348899\n1234889900\n123489756\n12349999\n1234@abc\n1234@Byd\n1234_abcd\n1234a1234\n1234a4321\n1234a567\n1234a5678\n1234ab21\n1234abcd1234\n1234abcdb\n1234ABCDE\n1234abcdee\n1234chen\n1234dcba\n1234fdsa\n1234haha\n1234hjkl\n1234huang\n1234inging\n1234king\n1234kxxm\n1234long\n1234love\n1234mnbv\n1234pass\n1234poiu\n1234pppp\n1234q1234\n1234qazw\n1234QAZX\n1234qq1234\n1234qqqq\n1234qw00\n1234qwas\n1234qweasd\n1234qweasz\n1234qwer110\n1234qwer5\n1234qwert\n1234tony\n1234ui5678\n1234uiop\n1234violet\n1234wang\n1234wasd\n1234wwww\n1234xiao\n1234xike\n1234xxxx\n1234xyza\n1234yang\n1234yess\n1234zhang\n1234zxcvbnm\n1234zzzz\n12351321\n123520123\n1.2352E+11\n123520abc\n12352100\n1.23521E+11\n123521jie\n12352520\n12353ALLEN\n1235412354\n12354321\n12354678\n123546789\n12354688\n12355321\n1235612356\n123564978\n12356789dahehao\n12356790\n12356799\n123567yp\n12356889\n12356890\n12356987\n123571113\n12357410\n123574159\n123578951\n123580159z\n12358123\n1235812358\n1235812@\n12358132134\n12358134\n123581347\n12358314\n1235831459\n123585088wym\n123585321\n123585858\n12358789\n1235909042\n123596315\n123598818\n12361236\n123619lh\n123640287\n12364567892@126.\n1236512365\n12365214\n12365321\n123654..\n123654000\n123654001\n12365410\n12365411\n1.23654E+11\n12365423365\n123654258\n123654321\n12365444\n12365445\n123654456\n123654520\n123654654\n12365466\n12365470\n123654741\n12365478900\n1236547891\n1.23655E+11\n12365478963\n1236547899\n123654789abc\n123654789p\n123654789z\n123654798\n123654852\n12365487\n123654879\n1236548790\n12365488\n123654897\n12365498\n12365499\n123654999\n123654aaa\n123654asd\n123654asdf\n123654kk\n123654li\n123654liu\n123654mm\n123654ok\n123654qaz\n123654qq\n123654qw\n123654qwe\n123654sky\n123654ty\n123654yu\n123654yyy\n123654zxc\n123654zz\n12366321\n12366666\n123666666\n12366888\n12367890\n123679223\n12368099\n1236827528\n12368800\n12369000\n1236912369\n1.23692E+12\n12369369\n123696321\n12369852\n12369874125\n1236987415\n1236987455\n123698745a\n12369874a\n12369875\n1236987qaz\n1236996321\n1236mnpq\n123700278\n123709394\n12371237\n12372600\n12374296\n12375844\n1237758258\n1237758521\n123776874\n12378456\n123789000\n12378901\n12378912\n1.23789E+11\n123789258\n123789369\n123789465\n123789654\n123789654cbl\n123789789\n1.2379E+11\n123789852\n1237898911\n123789987\n123789aa\n123789aaa\n123789asd\n123789cqc?\n123789qaz\n123789qq\n123789sh\n123793491\n12381238\n123830427\n123844877\n123846579\n12385613\n1.23888E+11\n123888keke\n1238904567\n12389655\n123899057\n1239086250\n12391239\n123918679\n12394567\n1239581b\n123963aaa\n12398700\n123987123\n123987852\n123987abc\n123987dd\n123988qaz\n123988qazxsw\n1239988321\n123999888\n1239999321\n12399999\n123a123a123a\n123a123b\n123a123s\n123a321b\n123a321s\n123a456789\n123a456a\n123a456a789a\n123a456s\n123a8812581\n123aa123aa\n123aa321\n123aa456\n123aaa321\n123aaa456\n123AAAaa\n123AAAaaa\n123aaabbb\n123aabbcc\n123ab123\n123ab456\n123abc!@\n123abc...\n123abc00\n123abc000\n123abc12\n123abc321\n123abc321cba\n123abc45\n123abc456789\n123abc456efg\n123abc4d\n123abc6789\n123abc789\n123abcd123\n123abcd456\n123abcef\n123abcxyz\n123abcyangtt\n123admin\n123and456\n123ao321\n123apple\n123AS123\n123as456\n123asd!@#\n123asd123ASD\n123asd321\n123asd654\n123asddsa\n123asdf456\n123ASDFGH\n123asdqwe\n123asdzxc\n123awedxz\n123caonima\n123cc.com\n123cf90815\n123dd456\n123dongke\n123dshily\n123e456y789o\n123ewqdsa\n123foxconn\n123foxconn!\n123foxconn$\n123gao456\n123gogogo\n123happy\n123hello\n123hezhihuan\n123hh123\n123hua123\n123huang\n123ILOVEYOU\n123JIANG\n123jiayou\n123li456\n123liang\n123liuxiang\n123love123\n123m123m\n123mima123\n123mm123\n123mnbvcxz\n123MUTOUREN\n123mylove\n123nihao\n123ok123\n123ok456\n123p123p123p\n123ppsss\n123q123d\n123q123q\n123Q4321\n123q456q\n123q456w\n123q456w789e\n123qaz!@\n123qaz123qaz\n123qaz321\n123qaz456\n123qaz456wsx\n123qazplm\n123qazqaz\n123qazxsw\n123qq123qq\n123qq321\n123qq321qq\n123qq456\n123qqq123\n123qw123\n123qw123qw\n123qw456\n123qwaszx\n123qwe-=\n123qwe..\n123qwe11\n123qwe12\n123qwe321\n123qwe4r\n123qwe789\n123qweas\n123qweasdz\n123qweqaz\n123qweQQ\n123qwezxc\n123s123s\n123salangane\n123smile\n123study\n123sun123\n123tarique\n123tianya\n123wangwei\n123weiwei\n123world\n123ww123\n123www123\n123wwwwww\n123xiner\n123xxg89\n123yfhao2001\n123yiersan\n123yu123\n123yy123\n123zhangcong\n123zheng\n123zx123\n123zxc321\n123ZXC456\n123zxcvb\n123zzz123\n12401240\n1.24047E+11\n124068IK\n1.24106E+11\n1241151225\n124124000\n124124smq\n12412600\n12415396\n12418294\n12421242\n124231128\n12425164\n124268698\n12429684\n12431243\n12435678\n12435687\n124357689\n124365847\n124386443\n124386800\n124406829\n12451245\n12456505\n1245669988\n12457800\n12457812\n1.24578E+11\n12457836\n1245783690\n12457890\n12457896\n1245789630\n124578abc\n124578lsy\n12459618\n124598260\n12461246\n1246love\n1247111622\n12471247\n124736958\n1248101014\n12481248\n1248163264\n12488082\n12488421\n12489098\n124904629\n124a66cf\n12500000\n12501250\n125022402\n12510300\n12511251\n1.25119E+11\n1.2512E+11\n12512500\n125125125x\n125161bjy\n125179894\n1252004161\n125201314\n1252112521\n12521252\n125239717\n1253012530\n12531253\n1253181783\n125334479\n125347352\n125365672\n12541254\n12544521\n12545199\n12548787\n12551255\n1255183121\n125520333\n12552100\n125521125\n1.25521E+11\n1255211314\n125521921\n125523112\n125569979\n125600350\n12561256\n12563380\n12563478\n125641586\n12567890\n125682769Q\n12571257\n125717707\n125721556\n12573257\n125732578\n1257445105\n125748xieyan\n125764623\n12577725\n1258010086\n12581258\n125819132\n12584512\n12585287\n125857741\n125874369\n125874963\n12587758\n125883259\n12588521\n1258912589\n125896321\n125896347\n1258974563\n1259012590\n1259013932\n12590163\n125901860\n125901861\n125902474\n125905959\n125906812\n1259068180\n125906862\n12590707\n1259125184\n12591259\n1259251314\n125930394\n1259317951\n12597758\n12598858758\n125996267a\n125a562F\n125lele106\n12601260\n126036126\n12608580\n12611261\n12612415\n1.26126E+11\n126126asiabb\n126127128\n1261853300\n12620303\n126213ch\n1262823181\n12631263\n12633337\n126336177\n12641264\n126438550\n12650443\n12651265\n126520520\n126543789\n12656178\n1265803688\n12661266\n126670379\n1266922882\n1266qwer\n12681268\n1268226899\n1268671323\n12688621\n126891128\n12691269\n126974906\n127.0.0.1\n12701270\n1270151666\n1270158612\n1270232920\n1270252347\n12702607420\n1270321457\n1270361069\n1270375018\n1270500832\n1270561818\n1270605005\n1270821066\n1270909361\n1270910422\n12711028\n1271194112\n1271259018\n127136145\n1271656180\n1271662140\n1271808926\n1271826027\n1271889872\n1271962330\n1271987127\n1272158850\n1272204309\n127225shi\n1272269821\n1272276406\n1272290769\n1272674399\n1272812823\n12731273\n1273593886\n1274263f\n12751200\n1275224358\n1275323140\n1275629186\n1275684767\n12758727\n1275973715\n12769674\n127767078\n1277886165\n1278012815\n1278016160\n12781278\n1278156530\n1278175088\n1278327829\n1278336935\n1278401597\n1278479301\n12784994\n1278634901\n1278640589\n1278731475\n12788888\n127892409\n1278980144\n1279027123\n1279096075\n12791279\n12799944\n12801024\n12801280\n12804791\n1280539124\n12808800\n1280jytynl\n12811281\n1281191310\n128128xl\n12821282\n12822458\n1282281215\n12828945\n12830912\n12848484\n128489928\n12850583\n12850660\n1.28525E+11\n128620ruolin\n1286990990\n12871287\n12875128\n12876543\n12881288\n12881399\n128821128\n12888888\n12891289\n12891296\n1289mo66\n12900129\n12901290\n12909785\n1291632349\n1291921012\n12921292\n12921314\n12921383\n129409779\n12941294\n129413tywuwei\n1294795972\n1295019327\n1295058171\n12951295\n1295158566\n1295209399\n1295257852\n1295366512\n1.29538E+11\n1295467321\n12956174\n12957565\n12961074\n1296376423\n1297158345\n12972019\n1298012980\n1298015715\n129807071\n12981298\n1298151161\n1298157333\n1298170960\n1298179985\n1298386171\n1298718337\n1298884995\n1298900126\n1298918879\n1298966474\n12991299\n129921129\n12995489\n1299787661\n129A4cf1\n129aa129\n12a12b12c\n12a34b56c\n12ab12ab\n12ab34CD\n12AE254a\n12as12as\n12as34df\n12c609c1\n12dhy3456\n12ee0b99\n12l26z24x\n12LINcy14\n12lxchen01\n12q26w15\n12qq12qq\n12qw34as\n12qwA2588\n12qwas34\n12woaini\n12zsy1983\n13000000\n13001113\n13001300\n13001517755\n13001711022\n13002063789\n13002064120\n13002369835\n13002386522\n13002399920\n13002881265\n13003068739\n13003478097\n13003618827\n13005007022\n130050124\n13005016\n13005016016\n13005090308\n13005096290\n13005874455\n13006009815\n13006060120\n13006668896\n130067fqf\n13007738597\n13008157219\n13008360078\n1300a466\n1300lj6282668\n13010381\n13011007058\n13011301\n13011757245\n130120110\n13012335837\n13012345\n13012355547\n1301262..\n13012635373\n1.3013E+11\n130130130a\n130131132\n13013606888\n1.30139E+11\n1301555078\n13016073735\n13016131639aw\n13016259673\n13016467635\n13017205979\n13017525669\n130175550z\n13018318007\n13018813906\n13018858182\n13019730831\n13019986334\n1301998a6334\n13020543606\n13021010983\n13021302\n13021998108\n13022540345\n13023144678aa\n130238wdza\n13026701718\n13026767\n130270564\n13029118009\n130298will130298\n13030020\n1303021598\n1.30303E+14\n13030951991\n13031303\n13031384447l\n13032073323\n1303215007\n13032706618\n130327aa\n13032809525\n13033119\n13033143873\n13034410028\n13034480592\n13034921321\n13034936672\n13034938975\n13034940511\n13035542828\n13035561532\n13036660290\n13036670929\n13036846033\n13037464575\n13037565150\n13037699129\n13037802780\n13038518199z\n1303abcxyz\n13040615050\n13040911\n13041111071\n13041304\n13041786227qq\n13041868\n13042105623\n13044215345\n13045160851\n13047995\n13048279523\n13048495237\n130488541\n1.30497E+11\n130500821\n13050138392\n13050200\n1305031983\n13050805696\n13051305\n1305201314\n1305280416\n13053885969fcf\n13053953225\n13055556968\n13055635\n13055754391\n13055801355\n13056827718\n13056931881\n13057330425\n13057835889chen\n13059058408\n13059606363\n13060180166\n13060302110\n13060681052\n13061192965\n13061280\n13061306\n13061539897\n13062594\n13063357060\n130638979\n13064364577\n13066032381\n13066535454\n13066965553\n13066994241\n13067478434\n13067555478\n13067695698\n1.30687E+11\n13070093565\n13070169755\n13070322000\n13071277384\n13071307\n13072756456\n13072761705\n13073485342\n13073572020\n13075929945\n13076228\n13077007330\n13077568512\n13077969916\n13077970300\n13078288808\n13078900526\n13078919458\n13078921446\n13078930821\n13078939358\n13078975033\n13078986962\n13080558187\n13081308\n13081971\n13082361656\n13084161198\n13084902\n13085017191\n13085020421\n13085180548\n13086029630\n1308660660\n130888NMVB\n13089153727\n1.30902E+13\n13091309\n13091608661\n13092319\n13092lrr228\n1309300130\n13096986460\n13097787273\n1309811981\n1309858066\n13098900753\n1309890515\n13099020646\n13099993378\n130a7795\n13100356855\n13100722380\n13100891\n13101210822\n13101310\n13101698\n13101899\n13102021571\n13102062556\n13102652314\n13102855098\n13103068762\n13103212630\n13104600603\n13104872044\n13104883799\n13106389898\n13107442102\n13108610\n13108968693\n13110100603\n131111.com\n131111com\n13111311\n1.31121E+11\n13112250559\n131131131\n131132133\n13113357790\n13113955453\n13114948608FENG\n13115601607\n13117447077\n13117855320\n1311813434\n13118869\n13118913161\n13118985318\n13119439919\n13119528163\n13120209532\n13120401009\n13120723556tt\n13121100\n13121312\n13121314\n13121885680\n13122100zz\n131226888\n13122822\n131239998\n1.31249E+11\n1312585131\n13126733325\n13129055551\n131293469\n13129800688\n13130202310\n13131133\n13131211\n1313133149\n13131414\n13131414520\n13132363552\n13132424\n13133512653\n13133599661\n13134646\n13135780531\n13136070214\n13136090055\n13136098710\n13136311161xsl\n13136480\n13138952540\n13138999520\n13139861507\n1313@168\n1313wing\n13140123\n13140135\n131404551\n13141015\n13141025\n131410317\n13141111\n13141115\n13141125\n13141129\n13141211\n1.31412E+11\n13141215\n13141219\n13141225\n13141234\n1314123456\n13141270831\n1.31413E+11\n13141314521\n13141364677\n13141374987\n13141413\n13141457\n13141512\n1.31415E+11\n1.31415E+13\n13141518\n13141520\n131415226\n13141573\n131415900\n131415927\n13141617\n13141618\n13141688\n13141718\n1314179520\n1314179521\n13141798\n13141984\n13141985\n13142000\n13142010\n13142011\n1.3142E+11\n13142020\n13142030\n131420579\n131420584\n1.31421E+11\n13142088\n13142099\n131420bb\n131420FLMFLM\n131420zhuzhu\n13142100\n131421000\n13142111\n131421111\n13142121\n13142125\n13142151\n131421520\n131421521\n13142199\n131421cc\n13142500\n1.31425E+11\n13142520\n13142525\n13142526\n13142545\n13142567\n13142569\n13142580\n1314258258\n1314258520\n13142588\n13142589\n1314258ming\n13142596\n13142598\n13142599\n131426123\n13142626\n13142651\n131426999\n13142maple\n13142wenjie\n13142YOO\n1314334421\n13143344qsc\n13143535\n1314489521\n13145120\n13145121\n13145156\n13145188\n1314520*\n13145200258\n13145200908\n131452010\n1314520102\n13145201021\n1314520108\n1314520110sm\n1314520111\n13145201234\n1.31452E+12\n1314520168\n131452019\n13145202\n131452021\n1314520240\n1314520258\n13145203\n131452033\n13145205\n131452051\n1314520510\n131452055\n13145206\n131452066\n131452068\n13145207\n131452075\n1314520770\n1314520777\n131452078\n13145209\n1314520=16\n1314520@\n1314520aaa\n1314520ab\n1314520ABC\n1314520as\n1314520bb\n1314520byz3340\n1314520ff\n1314520h\n1314520huang\n1314520j\n1314520jin\n1314520jj\n1314520l\n1314520lan\n1314520lin\n1314520ll\n1314520ly\n1314520m\n1314520mm\n1314520nxwss\n1314520ok\n1314520qaz\n1314520qin\n1314520s\n1314520ss\n1314520ty\n1314520whz\n1314520wj\n1314520wt\n1314520ww\n1314520wxf\n1314520wy\n1314520x\n1314520xx\n1314520xy\n1314520y\n1314520yan\n1314520yu\n1314520yy\n1314520z\n1314520zh\n1314520zj\n1314520zl\n1314520zy\n1314520zz\n1314521*\n131452111\n1314521125\n13145212\n131452121\n13145213\n13145214\n13145215\n1314521520\n1314521584\n13145216\n131452161\n131452166\n13145217\n131452177\n13145217758\n13145218\n131452188\n1314521888\n13145219\n131452199\n1314521ABC\n1314521kk\n1314521l\n1314521ll\n1314521love\n1314521q\n1314521qq\n1314521sj\n1314521w\n1314521xixi\n13145220\n13145232\n13145233\n13145240\n13145241\n13145248\n13145250\n13145253\n13145257\n13145260\n13145261\n13145263\n13145266\n13145267\n13145277\n131452777\n131452866\n13145288\n13145354\n1314540689\n13145420\n13145460\n13145489\n13145520\n13145566\n13145620\n13145621\n13145678\n13145720\n13145820\n1314584520\n13145891\n13145912\n13145920\n1314592010\n13145921\n131459421\n13145945\n13145xyx\n13146310218\n131466520\n13146666\n13146688\n13147758\n1.31478E+14\n13147788\n13148023\n13148087\n13148096\n13148187\n13148187x\n13148687\n13148742589\n13148802115\n13148866\n1314886625\n1314888axing\n13148899\n13149200\n131492010\n13149383141\n13149394\n13149420520\n13149520\n13149920\n13149999\n1314abcd\n1314aiziji\n1314deai\n1314dersw\n1314forever\n1314happy\n1314iloveyou\n1314loveyou\n1314zhang\n13151315\n13151719\n13151996030\n13152916486\n13156976321\n13158983812\n13158991621\n13158996105\n13159011008\n13159969\n13161316\n13161369699\n13161686912\n13162562764\n13165425960\n13168942\n13169920982\n13171317\n13171567056\n13172244\n13174149\n13175408876\n13175510155\n13177298738\n13178824240\n13178938789\n13178938789qq\n13178956159\n13178962417\n1317love\n13180745828\n13181318\n13181747588\n1318206385\n131824xxl\n13182654\n13183229973\n13183411266xjc\n13183806675\n13183888\n13185045275\n13185359914\n13187703429\n13188117835\n13188185996\n13189015158\n13189367706\n13190777339\n13191272139\n13191319\n13191733111\n13192429966\n131927000\n13193250457\n13193769797\n131950f7\n13195674563\n131960qaz\n13197852503\n13198060217\n13198980980\n13198999028\n131991qq\n131f51F6\n132002033\n13201099755\n13201320\n13201516175\n13201561952\n132016504\n13202000767\n13202500099\n13202510889\n13206779258\n13207960315\n13208185185\n13208195460\n13208932662\n13210651100\n13211321\n13212319874\n13212339045\n13212345678\n1.32132E+12\n132136138\n13213984812\n13214214\n13214869565\n132161abc\n13218599\n13221322\n13222727202\n1322721007\n13228384091\n13230152761\n13230205081\n13231264066\n13231323\n1323152340\n1.32324E+14\n13233343\n1323334353\n13233877540\n13234506209\n13237195712\n13240000\n1.32407E+11\n13241174214\n13241324\n13241804\n13241831858\n13243542\n132435421\n1324354657\n1.32435E+11\n1.32435E+15\n13244321\n13244924\n1324518027\n1324555bbb\n1324567890\n132456798\n13245768\n132457689\n1324576890\n132465251\n13246578\n1324657980\n13246593488\n13246599\n132465cw\n13246890\n13249459366\n13249822849\n1324qewr\n13251325\n13251411\n13253648652pts\n13253812636\n13254321\n132547698\n13255206464\n13261126005\n13261326\n13262614463\n13263941\n13264014698\n132650287\n13265478719\n13265486173\n13266869758\n13267059755\n13269556243\n13270208\n13271327\n1327152870\n13271700400\n132722gk\n13272520548\n13272817\n132785df\n13278927741\n13278935448\n13281296658\n13281328\n13281329\n13286945556\n1.329E+11\n13291329\n13297494309\n13301124439\n13301282028\n13301330\n13301988\n13302B6D\n13305002\n13305759180\n13306253069\n13306531755\n13306889298hudi\n13307301975\n13307349535kjy\n13307529211\n13307545499\n13307546633\n13308256407\n13308370687\n13309801512\n13311331\n13312809931\n13314218125\n133166199\n13317001\n13317550984\n13319184276\n13320252657\n13320765729\n133215433\n13322012345\n13322013888\n13322037862\n13322056718\n13322077321\n13322079886\n13322245465\n133233333\n133233433\n13323378898\n133236339\n13324124\n13324321\n13324508\n13325103753\n13325382231\n1332714822\n13327398788\n13328319506\n13329011819\n13330202933bai\n13330276029\n13331333\n13333333333\n13333451220\n13333666609\n1333521432\n13335246206\n13336196188\n13337613958\n13337617500\n13337670271\n13341329984\n13344520\n13351335\n13353110300\n13354309608\n133551157\n133551573\n13355779\n13356765848\n13357975108\n13365955105\n13366060365\n13366085055\n13366662842\n13366676200\n13368232300\n13370787818\n133790825\n1338.332\n13380015\n1338095584\n13381338\n13381467173\n13384993699\n13387586915\n13387786\n13389878245\n13391219966\n13391339\n13391752713\n13391858050\n13391912356\n13391950045\n133919red\n13398995578\n13399872769\n13400058641\n13401071170\n13401340\n13402289599\n13402587210\n13403406573\n13403537353\n13405577\n13406611810\n13407405\n13407970733\n1.34101E+11\n13410311199\n13411341\n1.34124E+11\n134134134\n13413807486\n1341565164\n13418286789\n13418654624\n13419234\n13420809112\n13420898027\n13420963514\n13421342\n13421809549\n13422099557\n134229311\n13422931167\n13423202\n13424088702\n13424254493\n13424378978\n13426005331\n13426249018\n13426477865\n13429810009\n13434732456\n13437192298\n13439141002\n13441344\n13450111461\n134508934\n13451124187\n13451238317zhang\n13451345\n134520019\n13452029447\n13452407\n13460097098\n13461346\n13463475620\n13464554299\n1346596y\n13466577844\n13466655451\n13466897782\n13467444218\n13467900\n134679123\n1.34679E+14\n13467913\n1.34679E+11\n1346792580\n134679285\n134679465\n13467955\n13467982\n134679825\n134679diy\n13469999345\n13471118\n13471347\n13471862010\n13472165785\n13473911062\n13474582906\n13475440737\n13476181818\n13476272905\n13476814912\n13476969655\n13477045019\n13478956466\n13480137164\n13480140921\n13480205512\n13480702018\n13480755020\n13480768607\n13481348\n13481377687\n13482257994\n13482577598\n134839460a\n13485477629\n13485866901\n13486042693\n13488108988\n13488682588\n13489048515\n13489817620\n13493575\n13495394\n134a765b\n134shluo\n13500200\n13500559890\n13501160324\n13501272214\n13501350\n13501378665\n13501391353\n13501694\n13501727\n13501981669\n13501988dj\n13503096056\n13503271508\n13503335951\n13503380450\n13503546\n13503625259\n13504470562\n13505736433\n13506094843\n13506387653\n13507191640\n13507949503\n13508053193\n13508313042\n13510000270\n13510137192\n13510179474\n13510209000\n13510271192\n13510995126\n13511351\n13511392210\n13512032866\n13512312746\n13512360617\n13513015123\n1351350000\n135135007\n13513750788\n13514769932\n13515002709\n13515250243\n13515363050\n13515378221\n13516165\n13516620587\n13516937645\n13517442358\n13518002511\n13518049171\n13518049721\n13518280632\n13518825811\n13518843015\n13518887051\n13519145285\n13519621642\n13519825468\n13519869388\n13520030295\n135201314\n1352013520\n13520297420\n13520706730shi\n13520750875\n13521314672\n13521352\n13521503447\n13522222\n13522438477\n13522669027\n13522923556\n13523346044\n13524600\n135246123\n135246135\n1.35246E+11\n135246357\n135246369\n13524673205\n1352467890\n135246798\n13524688\n13524689\n135246abc\n135246la0\n135246qwe\n135246ty\n135246zz\n13524972521\n13525810254\n13526316889\n13526865277\n13526930032\n13527485596\n13527881230\n13528519554a\n13528803835\n13530014762\n13530118086\n13531103063\n13531171606\n13531189022\n13531353\n135313531\n13531548459\n13533135716\n13533188152\n13533427275\n13534213101\n13534636496\n13534699199\n13535940038\n13535946529\n13536128\n1.35372E+13\n13538186861\n13538370182\n13539770031\n13539838718\n13539944956\n13540234540\n13540388659\n13541255238\n13542018043\n13542735402\n13543017173\n13543415767\n13544097031\n13544126\n13545368567\n13547606247\n13547856\n13548833762\n13550881028\n13551310701\n13551355\n13551775827\n13552130111\n13552637161\n13552715421\n13552773197abc\n13552930994\n135531135\n13553122500\n13553454146\n13554294535\n1355651565\n1.35565E+11\n1.35565E+12\n13556745291\n13557788\n13560046777\n1356044068\n13560731542\n13561130191\n13561153891\n135624714a\n13568520622\n13568797272\n13568887541\n13569493669\n1357013570\n13570205008\n13570318441\n13570888541\n13570996662\n13571066577\n13571113\n13571357\n13572073874\n13572438\n135724680\n135724689\n13572897630\n13572986941\n13573535741\n13574007518\n13574405308\n13574488418\n13574515326\n13574952224\n1.35765E+14\n13576744853\n13576783253lai\n13577531\n13578642\n13578876887\n135790000\n1357900000\n13579000a\n135790123\n13579013\n1.3579E+11\n13579024\n13579086\n135790abc\n135790qaz\n135790QWER\n13579111\n13579111315\n1.35791E+11\n13579123\n13579135\n13579155250\n135791686\n13579246800\n1357924680a\n1357924683\n1357924689\n135792468a\n135792486\n13579258\n135792680\n13579513\n13579531\n13579579\n135796284\n135797531\n135798462\n13579852\n13579864\n1357986420\n13579888\n13579@246810@\n13579aaa\n13579abcd\n13579abcde\n13579asd\n13579asdf\n13579good\n13579qaz\n13579qetuo\n13579qwe\n13579wxz\n13579wzg\n13579xyz\n1357abcd\n13580451200\n13581075408\n13581358\n13581854740\n13583100\n13583256968\n13584049901\n13585258880\n13585600283\n13585688024\n13585896238\n13586588989\n13587363498\n13588139668\n13588358313\n13589235790\n13589787868\n13590174384\n13590231916\n13590650694\n13590778621\n13591359\n13592515\n13593147914\n13593816971\n13594067004\n13596095802\n13596879\n13597820645\n13597861990\n13598403981\n13598623826\n13598767846\n13598885407\n13599467798\n135996633\n135qet00\n135qylych\n135renzhuo\n13600001191\n13600780872\n13601037554\n13601146428\n13601265504\n13601360\n13601384098\n136016045\n13602433288\n1360265533\n13603266239\n13604717163\n13605880428\n13606486312\n13606894\n13606923529\n13606972034\n13607054\n13607144679\n13607176329\n13607591269\n13607994466wswp\n13608360329\n13608997954\n13609565\n13609582430\n1360abcd\n13610366977\n13611008977\n13611087424\n13611361\n13611468035\n13612345678\n13612977394\n13613292067\n1.36136E+11\n136137138\n136138139\n136142929\n136155154\n13616126927\n13616518894\n13616650627\n136169260\n13617555883\n13617586648\n13618000600\n13618084\n13619194066\n13619249365\n136193330\n13619656665\n13620788380\n13620c3f\n13621138263\n13621705522\n13621889625\n13622230\n13624128\n13624704541\n13625410370\n13625543618\n13627545582\n13627546643\n13627956681\n13628485152\n136302655\n13630851899\n13631114\n136312129\n13631303671\n13631327051\n13631363\n13631423532\n13631523926\n13632119\n13632361136\n13632826929\n13632964054\n13632990100\n13633783\n13633959965\n13636417308\n13637067546\n13637068777\n13637580897\n13637587989\n13637678622\n13638273102\n13638273102dxx\n13639011340\n13641077434\n13641364\n13641369523\n13641833075\n13642164936lj\n13643254556\n13644402666\n136446ab\n13645517127\n13645772\n13645834158sp\n13646024036\n13646311865\n13647502200\n13647551231\n136479852\n13648449487\n13648603792\n13648617737\n13648657061\n13648658542\n13649202264gao\n13650009851\n13650952220\n13651273257\n13651427242\n13651727056\n13652161\n13652316774\n13652350623\n13653394266\n13653648545\n13653792099\n13655856984\n13656699012\n13656813954\n13656830\n13657733520*\n13658090229\n13659789653\n136600net\n13661205630\n13661315803\n13661366\n13661366..\n13661578624\n136626768\n13662987355pei\n13663221591\n13664911618\n1366577444\n13666633966\n136669599\n13667165888\n13668323693\n13668357841\n13668714332\n13668814816\n13668943458\n13670977084\n13671152553\n13671264235\n13671367\n13671471456\n13671863346\n13674598609\n1.36754E+11\n13677496724\n13677837864\n13678204763\n13678380045\n13678414100\n13678672331\n13678892556\n13678969\n13679729\n13680782145\n13681010892\n13681361090\n13681368\n13681508310\n13681566995\n13681644\n13681778424\n13682129868\n13682543964\n13683398903\n1.36834E+13\n136842045\n13684995017\n13687368609\n13687420580\n13687459141\n13688600701\n13688982225\n13689221212\n13689592050\n13690hhh\n13691088041\n13691143776\n13691165055\n13691239740\n13691342492\n13691369\n13692020773\n13692109604\n13692138624\n13692468\n13693127273\n13693295601\n13693995880\n13695845\n136963210\n13696854257\n1369685450\n13697556699\n13697570670\n13697573020\n13697591312\n13697767456\n13698012650\n13698203982\n13698741236\n13698908007\n13698951114\n13698978448\n13699271780\n13699631\n13699869554\n136998qw\n136c4e34\n13700100120\n13700250162\n1370029767\n13700425060\n13700440045\n13700449708\n13700470199\n13700485809\n13700488918\n13700488927\n13701083460\n13701134033\n13701275501\n13701370\n13701874602\n13701982288\n13702538859\n13702558154\n13702766510\n13703511010\n13703642095\n1.37045E+12\n13706591317\n13706630471\n13706980953\n13707345727\n13707441946\n13707502652\n13707536776\n13707578332\n13708068969\n1370837assa\n13710038949\n13710489123\n13710859912\n13711013774\n13711072110\n13711131306\n13711367073\n13711591822\n13711701800\n13712833469\n1371370486\n137137137\n1.37137E+11\n13714118131\n13714232590\n13714457342\n1371498453\n13715120215\n13716765793\n13717421\n13717617052\n13717795031\n13717954697\n13718012775\n13718176999\n13719368538\n13719487955\n13720009334\n13720114124\n13720506949\n13722233069\n13723459480\n13723748475\n13724549\n13725310655\n13725442733\n13727411\n13728004433\n13728636152\n13728998413\n13731053913love\n13732178601\n13733821865\n13733871721\n13735665331\n13735938140\n13736855536\n13739063974\n13745488\n137456814\n13750882579\n13751051051\n13751053237\n13751640546\n13751859906\n13751877148\n13751881919\n13752480118yy\n13756773185\n13757081686\n13757130396\n13758624\n13760260319\n13760421055\n13760643007\n13760787811\n13761110361\n13761367669\n13761838605\n137628652\n13764077866\n13764142850\n13764861689\n137653598\n13765452727\n13767557157\n13768687168\n13770306621\n13770596888\n13770972997\n13771377\n13771553827\n13771895156\n13774062191\n13774388082\n13774813783\n13775728\n13775849753\n13776353293\n13776690356\n13778853425\n1378011977\n1378038899\n13780392983\n13781157672\n13781378\n13782347010\n13784316\n13784788572\n13784815326\n13786493679\n13786628056\n13787488796\n13787965725\n13788307269\n13788458525\n13789801971\n13791205\n13791379\n13792445363\n13792468\n137924685\n137928C8\n13793156774\n13793161626\n13794062\n13794290387\n13794919137\n1.37954E+13\n13795464495\n13797493474\n13797586808\n13798021518\n13798460077\n13798583205\n1.37989E+11\n13799652066\n13799731\n13799858545\n137E6131\n137wf463\n13800000\n13800525\n13801380\n13801626\n13801641106\n13802396536\n13802902380\n13802937603\n13803028564\n13803440094\n13803490946\n13804240144\n13804994088\n13805009302\n13805167133\n13805303996\n13805316070\n1380540***\n13805598287\n13805721162\n13806860870\n13807146540\n13807500010\n13807501940\n13807570750\n13807594570\n13807633265\n13807679306\n13807684\n13808050249\n13808150568\n13808238574\n13808314453\n13808665\n13809508212\n13809550769\n13810017951\n13810107051\n13810752119\n13811056280\n13811111600\n13811655449\n13811675411\n13811686268\n13811937969\n13812314\n13812672377\n1381271167\n13812899399\n13813436174\n13813588172\n138138000\n13815795165\n13816371217\n13816544525\n13816575027\n13816678\n13816706081\n138168998\n13817057\n13817348586\n13817716919\n13817843266\n13817901387\n1381844357\n13818869465\n13818936500\n13821193420\n13821382\n13821515\n13821534685\n13821816858\n13822260216\n13822320566\n13822571897\n13823130677\n13823550409\n13823633995\n13824473299\n13824483133\n13824861270\n13825031180\n138255johnhoon\n13825698188\n13825878\n13826024177\n13826061500\n13826403231\n13826433725\n13826500705\n13826558365\n13826566165\n1382666187\n13827068952\n13827296393\n1382781628\n13828018138\n13828803300\n13829221658\n13831181987\n13831383\n13831835515\n13831916664\n13832191122\n13832839624\n13833537641\n13833870981\n13834505016\n13835116553\n13835158641\n13837378083\n13838141513\n13838378108\n13838381438@\n13838385438\n13841384\n13841852878\n13842739950\n13843030678\n13843210307\n13843388601\n1.38438E+12\n13843838438\n1384385238\n13844000859\n13844164256\n13844236777\n13844561266\n13845038496\n13845154423\n13845589188\n13847023995\n13848015\n13848706543\n13849116150\n13850853184\n13851091535\n13851399159\n13851457627\n13852046881\n13852154768\n13852423801\n13852470976\n13852615879\n1385282255\n13853193685\n13853194200\n13853211\n13853280619\n13853388110\n13853760969\n13854335\n13855150635\n13855679630\n13855991866\n13856254273\n13856594889\n13856691554\n13856905278\n13856943612\n13858287556\n13858314527\n13858339734\n13858633345\n13859923199\n13860188503\n13860889420s\n13861190244\n13861386\n13861434219\n138616888\n13861820813\n13861982\n138625839\n13863798197\n13863855320\n13864038838\n13864215661\n13864536725\n13865266587\n13865923942\n1386606666\n13866548718asmn\n1386670287\n13868138432\n13868271455\n13868400037\n138693233\n13869456112\n138694qq\n13869746303\n1386:;-?\n13870122508\n13870286706\n13870884899\n13870998\n13871016669\n13871136407sd\n13871150388\n13871387\n13871397\n13871860394\n13872521041\n13873152002\n13874514067\n13874923482\n13875097650\n13875244058\n13876005851\n13876012005\n13876054624\n13876056483\n13876072119\n13876075270\n13876089853\n13876129991\n13876131488\n13876177522\n13876240258\n1.38762E+11\n13876251281\n13876261500\n13876275718\n13876303516\n13876331433\n13876363394\n1.38766E+13\n13876637365\n13876704351\n13876785198\n13876808262\n13876820834\n13876870854\n13876908373\n13876934137\n13877114614\n13877162923\n13877396165\n13877898708\n13877920047\n13878255496\n13879398378\n13879428\n13879673527\n13879688\n13880101938\n13880333349\n13880648081\n13880752210\n13880771\n13881388\n13881544867\n13881958990\n13882116179\n13882332551\n138831000\n138831SSS\n13883275125a\n13883812308\n13886093813\n13886126362\n13886126600\n13888229257\n138884530\n13888759697\n13888836496\n13891389\n1.38914E+11\n13891652840\n13891929019\n13891992061=-\n13892937320\n13893496436\n13893786430\n1389410789\n13895214\n13896023118\n138963640\n13896402999\n13899luck\n138a33aa\n138d1d6d\n138E66bd\n138fsrttt\n13900000\n13901019769\n13901098899\n13901234567\n13901390\n13902191607\n13902359488\n13902763866\n13902837409www\n13903182559ty\n13903337375\n13903617709\n13903892818\n13904721111\n139048821\n13905159837\n13905218258\n13905735500\n13906580225\n13907177285\n13907551918\n13907554250\n13907556048\n13907623896\n13907773530\n13908329545\n13908598050\n13908725956\n13909206646\n13909213571\n13909218597\n13909261569\n13910025297\n13910230765\n13910388663\n13910659871\n13910874527\n13911222349\n13911538353\n13911768abcd\n13911896768\n13912150844\n13912183536wyh\n13912546717\n13912607636\n139130159\n13913016330\n1391314520\n139138137\n13913831405\n139139139w\n139139aaa\n13914746480\n13914883\n13915793\n13916297024\n13916421265\n13916495286\n13916670536\n13916777619\n13916862884\n139168qw\n13918009116\n13918022902\n13918459029\n13918613972\n13920278390\n13920744488\n13920798611\n13921814170\n13922727652\n13923433483\n13924367468\n13924750853\n13925069277\n13926219\n13926533395\n139268962\n1392818_ly\n13928214855\n1392830306\n13928362997\n13929011462\n13929392848\n13929676526\n13929865901\n13931991894\n139321321\n13932996539\n13933038382\n13933733784\n13934158426\n13934217002\n13935103849gf\n13936031861l\n1393656180\n13936688804\n1.39369E+11\n13937144010\n13937318070\n13938020471\n1393815042\n13938226733\n13939046255\n13939164692\n13939658003\n13940257582\n13940444412\n13941135707\n13941394\n13941813139\n13944490678\n1394514344\n13945635426\n139458qq\n13947436121\n13949755098\n13950052396\n13950220595\n13950789055\n13950841368\n13951235726\n13951395\n1395196583\n13952258270\n13952768224\n13952779393\n13953188\n1.39541E+11\n13954270575\n13954390905\n13954595555\n13955121678xxyy\n13955152558\n1.39557E+11\n13955987306\n13956100868\n13956121363\n13956337963\n13956449212\n13956518729\n13957199369\n13957446732\n13957490520\n13957642368\n13957685969\n13957792669\n13958726684\n13958783281\n13959325365\n13960085075\n13960300\n13960701695\n13960817911\n13960961862\n13961312771\n13961496129\n13961723352\n13961993118\n13962151339\n13962377212\n13963026134\n13963187668\n13963655593\n13963780053\n13965054405\n1.39663E+13\n13966399580\n1.39673E+12\n13967367686sly\n13967804\n13968203673\n13969895483\n13970759319\n13971001\n13971092474\n13971397\n13971517268WC\n13972061668\n13972230305\n1397229183\n13972650131\n13972684\n139726845\n13973121148\n13973180832\n13973720526\n13974268\n139742685\n1397429qaz4153\n13974426291\n13974430970\n13974440011lili\n13974483326\n13974506964\n13974776473\n13974812891\n13974993553\n13975050\n13975181080\n13975294866\n13975477544\n1397577066\n1397585222\n13976007487\n13976008418\n13976076675\n13976088868\n13976117876\n1.39761E+11\n13976271200\n13976276218\n13976333022\n13976341321\n13976518611\n13976614341\n13976624600\n13976648267\n13976689809\n13976761578\n13976777778\n13976863960\n13976895734\n13976988344\n13976999606\n13977128844\n13977738188\n13977865347\n13977931\n13978325495\n1397864166\n13979109625\n13979649737\n13979791085\n13980656152\n1.39808E+13\n13981054111\n13981217898\n13981315240\n13981398\n139827501\n13983853915\n13984221610\n13984466786\n13984818971\n13985410\n13985426856\n13985768705\n1398647245\n13986663232\n13987152520\n13987162123\n13987654321\n13988321993ty\n13988895111\n13989328154\n13990050664\n13991108871\n13991253169\n13991366999\n13991399\n13991808839\n139919788\n13992407\n13992407142\n13992882\n13994074833guo\n13994269363\n13995678560\n13995957150\n13996064884\n13996188824\n13996200418\n13996495352\n13997750043\n13998136191\n13998549161\n13998648878\n13999243977\n139o259o\n13A0063a\n13AC010c\n13AF0dd3\n13B2036d\n13bb20FD\n13be7105\n13C54d2a\n13cd660E\n13d03223\n13d27CD5\n13d529DA\n13df77A7\n13e4rw4e\n13f20377\n13jiayou\n14000247csy\n140009142\n14006dd6\n1.40103E+15\n14011401\n14021402\n14031403\n14041176\n14041404\n14051405\n140520025\n14052530\n14061406\n14071407\n14081408\n140904873\n140968722x\n14101410\n141025zw\n14111411\n1411219134\n14113811\n14115022\n1412111092\n14121412\n14123146\n14124697c\n14124753\n14124869\n14131413\n14139527\n141403127\n141411234\n1414141414\n14141414@\n14141732\n1.41421E+11\n14142121\n14142135\n141421356\n1414213562\n14142525\n1414718680\n14147474\n14151415\n14151617\n14159265358\n1.41593E+11\n1.41593E+12\n1.41593E+13\n1.41593E+14\n1.41593E+15\n141592654\n14159267\n1415926A\n14161416\n14171417\n1417414174\n14181418\n14182b56\n14191419\n14194836\n14201103\n14201420\n14211421\n14227545\n1423087495\n14231423\n1423370123\n14235635\n14235678\n14239984\n14241424\n14243444\n142503687\n14251425\n14251742\n14253600\n142536123\n14253614\n1.42536E+11\n14253678\n1425367890\n142536987\n14253er3\n14257758\n14259775\n142597758\n14261426\n1426235217\n142629111\n14271427\n1427261987\n14273376\n14281428\n142854631\n14285700\n14285714\n142857142\n1.42857E+11\n142857369\n14301430\n14304899\n14311431\n143143143\n14315736\n14321432\n1.43E+38\n14346252k\n14351435\n14361468\n14370000\n14371314\n14371437\n14381438\n14385762\n143978562\n143E7b8e\n14400686\n14401172\n1.44025E+11\n144090060\n144104xs\n14411441\n14420089\n14421424\n1443411818\n144701557\n144918a9\n144d0FA7\n14504190\n145145145\n14514840\n145201314\n14521452\n14522563\n145236789\n145236987\n1452454188\n14525418\n145254188\n1452721129\n14531453\n14534452\n1454534523\n14551521\n14553607\n14561456\n14562789\n14567136\n1456814568\n14571457\n14575210\n14581458\n14581594\n14593.8\n145B43fe\n145f0393\n146096595\n146146146\n14623f34\n14634dd1\n14644139\n14677366\n14681468\n14689074\n14691469\n14701470\n147052034\n147123123\n147123159\n14714700\n147159123\n14720159\n14721472\n147235689\n147258000\n14725811\n147258123\n147258147\n147258159\n147258258\n147258369-=0217\n147258369...\n14725836900z\n1472583695\n147258369@\n147258369aaa\n147258369ab\n147258369abcd\n147258369as\n147258369l\n147258369li\n147258369mm\n147258369o\n147258369ok\n147258369p\n147258369QWE\n147258369zxc\n14725839\n147258396\n1472586050\n14725896\n14725899\n147258aaa\n147258ab\n147258ABCD\n147258as\n147258cz\n147258ll\n147258lxying\n147258OK\n147258qaz\n147258qwe\n147258wx\n147258zaq\n147258zxc\n147258zz\n147260305\n14731473\n147369000\n147369123\n1.47369E+11\n147369258zxc\n147369456\n147369852\n147369991\n147369abc\n147369BHB\n147369hq\n147383081\n14741474\n147448107\n147456369\n1475201314\n147528369\n147536951\n147536982\n14759638523\n14760914\n147645209\n1476645832baisu\n147692855\n147714135\n14771477\n147741147\n1.47741E+11\n147762570\n147789951\n147789963\n1.4779E+11\n14781478\n14785200\n147852123\n147852147\n1.47852E+11\n14785236900\n147852369a\n147852456\n14785296\n147852aa\n147852pp\n1478563256ljx\n14789000\n1478914789\n1478963210\n1478963215\n1478963255\n147896325a\n14789632fp\n147896352\n1478963520\n14789652\n147896523\n14789aaa\n14791479\n147916455\n147951258\n14796300\n147963258\n147963456\n147a258b369c\n147abc258\n147qq147\n14801480\n148148148\n14835209\n14841484\n14871487\n1487499800\n14881488\n149149149\n14916253649\n1.49163E+14\n149162536l\n14921492\n1492bvst8173\n14932501\n149342968\n14941494\n1494444944\n149524296\n1495520he\n149597870\n149597892\n149656941\n14965722\n149772191\n149950494\n149975024\n149983966\n149A761d\n14B45caf\n14be16c0\n14c374BB\n14c8253E\n14cc0673\n14e5703F\n14F61f87\n14f730B3\n14ff0E3B\n15000202899\n15000338\n15000435\n15000818834\n15000959965\n15001500\n15001936\n15001969048\n15001975\n15006363\n15007131370\n15008968710\n15008986992\n150091499\n15010022698\n15011425872\n15011435568\n15011501\n1.50137E+13\n150150150\n15020686439\n15021502\n15023614302\n15024269700\n15024588813\n15027668495\n15029615531\n1502gold\n15031503\n1503196cs\n15032569\n15032633882\n15033850428\n15037040281\n1503759690\n150392515\n15042937210\n15046273\n15050232601\n15051505\n15052612\n15053b85\n15055636075\n15056029\n15061506\n15064010350\n15067808571\n15071507\n150727639\n15073666810\n15074403185\n150808040\n15080818\n15080840528\n15081508\n15083105649\n150860415\n15091509\n15091915122\n15092792868\n1510071516\n15101051\n15101510\n151016756\n15101979\n15103043060\n15103045564\n15104569534\n15108900522\n15111511\n15121512\n15121979\n15124029999\n151242682\n1512693200\n15130862389\n15131513\n15132283485\n15135108334\n151354128\n15137034\n15138307125\n1514001200\n15141514\n15144792\n15148283\n15149367\n15150152115\n151513817\n1515151515\n151515aa\n15151608h\n15152615\n15152626\n15152828\n15153206321\n151561614\n15156431160\n15156877981\n15158155839\n15161278\n15161300\n15161516\n15161718\n1516171819\n15162626\n15164139666\n151692624\n15171517\n15171880589\n151731912\n15174400680\n15177779808\n15179102529\n15180037333\n15181518\n15181995490LJ\n151860513\n151880904\n1518youth\n15191519\n15196670779\n15196675168\n1.51984E+11\n15201314\n15201520\n15206513\n15209807\n15211314\n15211521\n15213595041\n152152152\n15215258\n15215521126\n15221337814\n15221522\n15225213021\n15230000\n15231523\n1.52326E+11\n152370705\n15237714\n15241524\n15243000\n15244186689\n1524681476\n15251525\n15252006\n15252515\n15253545\n1525354555\n152535lg\n15257311\n15261526\n15263748\n152662837\n15267102\n15271527\n15272252\n15277769957\n1528000000\n15281528\n15288794703\n152923926\n15293310117\n152962AB\n152a578C\n152B07ca\n15301530\n15305149866\n15308911285\n15311531\n15311dai\n1531531432\n153153153\n15321532\n153246789\n1532552387\n15331533\n15332321\n15341101\n15341534\n15341791\n153453221\n1534930bb\n15351535\n15357595\n153582170\n15361473\n15361536\n1.53624E+11\n153627598\n153718734\n15378284\n153810380\n15381538\n153844091\n153851349\n15392087\n153953845\n153964121\n15400704\n15408210\n154115408\n154154154\n154186298\n15421542\n15430102\n15431543\n15431790\n154335802\n154350778\n15471547\n15481548\n154816185\n15487963\n1549362@126.com\n15494pzh\n1549847412\n154994688\n154sonnet18\n15501550\n1551031525\n1.55E+14\n15511551\n155157722\n15517020503\n155170280\n155237953\n155255355\n15531553\n155365124\n15538915089\n155426526@126.co\n155492647\n15552670\n1555499901\n15561556\n15571000\n155723930\n1557239300\n15580917609\n15581558\n156011999\n156036715\n15613167\n156156156\n156156651\n15621562\n156256484\n15625749\n156282048\n15628363\n15631563\n15631948\n15632051\n15641564\n1564335521\n15643358\n156457034\n15649335\n156499019\n15661566\n156688cs\n15671567\n1567845058\n15681568\n15687349\n156895486@qq.com\n15691569\n15691569@126.com\n157036186\n157073251\n15711n54\n157157157\n1.57195E+11\n15723368\n157243895\n157248369\n15729306\n15731314\n15731573\n157411783\n1.57E+79\n157486149\n15759165\n1575916500\n15778990\n15781578\n1578288877\n157846693\n15785886\n1579828663\n15801211518\n15801378\n15801580\n158016604qq\n15803989779\n15807137311\n158079445\n15808906078\n15811068136\n15811069876\n1581153310\n15811875325\n15813f46\n15814748715\n15814785600\n15815488885\n158158178\n158158888\n15816005605\n15816127225\n15818545131\n15823273273\n15824842665\n15824852101\n15827170166\n15829733903\n15830625105\n15830625105wy\n15831182976\n15831359927a\n15831583\n15831969060\n15833110629\n15837232004\n15838762860\n15839135001\n15840154661\n15845032032\n15845230048\n15846125983\n15846659525\n15851585\n15855124719\n15855796344\n1585702729\n15857153296\n158571abc\n15858288663\n158594204\n1585981698\n15863021598\n15866626689\n15866691300\n15866897882\n15867227019\n15870515107\n15871587\n15871718415\n15871806563\n15873125592\n15873828549\n15873887383\n15874105312\n15874165551\n15878541\n15879061829\n1587915213\n15881588\n15884871083\n158857993\n15887056368\n15887227870\n15887450\n15888888\n15889373\n15889533\n15890940173\n15891589\n15893006427\n1589365ABCD\n15895200068\n15897569132\n15898545\n15898768125\n158E1dcc\n158E6663\n15900512254\n15900873186\n15901029643\n15901164539\n15901590\n15901970078\n15902812080\n15903287071\n15903650675\n159037620\n15905017515\n15905546766\n15911025512\n15913540530\n15913580382\n159147123\n15915915\n1.59159E+11\n159159357\n159159lili\n15916187477\n15918769073\n159191122\n15921850206\n15922660104\n1592356983\n159236478\n1592583574\n1.59258E+11\n15925855167\n1.59263E+11\n159263748\n15926410288\n15926535\n159265358\n1592653589\n15927229322\n15927236135wlx\n15927611122\n15927611133\n15927688717\n15927887226\n15930000\n15930106057\n15932647264\n15932881908\n15933538472\n159357...\n159357000\n1593570000\n15935711\n15935712\n1593571230\n159357147\n15935722\n15935725\n1593572684\n15935728\n1593572846\n15935741\n1593574268\n1593574560\n15935746\n1593574628\n159357486\n1593574862\n15935748620\n159357520\n15935755\n159357555\n159357789\n15935782\n1593578246\n1593578426\n159357852\n1.59358E+11\n1593578624\n15935788\n159357888\n15935789\n159357aa\n159357aaa\n159357ab\n159357abc\n159357asd\n159357asdf\n159357Mm\n159357qaz\n159357qq\n159357qwe\n159357XX\n159369***nan\n159369123\n159369147\n159369848\n15938700087\n15942394661jj\n15943637\n159438193\n159442033\n15945382\n159482673\n1594872630\n15950072708\n15950135545\n15950711827\n1595135753\n15952120\n15952303254\n15952955000\n15953654336\n15954202\n15954854911\n15959445603\n15960282805\n15960339\n15960561024\n15961596\n1596315963\n15963200\n15963200160\n15963210\n159632100\n15963214\n159632147\n1596321478\n15963214789\n159632159\n1.59632E+11\n159632cc\n159635741\n1596378opk\n15964232320\n15965988\n15966011997\n15966331529\n15967697798\n159679332\n15968031787\n15969667761\n15970422518\n15970441956\n15970509360t\n15971140001\n15971597\n15972006021l\n15972514020\n1.59729E+11\n159729asd\n15973206485\n159753..\n159753000\n1597530000\n15975311\n15975312\n15975321\n15975322\n1597532468\n1597532486\n1597532684\n15975328\n1597532846\n159753369\n15975346\n1597534628\n1597534862\n159753521\n15975355\n159753555\n1.59754E+11\n159753654\n15975366\n1597536842\n15975369\n159753789\n15975382\n1597538246\n1597538426\n15975388\n159753888\n159753963\n159753abc\n159753abcd\n159753as\n159753asd\n159753qaz\n159753qq\n159753qwe\n159753xa\n15975580188\n15977360864\n1597752500\n159782364\n1597836zxc\n15978779080\n15979124774\n15981598\n15982827049\n159852753\n15986975646\n15987138134lxj87\n15987410\n159874123\n1598741236\n159874236\n15987456\n159874632\n15987532\n1598753210\n159875369\n15989lo999o\n15990194012\n15991599\n15991946\n15992217717\n15993577\n15993768201\n15995100\n159951123\n1.59951E+11\n15995123\n159951357\n159951AA\n159963321\n15996944338\n159D45a3\n159d7d0c\n15a567CE\n15ba1FEA\n15C42085\n15CA7fe3\n15d27f0b\n15DC4e3b\n15DD674d\n15f33dd0\n16001600\n16011601\n1601259E\n16021602\n160284415\n16031603\n16041604\n160429171\n16051605\n160526dhc\n16053911\n16061606\n160743369\n16075811\n16081337\n16081608\n16085276\n16088160\n16099028\n160B111a\n16101610\n16101984\n1.61027E+11\n16111611\n16116155\n16121612\n16131613\n161337716\n16133888\n16143667\n161505dd\n16151615\n161563884\n1616161616\n16161617\n161616ab\n1616asdfasdf\n16171207\n16171617\n16171819\n16173073\n16180000\n16181618\n16182425\n16183640\n16189824\n16191619\n16193572\n16194371\n16197796\n16201620\n162034415\n16211621\n16213148\n1.62148E+11\n16221622\n16225421\n16230813\n16231623\n1624100763\n16241624\n16251625\n16252125\n162533hyy\n162534789\n16253649\n16253721\n1626116261\n16261626\n16262105\n16263646\n1626364656\n1.62636E+11\n16266565\n16273849\n1627384950\n16281628\n16281977\n1.6285E+11\n16294411\n1630016300\n16301630\n16306xzh\n16311631\n1.63163E+11\n163168169\n163169118\n16321210\n16321632\n163258789\n16331633\n16341634\n16342000\n1634736d\n16361636\n16364259\n16364361\n16366494\n163715914\n16381638\n16384567\n16388828\n163dhcom\n163xiaozhen\n164003532\n16410129\n1641159084\n16420373\n16421225\n16441644\n16441911\n16441912q\n16441949\n164431684\n164442697\n164639828\n16470022\n1.64717E+13\n16491649\n165084959\n165165165\n165201314\n16540504\n16541977\n1654916549\n1655311387\n165558131\n16561656\n165653975\n165654943\n165694135\n16571657\n16581658\n16588223\n16591659\n1659324780\n16594870\n165e6035\n16611661\n16611722\n166166166\n166168169\n16616f8c\n16621662\n16628491\n166520520\n166577955zi\n16661666\n16666666\n16666668\n16671061\n16677266\n16678852\n16681668\n166820comwww\n16694000\n166987122\n1670008757\n167167167\n167168169\n167231864\n167349258\n16745382\n167455413\n16751675\n16763025\n167731329\n16777216\n16781678\n167852349\n16786115\n16786727\n1678764C\n16791679\n16800000\n16800168\n16801680\n1680473822\n16811681\n16812345\n168123456\n1.68168E+11\n1681681688\n16816816888\n16816818\n168168520\n168168888\n16816899\n168168abc\n168169168\n16821590\n16825751\n16827301\n16831683\n16833168\n16837502\n16840315\n1.68421E+11\n168469367\n16851685\n16851800\n16851888\n168563798\n16856789\n16857502\n16858137\n1.68612E+12\n16861686\n16866168\n168668413\n16866861\n16866966\n16870908\n16871687\n1687516875\n16878168\n16880000\n16881234\n1.68813E+11\n16881699\n16881818\n16883007\n168830b2\n168831107\n1688363008\n16885298\n16885678\n16885885\n168861168\n1.68861E+11\n16886188\n16887188\n16887799\n16888168\n1688816888\n16888388\n168888168\n16888960\n16889122\n16889188\n16889688\n1688lish\n16890000\n1689010783\n16890999\n16891689\n168918918\n16893333\n168935484\n16894168\n16895678\n16896168\n16896366\n16896789\n16896866\n16896888\n16896968\n16897118\n168971680\n168971683\n16897456\n1689765216\n16897720\n16897723\n16897728\n16897766\n16897788\n16897799\n16897800\n16897801\n16897806\n16897866\n16897888\n16898000\n16898098\n16898123\n16898168\n1689816898\n16898290\n16898698\n16898755\n16898758\n16898888\n16899006\n16899123\n16899161\n16899166\n16899188\n16899263\n16899333\n16899520\n1.68998E+11\n16899861\n16899863\n16899888\n168999168\n16899946\n16899999\n168ab168\n169169169\n16918220\n16919206\n16937691\n1695182770\n16961696\n16971697\n16981698\n1698890818\n16990431\n16991699\n16A44cd8\n16AE16b3\n16b154E4\n16B374ae\n16bf780e\n16d47CB3\n16D66121\n16DD4dba\n16e940a6\n16f75f35\n16fb7543\n16qqqqqq\n16shmily\n16weiyinei\n17003209\n170080lq\n17011701\n170202719\n17021702\n17031703\n17031977\n170321064\n170497193\n17051705\n17063283\n17066207\n17073407\n17081708\n17082758\n1709020855\n17091709\n17096639\n17098892\n171026ling\n171105wqt\n17110977\n17111711\n17124100\n171461225\n17146278\n17146302\n171509906\n17151715\n171565hz\n17161716\n171646167\n171664305\n1717171717\n17171818\n1717317173\n1717840519\n1.71788E+11\n1717tw888\n17180312\n171815171\n17181718\n17181910\n17191719\n17196165\n171a6D48\n17201720\n1720197642\n172105455\n17211314\n172231898\n172235169\n17231723\n17234876\n17241724\n172425830\n172501310\n17251725\n172597366\n17261726\n17262081\n17262210\n17263544\n172685368\n17273747\n17281728\n17283447\n17283649\n17283940\n17283946\n172839465\n172843451\n17284567\n172861153\n17291729\n172978336\n173021968\n17302222\n1731314520\n173168439\n17317071\n173173173\n17320508\n1732050808\n17321414\n17321732\n17323157\n173535040\n173557CD\n173623760\n17381ff0\n1.73871E+11\n173907488\n173c68CC\n174163374\n174201yang\n174345186\n17436951\n17443416\n17453144\n17455741\n174589155\n174605679\n174625987\n174642622\n1746730377\n174675160\n174729981\n17481748\n17485821\n174d4B8A\n174f18CD\n17501750\n175082250\n175093859\n175175175\n175201314\n1752017520\n17520930\n175211314\n17522430\n1757395807\n175749707\n175765777\n175816889\n175854519\n17586249\n1759125184\n17596030\n175D74c3\n176012726\n176013520\n176086320\n17616111\n176176176\n176302109\n17635065\n176411235\n17654321\n1766641046\n176752678\n176769404\n17681225\n17681768\n1768347cgy\n17685130\n1.76864E+13\n1768abc1984\n17690815\n17691821\n176D44f2\n1770091572lyj\n17701827\n177078445\n17709394\n17711771\n177177177\n17758521\n17760704\n17761776\n17777777\n17782470\n177827941\n17785858\n17791779\n177a5254\n177F25a4\n17801780\n1781001368\n178100170\n1781217812\n178178178\n17817867\n17821106\n17830618\n17831332\n17831783\n1783666400\n178468613\n178518mm\n17852945\n178598734\n178599274\n178642933\n178663828\n17889393\n17890714\n17891789\n178964541\n1789677719\n17897877\n17904324\n1790817908\n17908201\n179087188\n17909123\n1790917909\n17909520\n1791017910\n17911791\n1791791179\n179179179\n17917979\n17917988pp//\n17931793\n17932486\n179324865\n179348625\n1793nian\n179419ffy\n17951123\n1795117909\n1795117951\n17951kkkbcld\n17951soft\n17951win\n17960000\n17962438\n179647381\n17969420\n1797627501\n17977923\n17981798\n179876868\n17991799\n17AF1631\n17BF2ef6\n17D42e46\n17D95ec9\n17dc3c0b\n17df690F\n17f10bd6\n17stknsLDy\n17stkntLDy\n17suideyu9\n17ttknsLDy\n17ttlmsKCx\n17ttlmsKDx\n17ttlmsLDx\n17ttlnsLDy\n17ucom#@\n17ucom0412\n17ucom0414\n17ucom0419\n17ucom123\n17ucom17ucom\n17ucom17unet\n17ucoming\n17ugocom\n17utlmsKCx\n17utmmrKCx\n180004d1\n18001800\n18003703\n18008416\n1801006538\n18011801\n18013202\n180133443\n180180180\n18021802\n180218leeyaya\n18023202\n18023206\n18023906\n180303137\n18030720\n18031803\n1.8032E+11\n18035926\n18041804\n180429507\n1804918049\n18051805\n180528xy\n18059215\n18060180\n18061806\n180656677fjkl\n18071807\n1807310410\n180754414\n18081808\n18091008\n18091809\n18092029\n180jerry\n181005449\n18101982\n18104112\n1810jqka\n181112.fb\n18111811\n18117662\n18121812\n18131475\n181333195\n1.81418E+11\n18144105\n18150976\n18151815\n181531052@126.co\n18161816\n1816281750\n18171817\n181729102\n18180505\n18181616\n18181883\n18181888\n18182001\n18189898\n18191819\n18192003\n18192021\n18195ed3\n18201820\n18202282765\n182182182\n18221002\n18221822\n182228111\n182304308\n18231823\n182364745\n18236515\n18241826\n182418476\n182433cgq\n18251825\n18252138\n18255821\n18261826\n182736999\n182764125\n18281132\n18281828\n1.82838E+11\n1828404127\n182862675\n182901lj\n18291829\n182930OO\n18301830\n183018945\n183075535\n183140828\n183165355\n183182hxy\n183183183\n1831fanzhi\n183216qwe\n183262051\n18327402\n18349276\n183492761\n18352120\n18355662\n183599172\n18361836\n183694823\n18371837\n183729456\n183839311\n18390603\n18391839\n18400198\n18401840\n18401842\n18401949\n18404405\n184063200\n18411949\n184158954\n18416103\n184184184\n18420708\n18421868\n184251314\n184263614\n18431843\n18436572\n184428277\n18446744\n1845167519\n1845218452\n184525232\n1845258825\n18454069\n18476625\n1.84782E+11\n18481848\n18481f21\n1849022d\n18490620\n184e4716\n184e709C\n18501850\n18506666\n18515702\n185185185\n185294489\n18531853\n185361445\n18539469\n18561856\n185717423\n1858018580\n185810abc\n18581858\n18583499688\n18583556\n185909880\n18591859\n18600714\n18601860\n1.86019E+11\n18601861\n18610251\n18610404kxkx\n18611860\n18611861\n18617717\n186233939\n186353a0\n18647647\n186500518\n18651865\n18662000\n18669911\n18680530\n18681868\n18721872\n187227687\n18731144\n18738673\n187399323\n18741226\n187415157\n18741874\n18741943\n18746139\n18750ebf\n187521pi\n18755171086\n18759627\n18781878\n18789916\n18790314\n18790825\n18791955\n18800730\n18801880\n1880199784\n188037382\n1880902080\n18810925\n18811223\n18811881\n18811936\n188135wjssjw\n1881721wbc\n188202929\n18820828\n18821882\n18830314\n18830521\n18831844\n18831924\n188361520\n18841884\n18860593\n188676154\n18871031\n1887418187\n18890420\n18891889\n18891945\n18899174\n188997733\n188D0cf1\n18901127\n18901890\n18907596903\n1890a420\n1.89105E+11\n18911891\n18915402\n189182806\n18919160\n18921009001\n189228dql\n18925913\n18931225\n18931226\n18931893\n18931976\n18931982\n189361627\n18941451\n18941894\n18943316\n18965000\n18972036\n189800321\n18980305\n18981898\n18981976\n189911819\n18991216\n18991218\n18991899\n18A25a2c\n18a611db\n18a70167\n18AE1103\n18cb02fa\n18d10D40\n18d25F1F\n18e00B91\n18F80f18\n19000000\n19000101\n1900121299\n19001267\n19001800\n19001900\n19002000\n19006212\n19007011\n190089532\n190091353\n19011901\n19011979\n19015019\n190190190\n190201605\n1.90205E+13\n190231520\n19025qaz\n19031903\n19041904\n19041997fw\n190420831\n19042139\n1904621981\n19051905\n19061906\n190624214\n190633388\n190655824\n1906751109\n190677319\n190713866\n19071907\n1907319073\n190790106\n190800720\n19080309\n19081908\n1908218731\n19088832\n190916846\n19091909\n19094094\n19098045\n19101910\n19106390\n19110416\n19111010\n191110169\n19111111\n19111911\n191121225\n191121331\n1911242424\n191149531\n191171656\n191191191\n19121912\n19123456\n191254940\n19131105\n19131107\n19132176\n191332739\n191334519\n191340547\n1913489437\n19141523\n19141575\n1914686663\n191479028\n191511699\n19151915\n191539157\n19161916\n191677162\n1916alcf\n19171107\n19171917\n19175ad2\n191764911\n191786892\n191797741\n19179851\n19181012\n1918106932\n19181716\n19181918\n19190504\n19191010\n191913787\n1919191919\n19191919a\n19192001\n191920682\n191921177\n19195454\n1919780D\n19197985\n1919831210\n191987331\n19199191\n192.168.1.2wzdd\n19201314\n19201920\n192029wly\n192083148\n19210315\n19210701\n19210723\n19211921\n19211977\n19215202\n1921681100\n1921682826\n192168real\n192192192\n1921ysnsh\n1922842735\n19230913\n19231923\n1923726271\n1924875fbu\n1925013406\n1925016892\n19250523\n19251925\n19253034\n1925305570\n1925727956\n19261931\n19262120\n19270801\n19271927\n1928033388\n19281928\n1.92837E+11\n192837456\n1928374650\n192837645\n19285756\n19291929\n19293949\n19301930\n19310918\n193178477\n193193193\n19321932\n19330923\n19331933\n19331945\n19341808\n19341912\n19341934\n19341969\n19342211\n19342341\n19342566\n19342638\n19343018\n19343204\n19343258\n19343333\n19343354\n19343587\n19343784\n19343931\n19344616\n19344636\n19347456\n19351935\n1935bobobi10\n19361003abc\n19361019\n19361212\n19361936\n19370707\n19371213\n19371937\n19371945\n193728456\n19372846\n193728465\n1937284650\n19374628\n193746285\n19374628a\n193746825\n19380618\n19380704abc\n19381114\n19381938\n19390808\n19390901\n19391212\n19391945\n19392453\n1.94E+11\n193e1806\n19401127\n19401940\n19410518411\n19410622\n194107088\n19410802\n19411207\n194130920\n19414603\n194194194\n19421942\n19430825\n19431028\n19431943\n19433313\n19436100\n1943gaolitu\n19440606\n19440901\n19441216\n19442901\n19447721\n19450430\n19450815\n19450902\n19450915\n19451208\n19451215007\n19451945\n19461025\n19461205\n19461224\n19461946\n19470714\n19470803\n19471126\n19471209\n19471221\n19471947\n19480229\n19481010\n19481221\n19481948\n19484568\n19490101\n19490115\n19490219\n19490326\n19490429\n19490521\n19490601\n19490717\n19490729\n19490801\n19490815\n19490909\n19490916\n19490928\n19491001a\n19491001china\n19491010\n19491011\n19491013\n19491015\n1949101zx\n19491022\n19491024\n19491111\n19491115\n19491116\n19491127\n19491212\n19491215\n19491217\n19491223\n19491224\n19491225\n19491226\n19491227\n19491949\n19491950\n19491951\n19491977\n19491978\n19491979\n19491981\n19491982\n19491983\n19491986\n19491999\n19492002\n19492008\n19492009\n19492049\n1949445625\n1.94971E+13\n19499454\n1949china\n19500101\n19501025\n19501111\n19501115\n19501117\n19501126\n1950120854\n19501218\n19501950\n19501951\n19510613\n19510913\n19511220\n19511226\n19511591\n19511951\n19517302\n19520101\n19520303\n19520309\n19520415\n19520428\n19520502\n19520612\n19520815\n19520817\n19520820\n19520823\n19520901\n19521007\n19521014\n19521023\n19521124\n19521125\n19521127\n19521205\n19521226\n19521952\n19521953\n195254691\n195254tangguo\n195286363\n19530202\n19530219\n19530228\n19530303\n19530427\n19530607\n19530627\n19530829\n19531010\n19531027\n19531106\n19531120\n19531121\n19531127\n19531129\n19531130\n19531201\n19531228\n19531229\n19531953\n195327-195327\n195349976\n195354cj\n19540101\n19540115\n19540128\n19540321\n19540329\n19540406\n19540412\n19540428\n19540501\n19540503\n19540504\n19540507\n19540521\n19540618\n19540624\n19540626\n19540701\n19540709\n19540719\n19540808\n19540816\n19540826\n19540909\n19540911\n19540917\n19540924\n19540929\n19541002\n19541010\n19541013\n19541014\n19541015\n19541018\n19541020\n19541024\n19541030\n19541031\n19541102\n19541103\n19541105\n19541106\n19541110\n19541111\n19541115\n19541116\n19541118\n19541121\n19541127\n19541128\n19541129\n19541207\n19541208\n19541212\n19541215\n19541216\n19541220\n19541222\n19541223\n19541224\n19541225\n19541226\n19541954\n19541955\n19541981\n19541983\n1954321OK\n195450db\n1954591491\n19550120\n19550224\n19550303\n19550308\n19550309\n19550313\n19550318\n19550324\n19550426\n19550505\n19550518\n19550614\n19550701\n19550705\n19550724\n19550772\n19550801\n19550804\n19550812\n19550813\n19550815\n19550824\n19550901\n19550904\n19550905\n19550906\n19550909\n19550923\n19550928\n19551001\n19551002\n19551008\n19551010\n19551016\n19551017\n19551018\n19551020\n19551021\n19551024\n19551025\n19551026\n19551027\n19551028\n19551029\n19551102\n19551109\n19551111\n19551123\n19551128\n19551206\n19551210\n19551211\n19551213\n19551220\n19551221\n19551225\n19551226\n19551227\n19551229\n19551230\n19551231\n19551953\n19551955\n19551956\n19551957\n19551959\n19553203\n1956#1986\n19560101\n19560106\n19560118\n19560128\n19560129\n19560201\n19560215\n19560229\n19560307\n19560309\n19560311\n19560401\n19560404\n19560405\n19560413\n19560420\n19560501\n19560503\n19560506\n19560511\n19560522\n19560526\n19560606\n19560615\n19560629\n19560801\n19560810\n19560815\n19560825\n19560909\n19560912\n19560916\n19560924\n19560926\n19561001\n19561003\n19561006\n19561008\n19561010\n19561013\n19561015\n19561019\n19561022\n19561023\n19561026\n19561105\n19561108\n19561111\n19561113\n19561114\n19561115\n19561118\n19561119\n19561120\n19561121\n19561125\n19561126\n19561127\n19561201\n19561204\n19561211\n19561212\n19561219\n19561223\n19561224\n19561225\n19561226\n19561227\n19561228\n19561229\n19561230\n19561956\n19561957\n19561958\n19561981214\n19561983\n19561985\n19562003\n19562012\n19563478\n1.95641E+11\n1.95659E+11\n195661155\n19569824\n19570101\n19570206\n19570214\n19570305\n19570311\n19570314\n19570316\n19570321\n19570420\n19570507\n19570606\n19570607\n19570608\n19570610\n195706yu\n19570708\n19570801\n19570805\n19570807\n19570808\n19570813\n19570816\n19570824\n19570826\n19570901\n19570902\n19570903\n19570904\n19570908\n19570909\n19570913\n19571001\n19571013\n19571015\n19571016\n19571017\n19571019\n19571020\n19571022\n19571023\n19571027\n19571028\n19571030\n19571101\n19571102\n19571111\n19571114\n19571118\n19571120\n19571122\n19571123\n19571128\n19571129\n19571201\n19571203\n19571206\n19571208\n19571212\n19571213\n19571214\n19571216\n19571219\n19571220\n19571221\n19571222\n19571223\n19571224\n19571225\n19571228\n19571957\n19571958\n19571960\n19571982\n195732205\n19573311\n19575363\n19578184\n19578582\n19580101\n19580106\n19580123\n19580204\n19580218\n19580224\n19580308\n19580310\n19580311\n19580321\n19580331\n19580421\n19580501\n19580502\n19580508\n19580512\n19580514\n19580523\n19580609\n19580612\n19580618\n19580621\n19580623\n19580625\n19580628\n19580706\n19580711\n19580715\n19580808\n19580815\n19580816\n19580825\n19580828\n19580829\n19580829love\n19580901\n19580907\n19580909\n19580911\n19580919\n19580923\n19580926\n19580927\n19580928\n19581001\n19581010\n19581012\n19581013\n19581016\n19581020\n19581021\n19581024\n19581027\n19581028\n19581029\n19581102\n19581114\n19581116\n19581117\n19581120\n19581123\n19581124\n19581125\n19581128\n19581202\n19581203\n19581207\n19581212\n19581219\n19581220\n19581223\n19581224\n19581228\n19581231\n19581958\n19581962\n19581985\n19581987\n195852303\n195859abc\n195885bama\n1958mjmj\n19590102\n19590211\n19590310\n19590505\n19590530\n19590703\n19590711\n19590805\n19590823\n19590915\n19591001\n19591005\n19591010\n19591011\n19591014\n19591015\n19591023\n19591030\n19591102\n19591111\n19591112\n19591113\n19591115\n19591116\n19591118\n19591120\n19591123\n19591126\n19591127\n19591129\n19591201\n19591202\n19591209\n19591216\n19591218\n19591223\n19591224\n19591225\n19591226\n19591228\n19591230\n19591959\n19591960\n19594c85\n1959628489\n195994617\n195997056\n19600108\n19600214\n19600308\n19600310\n19600313\n19600401\n19600421\n19600609\n19600611\n19600616\n19600909\n19600930\n19601001\n19601008\n19601010\n19601016\n19601020\n19601023\n19601030\n19601103\n19601111\n19601112\n19601120\n19601212\n19601218\n19601220\n19601221\n19601222\n19601224\n19601225\n19601226\n19601960\n19602017\n1960991986\n19610101\n19610128\n19610202\n19610411\n19610416\n19610703\n19610707\n19610710\n19610810\n19610813\n19610922\n19610927\n1.96109E+11\n19611015\n19611021\n19611023\n19611030\n19611111\n19611114\n19611120\n19611122\n19611127\n19611209\n19611214\n19611215\n19611224\n19611225\n19611229\n19611231\n1961195718\n19611961\n196196196\n196196ww\n19620107\n19620108\n19620113\n19620121\n19620125\n19620127\n19620201\n19620208\n19620217\n19620218\n19620409\n19620410\n1.96204E+15\n19620501\n19620502\n19620506\n19620511\n19620520\n19620530\n19620606\n19620608\n19620610\n19620611\n19620616\n19620617\n19620620\n19620622\n19620626\n19620627\n19620701\n19620708\n19620710\n19620712\n19620714\n19620717\n19620726\n19620729\n19620730\n19620801\n19620804\n19620805\n19620808\n19620810\n19620811\n19620815\n19620822\n19620824\n19620826\n19620828\n19620901\n19620902\n19620903\n19620907\n19620909\n19620912\n19620913\n19620914\n19620920\n19620923\n19620925\n19620927\n19620928\n19620929\n19620930\n19621001\n19621004\n19621006\n19621008\n19621009\n19621010\n19621012\n19621013\n19621014\n19621015\n19621016\n19621017\n19621018\n19621019\n19621020\n19621021\n19621022\n19621023\n19621024\n19621025\n19621026\n19621027\n19621028\n19621029\n19621030\n19621031\n19621101\n19621102\n19621104\n19621105\n19621106\n19621108\n19621109\n19621111\n19621112\n19621113\n19621114\n19621115\n19621116\n19621117\n19621118\n19621119\n19621120\n19621121\n19621122\n19621124\n19621125\n19621126\n19621128\n19621129\n19621130\n19621201\n19621203\n19621204\n19621207\n19621208\n19621210\n19621211\n19621212\n19621213\n19621214\n19621215\n19621216\n19621217\n19621218\n19621219\n19621220\n19621221\n19621223\n19621224\n19621225\n19621226\n19621227\n19621228\n19621229\n19621230\n19621231\n19621962\n1962197466\n19621985\n19621993\n196226dj\n1962616416\n1962620519\n196269686\n1962906521\n19630101\n19630101931\n19630102\n19630105\n19630106\n19630108\n19630109\n19630110\n19630112\n19630116\n19630118\n19630120\n19630121\n19630123\n19630124\n19630125\n19630128\n19630129\n19630202\n19630203\n19630204\n19630205\n19630207\n19630210\n19630211\n19630212\n19630213\n19630214\n19630215\n19630216\n19630217\n19630218\n1.96302E+15\n19630220\n19630222\n19630224\n19630225\n19630226\n19630228\n19630302\n19630303\n19630306\n19630307\n19630308\n19630309\n19630310\n19630315\n19630316\n19630317\n19630320\n19630321\n19630323\n19630324\n19630325\n19630326\n19630329\n19630401\n19630403\n19630404\n19630406\n19630407\n19630408\n19630409\n19630410\n19630411\n19630412\n19630414\n19630415\n19630416\n19630417\n19630418\n19630420\n19630421\n19630423\n19630424\n19630425\n19630429\n19630501\n19630503\n19630504\n19630506\n19630508\n19630511\n19630512\n19630513\n19630515\n19630516\n19630517\n19630519\n19630520\n19630521\n19630523\n19630525\n19630528\n19630530\n19630601\n19630603\n19630604\n19630605\n19630606\n19630608\n19630609\n19630610\n19630611\n19630614\n19630616\n19630617\n19630619\n19630620\n19630622\n19630624\n19630625\n19630626\n19630627\n19630628\n19630629\n19630630\n19630701\n19630706\n19630707\n19630710\n19630711\n19630713\n19630714\n19630715\n19630716\n19630718\n19630724\n19630725\n19630728\n19630729\n19630801\n19630802\n19630804\n19630805\n19630806\n19630809\n19630810\n19630815\n19630816\n19630818\n19630822\n19630823\n19630825\n19630826\n19630827\n19630828\n19630831\n19630901\n19630902\n19630905\n19630906\n19630907\n19630908\n19630909\n19630910\n19630911\n19630912\n19630913\n19630914\n19630915\n19630917\n19630918\n19630920\n19630922\n19630923\n19630924\n19630925\n19630926\n19630927\n19630929\n19631001\n19631002\n19631003\n19631004\n19631005\n19631006\n19631007\n19631008\n19631009\n19631010\n19631011\n19631012\n19631013\n19631014\n19631015\n19631016\n19631017\n19631017wyy\n19631018\n19631019\n19631020\n19631021\n19631022\n19631023\n19631024\n19631025\n19631026\n19631027\n19631028\n19631029\n19631030\n19631101\n19631102\n19631103\n19631104\n19631105\n19631106\n19631107\n19631108\n19631109\n19631110\n19631111\n19631112\n19631113\n19631114\n19631115\n19631117\n19631118\n19631119\n19631120\n19631121\n19631122\n19631123\n19631124\n19631125\n19631127\n19631128\n19631129\n19631130\n19631201\n19631202\n19631203\n19631204\n19631205\n19631206\n19631207\n19631208\n19631209\n19631210\n19631212\n19631213\n19631214\n19631215\n19631218\n19631218aa\n19631219\n19631221\n19631223\n19631224\n19631225\n19631226\n19631227\n19631227562\n19631228\n19631229\n19631230\n19631231\n19631963\n19632003\n19632118\n1.96362E+11\n196383gg\n1963jun17\n1963nian119\n19640000\n19640000xqq\n19640101\n19640102\n19640103\n19640104\n19640108\n19640109\n19640112\n19640116\n19640118\n19640119\n19640120\n19640122\n19640123\n19640124\n19640130\n19640202\n19640203\n19640204\n19640206\n19640207\n19640208\n19640209\n19640210\n19640211\n19640212\n19640213\n19640214\n19640215\n19640216\n19640217\n19640218\n19640219\n19640301\n19640304\n19640305\n19640307\n19640310\n19640312\n19640313\n19640314\n19640315\n19640316\n19640317\n19640318\n19640320\n19640322\n19640323\n19640324\n19640325\n19640326\n19640328\n19640401\n19640402\n19640404\n19640412\n19640414\n19640415\n19640420\n19640422\n19640423\n19640424\n19640501\n19640502\n19640503\n19640504\n19640505\n19640506\n19640507\n19640510\n19640511\n19640516\n19640518\n19640520\n19640524\n19640527\n19640606\n19640618\n19640620\n19640624\n19640627\n19640630\n19640701\n19640703\n19640715\n19640718\n19640719\n19640720\n19640721\n19640722\n19640724\n19640726\n19640728\n19640730\n19640801\n19640803\n19640808\n19640809\n19640810\n19640812\n19640815\n19640816\n19640817\n19640818\n19640819\n19640820\n19640824\n19640827\n19640828\n19640830\n19640901\n19640902\n19640903\n19640906\n19640908\n19640909\n19640911\n19640912\n19640915\n19640917\n19640918\n19640919\n19640920\n19640923\n19640925\n19640926\n19640927\n19640928\n19640929\n19640930\n19641001\n19641003\n19641004\n19641005\n19641006\n19641007\n19641008\n19641010\n19641011\n19641012\n19641013\n19641014\n19641015\n19641016\n19641017\n19641019\n19641021\n19641022\n19641024\n19641025\n19641026\n19641027\n19641028\n19641029\n19641030\n19641031\n19641101\n19641102\n19641103\n19641105\n19641106\n19641107\n19641108\n19641109\n19641110\n19641111\n19641113\n19641114\n19641115\n19641116\n19641117\n19641118\n19641119\n19641121\n19641124\n19641125\n19641126\n19641127\n19641128\n19641129\n19641130\n19641201\n19641202\n19641206\n19641207\n19641208\n19641210\n19641211\n19641212\n19641213\n19641214\n19641215\n19641216\n19641219\n19641220\n19641221\n19641222\n19641223\n19641224\n19641225\n19641226\n1964122600\n19641227\n19641228\n19641229\n19641230\n19641231\n19641964\n19641988\n196424290\n19646590\n196472ssyy\n19650101\n19650102\n19650104\n19650107\n19650108\n19650109\n19650110\n19650115\n19650116\n19650121\n19650122\n19650123\n19650125\n19650126\n19650126126\n19650127\n19650128\n19650129\n19650201\n19650203\n19650204\n19650205\n19650207\n19650208\n19650209\n19650211\n19650213\n19650214\n19650215\n19650216\n19650220\n19650221\n19650223\n19650225\n19650228\n19650301\n19650302\n19650304\n19650305\n19650306\n19650307\n19650308\n19650310\n19650312\n19650314\n19650315\n19650318\n19650320\n19650322\n19650323\n19650324\n19650325\n19650327\n19650328\n19650405\n19650409\n19650416\n19650418\n19650420\n19650421\n19650422\n19650423\n19650426\n19650429\n19650501\n19650502\n19650506\n19650509\n19650512\n19650515\n19650517\n19650521\n19650522\n19650523\n19650525\n19650527\n19650528\n19650529\n19650531\n19650601\n19650603\n19650605\n19650606\n19650608\n19650610\n19650615\n19650616\n19650617\n19650618\n19650624\n19650626\n19650629\n19650701\n19650702\n19650703\n19650707\n19650708\n19650719\n19650725\n19650728\n19650731\n19650801\n19650807\n19650808\n19650811\n19650812\n19650813\n19650814\n19650815\n19650816\n19650818\n19650821\n19650822\n19650823\n19650829\n19650901\n19650902\n19650904\n19650909\n19650912\n19650913\n19650914\n19650915\n19650918\n19650921\n19650922\n19650925\n19650929\n19651001\n19651002\n19651003\n19651004\n19651006\n19651007\n19651008\n19651009\n19651010\n19651012\n19651013\n1.9651E+15\n19651014\n19651015\n19651016\n19651017\n19651018\n19651019\n19651020\n19651021\n19651022\n19651023\n19651024\n19651025\n19651026\n19651027\n19651028\n19651030\n19651031\n19651101\n19651102\n19651103\n19651104\n19651105\n19651106\n19651107\n19651108\n19651109\n19651111\n19651114\n19651115\n19651116\n19651118\n19651119\n19651120\n19651122\n19651123\n19651124\n19651126\n19651127\n19651128\n19651129\n19651130\n19651201\n19651202\n19651203\n19651205\n19651206\n19651207\n19651208\n19651210\n19651212\n19651213\n19651215\n19651216\n19651217\n19651218\n19651219\n19651220\n19651222\n19651223\n19651225\n19651226\n19651227\n19651228\n19651229\n19651230\n19651231\n19651965\n19651968\n19651972\n19656565\n19660101\n19660102\n19660105\n19660106\n19660116\n19660117\n19660118\n19660122\n19660123\n19660124\n19660127\n19660130\n19660201\n19660202\n19660203\n19660204\n19660205\n19660206\n19660207\n19660208\n19660209\n19660210\n19660213\n19660214\n19660215\n19660216\n19660218\n19660219\n19660220\n19660222\n19660223\n19660224\n19660226\n19660227\n19660228\n19660302\n19660303\n19660304\n19660305\n19660306\n19660307\n19660308\n19660309\n19660310\n19660311\n19660312\n19660313\n19660315\n19660316\n19660317\n19660318\n19660319\n19660321\n19660323\n19660324\n19660325\n19660327\n19660328\n19660329\n19660402\n19660403\n19660407\n19660408\n19660412\n19660415\n19660416\n19660420\n19660421\n19660422\n19660424\n19660426\n19660428\n19660430\n19660501\n19660502\n19660503\n19660504\n19660505\n19660506\n19660507\n19660508\n19660509\n19660512\n19660516\n19660517\n19660518\n19660519\n19660522\n19660523\n19660528\n19660529\n19660604\n19660605\n19660606\n19660607\n19660608\n19660609\n19660610\n19660611\n19660615\n19660617\n19660622\n19660623\n19660624\n19660626\n19660627\n19660628\n19660630\n19660701\n19660702\n19660705\n19660707\n19660709\n19660712\n19660713\n19660717\n19660719\n19660724\n19660729\n19660731\n19660801\n19660802\n19660804\n19660805\n19660806\n19660807\n19660808\n19660810\n19660812\n19660813\n19660814\n19660816\n19660818\n19660820\n19660821\n19660822\n19660824\n19660825\n19660826\n19660827\n19660828\n19660829\n19660901\n19660905\n19660907\n19660910\n19660911\n19660913\n19660915\n19660916\n19660918\n19660920\n19660921\n19660922\n19660924\n19660928\n19660930\n19661001\n19661002\n19661003\n19661005\n19661006\n19661007\n19661008\n19661009\n19661010\n19661011\n19661012\n19661013\n19661014\n19661015\n19661016\n19661017\n19661018\n19661019\n19661020\n19661021\n19661022\n19661023\n19661024\n19661025\n19661026\n19661028\n19661029\n19661030\n19661031\n19661101\n19661103\n19661104\n19661111\n19661112\n19661114\n19661115\n19661116\n19661117\n19661118\n19661120\n19661121\n19661122\n19661124\n19661125\n19661127\n19661128\n19661130\n19661201\n19661202\n19661204\n19661205\n19661206\n19661207\n19661208\n19661209\n19661210\n19661211\n19661212\n19661213\n19661215\n19661216\n19661217\n19661218\n19661219\n19661221\n19661222\n19661223\n19661224\n19661225\n19661226\n19661227\n19661228\n19661230\n19661231\n19661966\n19661967\n196656108\n19670101\n19670102\n19670106\n19670107\n19670108\n19670110\n19670115\n19670120\n19670127\n19670128\n19670130\n19670131\n19670202\n19670203\n19670204\n19670210\n19670211\n19670212\n19670213\n19670217\n19670218\n19670220\n19670221\n19670225\n19670228\n19670302\n19670303\n19670304\n19670307\n19670309\n19670312\n19670315\n19670316\n19670317\n19670318\n19670319\n19670321\n19670326\n19670327\n19670328\n19670329\n19670330\n19670401\n19670403\n19670408\n19670412\n19670414\n19670415\n19670415&*\n19670417\n19670419\n19670425\n19670426\n19670427\n19670501\n19670503\n19670506\n19670509\n19670510\n19670512\n19670515\n19670516\n19670518\n19670521\n19670522\n19670523\n19670526\n19670529\n19670531\n19670601\n19670602\n19670607\n19670612\n19670614\n19670616\n19670619\n19670621\n19670623\n19670629\n19670702\n19670705\n19670706\n19670707\n19670709\n19670710\n19670714\n19670717\n19670725\n19670801\n19670803\n19670807\n19670812\n19670814\n19670815\n19670818\n19670820\n19670821\n19670824\n19670825\n19670828\n19670829\n19670901\n19670902\n19670905\n19670908\n19670909\n19670910\n19670911\n19670913\n19670916\n19670918\n19670919\n19670920\n19670921\n19670923\n19670924\n19670925\n19670926\n19670927\n19670928\n19671001\n19671002\n19671003\n19671004\n19671005\n19671007\n19671009\n19671010\n19671011\n19671012\n19671013\n19671014\n19671015\n19671016\n19671017\n19671018\n19671019\n19671020\n19671021\n19671022\n19671023\n19671024\n19671025\n19671026\n19671027\n19671028\n19671029\n19671031\n19671101\n19671102\n19671103\n19671104\n19671105\n19671106\n19671107\n19671108\n19671109\n19671110\n19671111\n19671112\n19671113\n19671114\n19671115\n19671116\n19671117\n19671118\n19671119\n19671120\n19671123\n19671124\n19671125\n19671126\n19671127\n19671128\n19671129\n19671201\n19671202\n19671203\n19671204\n19671205\n19671206\n19671207\n19671208\n19671209\n19671210\n19671211\n19671212\n19671213\n19671214\n19671215\n19671216\n19671217\n19671218\n19671219\n19671220\n19671221\n19671222\n19671223\n19671224\n19671225\n19671226\n19671228\n19671229\n19671230\n19671231\n19671967\n19671968\n19671994\n19672222\n19673111\n19676491\n196784732\n19680000\n19680101\n19680104\n19680106\n19680107\n19680108\n19680109\n19680110\n19680111\n19680114\n19680115\n19680116\n19680117\n19680118\n19680119\n19680120\n19680121\n19680122\n19680124\n19680125\n19680126\n19680127\n19680128\n19680129\n19680131\n19680201\n19680202\n19680203\n19680204\n19680205\n19680206\n19680207\n19680208\n19680209\n19680210\n19680211\n19680212\n19680213\n19680214\n19680215\n19680216\n19680217\n19680218\n19680219\n19680220\n19680221\n19680222\n19680223\n19680224\n19680225\n19680226\n19680227\n19680228\n19680229\n19680301\n19680302\n19680303\n19680304\n19680306\n19680307\n19680308\n19680309\n19680310\n19680312\n19680314\n19680315\n19680316\n19680317\n19680318\n19680321\n19680322\n19680323\n19680324\n19680325\n19680327\n19680328\n19680329\n19680401\n19680402\n19680404\n19680407\n19680408\n19680409\n19680410\n19680411\n19680412\n19680413\n19680414\n19680416\n19680417\n19680418\n19680419\n19680420\n19680421\n19680422\n19680423\n19680424\n19680425\n19680426\n19680427\n19680428\n19680429\n19680501\n19680502\n19680503\n19680505\n19680506\n19680508\n19680509\n19680510\n19680511\n19680512\n19680516\n19680517\n19680519\n19680520\n19680521\n19680522\n19680523\n19680525\n19680526\n19680528\n19680530\n19680601\n19680602\n19680603\n19680604\n19680605\n19680606\n19680607\n19680608\n19680609\n19680610\n19680611\n19680612\n19680613\n19680615\n19680616\n19680618\n19680619\n19680620\n19680622\n19680624\n19680625\n19680626\n19680627\n19680628\n19680629\n19680630\n19680701\n19680702\n19680703\n19680704\n19680705\n19680706\n19680707\n19680708\n19680709\n19680711\n19680712\n19680713\n19680714\n19680716\n19680717\n19680718\n19680719\n19680720\n19680721\n19680723\n19680725\n19680726\n19680727\n19680728\n19680729\n19680730\n19680731\n19680801\n19680802\n19680803\n19680804\n19680805\n19680806\n19680807\n19680808\n19680809\n19680810\n19680811\n19680813\n19680814\n19680815\n19680816\n19680817\n19680818\n19680819\n19680820\n19680821\n19680822\n19680823\n19680824\n19680825\n19680826\n19680827\n19680828\n19680901\n19680902\n19680903\n19680904\n19680905\n19680906\n19680907\n19680908\n19680909\n19680910\n19680911\n19680912\n19680913\n19680914\n19680916\n19680917\n19680918\n19680919\n19680920\n19680921\n19680922\n19680923\n19680924\n19680925\n19680926\n19680927\n19680928\n19680929\n19680930\n19681001\n19681003\n19681004\n19681005\n19681006\n19681007\n19681008\n19681009\n19681010\n19681011\n19681012\n19681013\n19681014\n19681015\n19681016\n19681017\n19681018\n19681019\n19681020\n19681021\n19681022\n19681023\n19681024\n19681025\n19681026\n19681027\n19681028\n196810288\n19681029\n19681030\n19681031\n19681101\n19681102\n19681103\n19681104\n19681105\n19681106\n19681107\n19681108\n19681109\n19681110\n19681111\n19681112\n19681113\n19681114\n19681115\n19681116\n19681117\n19681118\n19681119\n19681120\n19681121\n19681122\n19681123\n19681124\n19681125\n19681126\n19681127\n19681128\n19681129\n19681130\n19681201\n19681202\n19681203\n19681204\n19681205\n19681206\n19681207\n19681208\n19681209\n19681210\n19681211\n19681212\n19681213\n19681214\n19681215\n19681216\n19681217\n19681218\n19681218ty\n19681219\n19681220\n19681221\n19681222\n19681223\n19681224\n19681224zxm1991\n19681225\n19681226\n19681227\n19681228\n1.96812E+11\n19681229\n19681230\n19681231\n1.96815E+11\n19681966\n19681968\n1.9682E+11\n19681969\n19681970\n19681973\n19681974\n19681977\n19681982\n1.96843E+13\n19685029\n1968820wer\n19688687\n196888359\n1968abcd\n19690101\n19690102\n19690103\n19690104\n19690105\n19690106\n19690107\n19690108\n19690109\n19690110\n19690111\n19690112\n19690113\n19690114\n19690115\n19690118\n19690119\n19690120\n19690121\n19690122\n19690123\n19690124\n19690125\n19690126\n19690127\n19690128\n19690129\n19690201\n19690202\n19690203\n19690204\n19690205\n19690206\n19690208\n19690209\n19690210\n19690211\n19690212\n19690213\n19690214\n19690215\n19690216\n19690217\n19690218\n19690219\n19690220\n19690221\n19690222\n19690223\n19690224\n19690225\n19690226\n19690227\n19690228\n19690229\n19690301\n19690302\n19690303\n19690305\n19690306\n19690307\n19690308\n19690309\n19690310\n19690311\n19690312\n19690313\n19690314\n19690315\n19690316\n19690317\n19690318\n19690319\n19690320\n19690321\n19690322\n19690323\n19690325\n19690326\n19690327\n19690328\n19690329\n19690331\n19690401\n19690402\n19690404\n19690405\n19690406\n19690407\n19690408\n19690409\n19690410\n19690411\n19690412\n19690413\n19690414\n19690415\n19690416\n19690418\n19690420\n19690421\n19690422\n19690423\n19690424\n19690426\n19690427\n19690429\n19690430\n19690501\n19690502\n19690503\n19690504\n19690505\n19690506\n19690507\n19690508\n19690510\n19690511\n19690512\n19690513\n19690514\n19690515\n19690516\n19690517\n19690518\n19690519\n19690520\n19690521\n19690522\n19690523\n19690524\n19690525\n19690527\n19690528\n19690529\n19690530\n19690531\n19690601\n19690604\n19690605\n19690606\n19690607\n19690608\n19690609\n19690610\n19690611\n19690612\n19690615\n19690616\n19690617\n19690618\n19690619\n19690620\n19690621\n19690622\n19690623\n19690624\n19690627\n19690628\n19690629\n19690630\n19690701\n19690702\n19690703\n19690704\n19690705\n19690706\n19690707\n19690708\n19690709\n19690710\n19690711\n19690712\n19690713\n19690714\n19690715\n19690716\n19690717\n19690718\n19690719\n19690720\n19690721\n19690722\n19690723\n19690724\n19690726\n19690727\n19690728\n19690729\n19690801\n19690802\n19690803\n19690804\n19690805\n19690806\n19690807\n19690808\n19690809\n19690810\n19690812\n19690813\n19690814\n19690815\n19690816\n19690817\n19690818\n19690819\n19690820\n19690821\n19690822\n19690823\n19690824\n19690825\n19690826\n19690827\n19690828\n19690829\n19690830\n19690831\n19690901\n19690902\n19690903\n19690904\n19690905\n19690906\n19690907\n19690908\n19690909\n19690910\n19690911\n19690912\n19690913\n19690914\n19690915\n19690916\n19690917\n19690918\n19690919\n19690920\n19690921\n19690922\n19690923\n19690924\n19690925\n19690926\n19690927\n19690928\n19690929\n19690930\n19691001\n19691002\n19691003\n19691004\n19691005\n19691006\n19691007\n19691008\n19691009\n19691010\n19691011\n19691012\n19691013\n19691014\n19691015\n19691016\n19691017\n19691018\n19691019\n19691020\n19691021\n19691022\n19691023\n19691024\n19691025\n19691026\n19691027\n19691028\n19691029\n19691030\n19691031\n19691101\n19691102\n19691103\n19691104\n19691105\n19691106\n19691107\n19691108\n19691109\n19691110\n19691111\n19691112\n19691113\n19691114\n19691115\n19691116\n19691117\n19691118\n19691119\n19691120\n19691121\n19691122\n19691123\n19691124\n1.96911E+11\n19691125\n19691127\n19691128\n19691129\n19691130\n19691201\n19691202\n19691203\n19691204\n19691205\n19691206\n19691207\n19691208\n19691209\n19691210\n19691211\n19691212\n19691213\n19691214\n19691215\n19691216\n19691217\n19691218\n19691219\n19691220\n19691221\n19691222\n19691223\n19691224\n19691225\n19691226\n19691227\n19691228\n19691229\n19691230\n19691231\n19691805\n19691969\n19691970\n19691971\n19691973\n1.9692E+15\n19691996\n19691998\n1969614vt2050\n1969720310\n19698653\n196994617\n196B1ecf\n1970*07*02\n1970-1-1\n19700000\n19700101\n19700102\n19700103\n19700104\n19700105\n19700106\n19700107\n19700108\n19700109\n19700110\n19700111\n19700112\n19700113\n19700114\n19700115\n19700116\n19700117\n19700118\n19700119\n19700120\n19700121\n19700122\n19700123\n19700124\n19700125\n19700126\n19700127\n19700128\n19700129\n19700130\n19700131\n19700201\n19700202\n19700203\n19700204\n19700205\n19700206\n19700207\n19700208\n19700209\n19700210\n19700211\n19700212\n19700213\n19700214\n19700215\n19700216\n19700217\n19700218\n19700219\n19700220\n19700221\n19700222\n19700223\n19700224\n19700225\n19700226\n19700227\n19700228\n19700229\n19700230\n19700231\n19700301\n19700302\n19700303\n19700304\n19700305\n19700306\n19700307\n19700308\n19700309\n19700310\n19700311\n19700312\n19700313\n19700314\n19700315\n19700316\n19700317\n19700318\n19700319\n19700320\n19700321\n19700322\n19700323\n19700324\n19700325\n19700326\n19700327\n19700328\n19700329\n19700330\n19700331\n19700401\n19700402\n19700403\n19700404\n19700405\n19700406\n19700407\n19700408\n19700409\n19700410\n19700411\n19700412\n19700413\n19700414\n19700415\n19700416\n19700417\n19700418\n19700419\n19700420\n19700421\n19700422\n19700423\n19700424\n19700425\n19700426\n19700427\n19700428\n19700429\n19700430\n19700431\n19700501\n19700502\n19700503\n19700504\n19700505\n19700506\n19700507\n19700508\n19700509\n19700510\n19700511\n19700512\n19700513\n19700514\n19700515\n19700516\n19700517\n19700518\n19700519\n19700520\n19700521\n19700522\n19700523\n19700524\n19700525\n19700526\n19700527\n19700528\n19700529\n19700530\n19700531\n19700601\n19700602\n19700603\n19700604\n19700605\n19700606\n19700607\n19700608\n19700609\n19700610\n19700611\n19700612\n19700613\n19700614\n19700615\n19700616\n19700617\n19700618\n19700619\n19700620\n19700621\n19700622\n19700623\n19700624\n19700625\n19700626\n19700627\n19700628\n19700629\n19700630\n19700631\n19700701\n19700702\n19700703\n19700704\n19700705\n19700706\n19700707\n19700708\n19700709\n19700710\n19700711\n19700712\n19700713\n19700714\n19700715\n19700716\n19700717\n19700718\n19700719\n19700720\n19700721\n19700722\n19700723\n19700724\n19700725\n19700726\n19700727\n19700728\n19700729\n19700730\n19700731\n19700801\n19700802\n19700803\n19700804\n19700805\n19700806\n19700807\n19700808\n19700809\n19700810\n19700811\n19700812\n19700813\n19700814\n19700815\n19700816\n19700817\n19700818\n19700819\n19700820\n19700821\n19700822\n19700823\n19700824\n19700825\n19700826\n19700827\n19700828\n19700829\n19700830\n19700831\n19700901\n19700902\n19700903\n19700904\n19700905\n19700906\n19700907\n19700908\n19700909\n19700909023\n19700910\n19700911\n19700912\n19700913\n19700914\n19700915\n19700916\n19700917\n19700918\n19700919\n19700920\n19700921\n19700922\n19700923\n19700924\n19700925\n19700926\n19700927\n19700928\n19700929\n19700930\n19700931\n19701001\n19701002\n19701003\n19701004\n19701005\n19701006\n19701007\n19701008\n19701009\n19701010\n19701010zhang\n19701011\n19701012\n19701013\n19701014\n19701015\n19701016\n19701017\n19701018\n19701019\n19701020\n19701021\n19701022\n19701023\n19701024\n19701025\n19701026\n19701027\n19701028\n1.9701E+11\n19701029\n19701030\n19701031\n19701101\n19701102\n19701103\n19701104\n19701105\n19701106\n19701107\n19701108\n19701109\n19701110\n19701111\n19701112\n19701113\n19701114\n19701115\n19701116\n19701117\n19701118\n19701119\n19701120\n19701121\n19701122\n19701123\n19701124\n19701125\n19701126\n19701127\n19701128\n19701129\n19701130\n19701131\n19701201\n19701202\n19701203\n19701204\n19701205\n19701206\n19701207\n19701208\n19701209\n19701210\n19701211\n19701212\n19701213\n19701214\n19701215\n19701216\n19701217\n19701218\n19701219\n19701220\n19701221\n19701222\n19701223\n19701224\n19701225\n19701226\n19701227\n19701228\n19701229\n19701230\n19701231\n19701234\n19701968\n19701969\n19701970\n1.9702E+11\n19701971\n19701972\n19701974\n19701975\n19701977\n19701978\n19701996\n19701998\n19701999\n19702566\n19703004\n19705111\n1970718718\n197077gb\n19709166\n19710000\n19710101\n19710102\n19710103\n19710104\n19710104302\n19710105\n19710106\n19710107\n19710108\n19710109\n19710110\n19710111\n19710112\n19710113\n19710114\n19710115\n19710116\n19710117\n19710118\n19710119\n19710120\n19710121\n19710122\n19710123\n19710124\n19710125\n19710126\n19710127\n19710128\n19710129\n19710130\n19710131\n19710201\n19710202\n19710203\n19710204\n19710205\n19710206\n19710207\n19710208\n19710209\n19710210\n19710211\n19710212\n19710213\n19710214\n19710215\n19710216\n19710217\n19710218\n19710219\n19710220\n19710221\n19710222\n19710223\n19710224\n19710225\n19710226\n19710227\n19710228\n19710229\n19710230\n19710231\n19710301\n19710302\n19710303\n19710304\n19710305\n19710306\n19710307\n19710308\n19710309\n19710310\n19710311\n19710312\n19710313\n19710314\n19710315\n19710316\n19710317\n19710318\n19710319\n19710320\n19710321\n19710322\n19710323\n19710324\n19710325\n19710326\n19710327\n19710328\n19710329\n19710330\n19710331\n19710401\n1.97104E+11\n19710402\n19710403\n19710404\n19710405\n19710406\n19710407\n19710408\n19710409\n19710410\n19710411\n19710412\n19710413\n19710414\n19710415\n19710416\n19710417\n19710418\n19710419\n19710420\n19710421\n19710422\n19710423\n19710424\n19710425\n19710426\n19710427\n19710428\n19710429\n19710430\n19710431\n19710501\n19710502\n19710503\n19710504\n19710505\n19710506\n19710507\n19710508\n19710509\n19710510\n19710511\n19710512\n19710513\n19710514\n19710515\n19710516\n19710517\n19710518\n19710519\n19710520\n19710521\n19710522\n19710523\n19710524\n19710525\n19710526\n19710527\n19710528\n19710529\n19710530\n19710531\n19710601\n19710602\n19710603\n19710604\n19710605\n19710606\n19710607\n19710608\n19710609\n19710610\n19710611\n19710612\n19710613\n19710614\n19710615\n19710616\n19710617\n19710618\n19710619\n19710620\n19710621\n19710622\n19710623\n19710624\n19710625\n19710626\n19710627\n19710628\n19710629\n19710630\n19710631\n19710701\n19710702\n19710703\n19710704\n19710705\n19710706\n19710707\n1.97107E+14\n19710708\n19710709\n19710710\n19710711\n19710712\n19710713\n19710714\n19710715\n19710716\n19710717\n19710718\n19710719\n19710720\n19710721\n19710722\n19710723\n19710724\n19710725\n19710726\n19710727\n19710728\n19710729\n19710730\n19710731\n19710801\n19710802\n19710803\n19710804\n19710805\n19710806\n19710807\n19710808\n19710809\n19710810\n19710811\n19710812\n19710813\n19710814\n19710815\n19710816\n19710817\n19710818\n19710819\n19710820\n19710821\n19710822\n19710823\n19710824\n19710825\n19710826\n19710827\n19710828\n19710829\n19710830\n19710831\n19710901\n19710902\n19710903\n19710904\n19710905\n19710906\n19710907\n19710908\n19710909\n19710911\n19710912\n19710913\n19710914\n19710915\n19710916\n19710917\n19710918\n19710919\n19710920\n19710921\n19710922\n19710923\n19710924\n19710925\n19710926\n19710927\n19710928\n19710929\n19710930\n19710931\n19711001\n19711002\n19711003\n19711004\n19711005\n19711006\n19711007\n19711008\n19711009\n19711010\n19711011\n19711012\n19711013\n19711014\n19711015\n19711016\n19711017\n19711018\n19711019\n19711020\n19711021\n19711022\n19711023\n19711024\n19711025\n19711026\n19711027\n19711028\n19711029\n19711030\n19711031\n19711093\n19711101\n19711102\n19711103\n19711104\n19711105\n19711106\n19711107\n19711108\n19711108112\n19711109\n19711110\n19711111\n19711112\n19711113\n19711114\n19711115\n19711116\n19711117\n19711118\n19711119\n19711120\n19711121\n19711122\n19711123\n19711124\n19711125\n19711126\n19711127\n19711128\n19711129\n19711130\n19711131\n19711201\n19711202\n19711203\n19711204\n19711205\n19711206\n19711207\n19711208\n19711209\n19711210\n19711211\n19711212\n19711213\n19711214\n19711215\n19711216\n19711217\n19711218\n19711219\n19711220\n19711221\n19711222\n19711223\n19711224\n19711225\n19711226\n19711227\n19711228\n19711229\n19711230\n19711231\n19711939\n19711971\n19711972\n19711973\n19711974\n19711976\n19711981\n1971272002\n19715028\n1.97152E+13\n19715324\n197172woaini\n19717499\n19717930\n1971quguhu159\n1971quguhu159iop\n19720000\n19720101\n19720102\n19720103\n19720104\n19720105\n19720106\n19720107\n19720108\n19720109\n19720110\n19720111\n19720112\n19720113\n19720114\n19720115\n19720116\n19720117\n19720118\n19720119\n19720120\n19720121\n19720122\n19720123\n19720124\n19720125\n19720126\n19720127\n19720128\n19720129\n19720130\n19720131\n19720201\n19720202\n19720203\n19720204\n19720205\n19720206\n19720207\n19720208\n19720209\n19720210\n19720211\n19720212\n19720213\n19720214\n19720215\n19720216\n19720217\n19720218\n19720219\n19720220\n19720221\n19720222\n19720223\n19720224\n19720225\n19720226\n19720227\n19720228\n19720229\n19720230\n19720231\n19720301\n19720302\n19720303\n19720304\n19720305\n19720306\n19720307\n19720308\n19720309\n19720310\n19720311\n19720312\n19720313\n19720314\n19720315\n19720316\n19720317\n19720318\n19720319\n19720320\n19720321\n19720322\n19720323\n19720324\n19720325\n19720326\n19720327\n19720328\n19720329\n19720330\n19720331\n19720401\n19720402\n19720403\n19720404\n19720405\n19720406\n19720407\n19720408\n19720409\n19720409001\n19720410\n19720411\n19720412\n19720413\n19720414\n19720415\n19720416\n19720417\n19720418\n19720419\n19720420\n19720421\n19720422\n19720423\n19720424\n19720425\n19720426\n19720427\n19720428\n19720429\n19720430\n19720431\n19720501\n19720502\n19720503\n19720504\n19720505\n19720506\n19720507\n19720508\n19720509\n19720510\n19720511\n19720512\n19720513\n19720514\n19720515\n19720516\n19720517\n19720518\n19720519\n19720520\n19720521\n19720522\n19720523\n19720524\n19720525\n19720526\n19720527\n19720528\n19720529\n19720530\n19720531\n19720601\n19720602\n19720603\n19720604\n19720605\n19720606\n19720607\n19720608\n19720609\n19720610\n19720611\n19720612\n19720613\n19720614\n19720615\n19720616\n19720617\n19720618\n19720619\n19720620\n19720621\n19720622\n19720623\n19720624\n19720625\n19720626\n19720627\n19720628\n19720629\n19720630\n19720631\n19720701\n19720702\n19720703\n19720704\n19720705\n19720706\n19720707\n19720708\n19720709\n19720710\n19720711\n19720712\n19720713\n19720714\n19720715\n19720716\n19720717\n19720718\n19720719\n19720720\n19720721\n19720722\n19720723\n19720724\n19720725\n19720726\n19720727\n19720728\n19720729\n19720730\n19720731\n19720801\n19720802\n19720803\n19720804\n19720805\n19720806\n19720807\n19720808\n19720809\n19720810\n19720811\n19720812\n19720813\n19720814\n19720815\n19720816\n19720817\n19720818\n19720819\n19720820\n19720821\n19720822\n19720823\n19720824\n19720825\n19720826\n19720827\n19720828\n19720829\n19720830\n19720831\n19720901\n19720902\n19720903\n19720904\n19720905\n19720906\n19720907\n19720908\n19720909\n19720910\n19720911\n19720912\n19720913\n19720914\n19720915\n19720916\n19720917\n19720918\n19720919\n19720920\n19720921\n19720922\n19720923\n19720924\n19720925\n19720926\n19720927\n19720928\n19720929\n19720930\n19720931\n19721001\n19721002\n19721003\n19721004\n19721005\n19721006\n19721007\n19721008\n19721009\n19721010\n19721011\n19721012\n19721013\n19721014\n19721015\n19721016\n19721017\n19721018\n19721019\n19721020\n19721021\n19721022\n19721023\n19721024\n19721025\n19721026\n19721027\n19721028\n19721029\n19721030\n19721031\n19721101\n19721102\n19721103\n19721104\n19721105\n19721106\n19721107\n19721108\n19721109\n19721110\n19721111\n19721112\n19721113\n19721114\n19721115\n19721116\n19721117\n19721118\n19721119\n19721120\n19721121\n19721122\n19721123\n19721124\n19721125\n19721126\n19721127\n19721128\n19721129\n19721130\n19721131\n19721201\n19721202\n19721203\n19721204\n19721205\n19721206\n19721207\n19721208\n19721209\n19721210\n19721211\n19721212\n19721213\n19721214\n19721215\n19721216\n19721217\n19721218\n19721219\n19721220\n19721221\n19721222\n19721223\n197212230\n19721224\n19721225\n19721226\n19721227\n19721228\n19721229\n19721230\n19721231\n1972129...\n19721968\n19721972\n1.9722E+11\n19721973\n19721974\n19721975\n19721976\n19721977\n19721978\n19721980\n19721999\n19722791\n19723027\n1.97268E+11\n1972yang\n19730000\n19730028\n19730101\n19730102\n19730103\n19730104\n19730105\n19730106\n19730107\n19730108\n19730109\n19730110\n19730111\n19730112\n19730113\n19730114\n19730115\n19730116\n19730117\n19730118\n19730119\n19730120\n19730121\n19730122\n19730123\n19730124\n19730125\n19730126\n19730127\n19730128\n19730129\n19730130\n19730131\n1973019730\n19730201\n19730202\n19730203\n19730204\n19730205\n19730206\n19730207\n19730208\n19730209\n19730210\n19730211\n19730212\n19730213\n19730214\n19730215\n19730216\n19730217\n19730218\n19730219\n19730220\n19730221\n19730222\n19730223\n19730224\n19730225\n19730226\n19730227\n19730228\n19730229\n19730230\n19730231\n19730301\n19730302\n19730303\n19730304\n19730305\n19730306\n19730307\n19730308\n19730309\n19730310\n19730311\n19730312\n19730313\n19730314\n19730315\n19730316\n19730317\n19730318\n19730319\n19730320\n19730321\n19730322\n19730323\n19730324\n19730325\n19730326\n19730327\n19730328\n19730329\n19730330\n19730331\n19730401\n19730402\n19730403\n19730404\n19730405\n19730406\n19730407\n19730408\n19730409\n19730410\n19730411\n19730412\n19730413\n19730414\n19730415\n19730416\n19730417\n19730418\n19730419\n19730420\n1973042001\n19730421\n19730422\n19730423\n19730424\n19730425\n19730426\n19730427\n19730428\n19730429\n19730430\n19730431\n19730501\n19730502\n19730503\n19730504\n19730505\n19730506\n19730507\n19730508\n19730509\n19730510\n19730511\n19730512\n19730513\n19730514\n19730515\n19730516\n19730517\n19730518\n19730519\n19730520\n19730521\n19730522\n19730523\n19730524\n19730525\n19730526\n19730527\n19730528\n19730529\n19730530\n19730531\n19730601\n19730602\n19730603\n19730604\n19730605\n19730606\n19730607\n19730608\n19730609\n19730610\n19730611\n19730612\n19730613\n19730614\n19730615\n19730616\n19730617\n19730618\n19730619\n19730620\n19730621\n19730622\n19730623\n19730624\n19730625\n19730626\n19730627\n19730628\n19730629\n19730630\n19730631\n19730701\n19730702\n19730703\n19730704\n19730705\n19730706\n19730707\n19730708\n19730709\n19730710\n19730711\n19730712\n19730713\n19730714\n19730715\n19730716\n19730717\n19730718\n19730719\n19730720\n19730721\n19730722\n19730723\n19730724\n19730725\n19730726\n19730727\n19730728\n19730729\n19730730\n19730731\n19730801\n19730802\n19730803\n19730804\n19730805\n1.97308E+13\n19730806\n19730807\n19730808\n19730809\n19730810\n19730811\n19730812\n19730813\n19730814\n19730815\n19730816\n19730817\n19730818\n19730819\n19730820\n19730820BHSJ\n19730821\n19730822\n19730823\n19730824\n19730825\n19730826\n19730827\n19730828\n19730829\n19730830\n19730831\n19730901\n19730902\n19730903\n19730904\n19730905\n19730906\n19730907\n19730908\n19730909\n19730910\n19730911\n19730912\n19730913\n19730914\n19730915\n19730916\n19730917\n19730918\n19730919\n19730920\n19730921\n19730922\n19730923\n19730924\n19730925\n19730926\n19730927\n19730928\n19730929\n19730930\n19730931\n19731001\n19731002\n19731003\n19731004\n19731005\n19731006\n19731007\n19731008\n19731009\n19731010\n19731011\n19731012\n19731013\n19731014\n19731015\n19731016\n19731017\n19731018\n19731019\n19731020\n19731021\n19731022\n19731023\n19731024\n19731025\n19731026\n19731027\n19731028\n19731029\n19731030\n19731031\n19731101\n19731102\n19731103\n19731104\n19731105\n19731106\n19731107\n19731108\n19731109\n19731110\n19731111\n19731112\n19731113\n19731114\n19731115\n19731116\n19731117\n19731118\n19731119\n19731120\n19731121\n19731122\n19731123\n19731124\n19731125\n19731126\n19731127\n19731128\n19731129\n19731130\n19731131\n19731201\n19731202\n19731203\n19731204\n19731205\n19731206\n19731207\n19731208\n19731209\n19731210\n19731211\n19731212\n19731213\n19731214\n19731215\n19731216\n19731217\n19731218\n19731219\n19731220\n19731221\n19731222\n19731223\n19731224\n19731225\n19731226\n19731227\n19731228\n19731229\n19731230\n19731231\n19731972\n1.9732E+11\n19731974\n19731975\n19731976\n19731977\n19731978\n19731979\n19731980\n19731981\n19731982\n19731984\n19731998\n19731999\n19732000\n197328465\n19733218\n19734628\n19734682\n197346825\n1973468250\n19736666\n19737373\n19738246\n197382465\n1973824699\n19738911\n197389FI\n19740000\n19740088\n19740101\n19740102\n19740103\n19740104\n19740105\n19740106\n19740107\n19740108\n19740109\n19740110\n19740111\n19740112\n19740113\n19740114\n19740115\n19740116\n19740117\n19740118\n19740119\n19740120\n19740121\n19740122\n19740123\n19740124\n19740125\n19740126\n19740127\n19740128\n19740129\n19740130\n19740131\n19740201\n19740202\n19740203\n19740204\n19740205\n19740206\n19740207\n19740208\n19740209\n19740210\n19740211\n19740212\n19740213\n19740214\n19740215\n19740216\n19740217\n19740218\n19740219\n19740220\n19740221\n19740222\n19740223\n19740224\n19740225\n19740226\n19740227\n19740228\n19740229\n19740230\n19740231\n19740301\n19740302.zx\n19740302zx\n19740303\n19740304\n19740305\n19740306\n19740307\n19740308\n19740309\n19740310\n19740311\n19740312\n19740313\n19740314\n19740315\n19740316\n19740317\n19740318\n19740319\n19740320\n19740321\n19740322\n19740323\n19740324\n19740325\n19740326\n19740327\n19740328\n19740329\n19740330\n19740331\n19740401\n19740402\n19740403\n19740404\n19740405\n19740406\n19740407\n19740408\n19740409\n19740410\n19740411\n19740412\n19740413\n19740414\n19740415\n19740416\n19740417\n19740418\n19740419\n19740420\n19740421\n19740422\n19740423\n19740424\n19740425\n19740426\n19740427\n19740428\n19740429\n19740430\n19740431\n19740501\n19740502\n19740503\n19740504\n19740505\n19740506\n19740507\n19740508\n19740509\n19740510\n19740511\n19740512\n19740513\n19740514\n19740515\n19740516\n19740517\n19740518\n19740519\n19740520\n19740521\n19740522\n19740523\n19740524\n19740525\n19740526\n19740527\n19740528\n19740529\n19740530\n19740531\n19740601\n19740602\n19740603\n19740604\n19740605\n19740606\n19740607\n19740608\n19740609\n19740610\n19740611\n19740612\n19740613\n19740614\n19740615\n19740616\n19740617\n19740618\n19740619\n19740620\n19740621\n19740622\n19740623\n19740624\n19740625\n19740626\n19740627\n19740628\n19740629\n19740630\n19740631\n19740701\n19740702\n19740703\n19740704\n19740705\n19740706\n19740707\n19740708\n19740709\n19740710\n19740711\n19740712\n19740713\n19740714\n19740715\n19740716\n19740717\n19740718\n19740719\n19740720\n19740721\n19740722\n19740723\n19740724\n19740725\n19740726\n19740727\n19740728\n19740729\n19740730\n19740731\n19740801\n19740802\n19740803\n19740804\n19740805\n19740806\n19740807\n19740808\n19740809\n19740810\n19740811\n19740812\n19740813\n19740814\n19740815\n19740816\n19740817\n19740818\n19740819\n19740820\n19740821\n19740822\n19740823\n19740824\n19740825\n19740826\n19740827\n19740828\n19740829\n19740830\n19740831\n19740901\n19740902\n19740903\n19740904\n19740905\n19740906\n19740907\n19740908\n19740909\n19740910\n19740911\n19740912\n19740913\n19740914\n19740915\n19740916\n19740917\n19740918\n19740919\n19740920\n19740921\n19740922\n19740923\n19740924\n19740925\n19740926\n19740927\n19740928\n19740929\n19740930\n19740931\n19741001\n19741002\n19741003\n19741004\n19741005\n19741006\n19741007\n19741008\n19741009\n19741010\n19741011\n19741012\n19741013\n19741014\n19741015\n19741016\n19741017\n19741018\n19741019\n19741020\n19741021\n19741022\n19741023\n197410233\n19741024\n19741025\n19741026\n19741027\n19741028\n19741029\n19741030\n19741031\n19741101\n19741102\n19741103\n19741104\n19741105\n19741106\n19741107\n19741108\n19741109\n19741110\n19741111\n19741112\n19741113\n19741114\n19741115\n19741116\n19741117\n19741118\n19741119\n19741120\n19741121\n19741122\n19741123\n19741124\n19741125\n19741126\n19741127\n19741128\n19741129\n19741130\n1.97411E+15\n19741131\n19741200\n19741201\n19741202\n19741203\n19741204\n19741205\n19741206\n19741207\n19741208\n19741209\n19741210\n19741211\n19741212\n19741213\n19741214\n19741215\n19741216\n19741217\n19741218\n19741219\n19741220\n19741221\n19741222\n19741223\n19741224\n19741225\n19741226\n19741227\n19741228\n19741229\n19741230\n19741231\n19741973\n1.9742E+11\n19741975\n19741976\n19741977\n19741978\n19741979\n19741980\n19741981\n19741982\n19741984\n19741986\n19741998\n19741999\n19742001\n19742002\n19742005\n19742009\n1.97432E+13\n1974382001\n19744791\n19748360\n19749190\n1974koujun0818\n1974z1130wssz\n19750000\n19750101\n19750102\n19750103\n19750104\n19750105\n19750105myway\n19750106\n19750107\n19750108\n19750109\n19750110\n19750111\n19750112\n19750113\n19750114\n19750115\n19750116\n19750117\n19750118\n19750119\n19750120\n19750121\n19750122\n19750123\n19750124\n19750125\n19750126\n19750127\n19750128\n19750129\n19750130\n19750131\n19750201\n19750202\n19750203\n19750204\n19750205\n19750206\n19750207\n19750207pp\n19750208\n19750209\n19750210\n19750211\n19750212\n19750213\n19750214\n19750215\n19750216\n19750217\n19750218\n19750219\n19750220\n19750221\n19750222\n19750223\n19750224\n19750225\n19750226\n19750227\n19750228\n19750229\n19750230\n19750231\n19750301\n19750302\n19750303\n19750304\n19750305\n19750306\n19750307\n19750308\n19750309\n19750310\n19750311\n19750312\n19750313\n19750314\n19750315\n19750316\n19750317\n19750318\n19750319\n19750320\n19750321\n19750322\n19750323\n19750324\n19750325\n19750326\n19750327\n19750328\n19750329\n19750330\n19750331\n19750401\n19750402\n19750403\n19750404\n19750405\n19750406\n19750407\n19750408\n19750409\n19750410\n19750411\n19750412\n19750413\n19750414\n19750415\n19750416\n19750417\n19750418\n19750419\n19750420\n19750421\n19750422\n19750423\n19750424\n19750425\n19750426\n19750427\n19750428\n19750429\n19750430\n19750431\n19750501\n19750502\n19750503\n19750504\n19750505\n19750506\n19750507\n19750508\n19750509\n19750510\n19750511\n19750512\n19750513\n19750514\n19750515\n19750516\n19750517\n19750518\n19750519\n19750520\n19750521\n19750522\n19750523\n19750524\n19750525\n19750526\n19750527\n19750528\n19750529\n19750530\n19750531\n19750601\n19750602\n19750603\n19750604\n19750605\n19750606\n19750607\n19750608\n19750609\n19750610\n19750611\n19750612\n19750613\n19750614\n19750615\n19750616\n19750616007\n19750617\n19750618\n19750619\n19750620\n19750621\n19750622\n19750623\n19750624\n19750625\n19750626\n19750627\n19750628\n19750629\n19750630\n19750631\n19750701\n19750702\n19750703\n19750704\n19750705\n19750706\n19750707\n19750708\n19750709\n19750710\n19750711\n19750712\n19750713\n19750714\n19750715\n19750716\n19750717\n19750718\n19750719\n19750720\n19750721\n19750722\n19750723\n19750724\n19750725\n19750726\n19750727\n19750728\n19750729\n19750730\n19750731\n19750801\n19750802\n19750802051\n19750803\n19750804\n19750805\n19750806\n19750807\n19750808\n19750809\n19750810\n19750811\n19750812\n19750813\n19750814\n19750815\n19750816\n19750817\n19750818\n19750819\n19750820\n19750821\n19750822\n19750823\n19750824\n197508243\n19750825\n19750826\n19750827\n19750828\n19750829\n19750830\n19750831\n19750901\n19750902\n19750903\n19750904\n19750905\n19750906\n19750907\n19750908\n19750909\n19750910\n19750911\n19750912\n19750913\n19750913p\n19750914\n19750915\n19750916\n19750917\n19750918\n19750919\n19750920\n19750921\n19750922\n19750923\n19750924\n19750925\n19750926\n19750927\n19750928\n19750929\n19750930\n19750931\n19751001\n19751002\n19751003\n19751004\n19751005\n19751006\n19751007\n19751008\n19751009\n19751010\n19751011\n19751012\n19751013\n19751014\n19751015\n19751016\n19751017\n19751018\n19751019\n19751020\n19751021\n19751022\n19751023\n19751024\n19751025\n19751026\n19751027\n19751028\n19751029\n19751030\n19751031\n19751100\n19751101\n19751102\n19751103\n19751104\n19751105\n1.97511E+13\n19751106\n19751107\n19751108\n19751109\n19751110\n19751111\n19751112\n19751113\n19751114\n19751115\n19751116\n19751117\n19751118\n19751119\n19751120\n19751121\n19751122\n19751123\n19751124\n19751125\n19751126\n19751127\n19751128\n19751129\n19751130\n19751131\n19751201\n19751202\n19751203\n19751204\n19751205\n19751206\n19751207\n19751208\n19751209\n19751210\n19751211\n19751212\n19751213\n19751214\n19751215\n19751216\n19751217\n19751218\n19751219\n19751220\n19751221\n19751222\n19751223\n19751224\n19751225\n19751226\n19751227\n19751228\n19751229\n19751230\n19751231\n1975123456\n19751973\n19751974\n1975197509\n1.9752E+11\n19751976\n19751977\n19751978\n19751979\n19751980\n19751981\n19751982\n19751983\n19751999\n19752000\n19752003\n19752004\n19752008\n19754788\n19755791\n19755856\n19757152\n19757411\n197576224\n197591777\n1975CBK1977GJL\n1976*10*04///\n19760000\n1976000321\n19760038\n19760101\n19760102\n19760103\n19760104\n19760105\n19760106\n19760107\n19760108\n19760109\n19760110\n19760111\n19760112\n19760112zyx\n19760113\n19760114\n19760115\n19760116\n19760117\n19760118\n19760119\n19760120\n19760121\n19760122\n19760123\n19760124\n19760125\n19760126\n19760127\n19760128\n19760129\n19760130\n19760131\n19760201\n19760202\n19760203\n19760204\n19760205\n19760206\n19760207\n19760208\n19760209\n19760210\n19760211\n19760212\n19760213\n19760214\n19760215\n19760216\n19760217\n19760218\n19760219\n19760220\n19760221\n19760222\n19760223\n19760224\n19760225\n19760226\n19760227\n19760228\n19760229\n19760230\n19760231\n19760301\n19760302\n19760303\n19760304\n19760305\n19760306\n19760307\n19760308\n19760309\n19760310\n19760311\n19760312\n19760313\n19760314\n19760315\n19760316\n19760317\n19760318\n19760319\n19760320\n19760321\n19760322\n19760323\n19760324\n19760325\n19760326\n19760327\n19760328\n19760329\n19760330\n19760331\n19760401\n19760402\n19760403\n19760404\n19760405\n19760406\n19760407\n19760408\n19760409\n19760410\n19760411\n19760412\n19760413\n19760414\n19760415\n19760416\n19760417\n19760418\n19760419\n19760420\n19760421\n19760422\n19760423\n19760424\n19760425\n19760426\n19760427\n19760428\n19760429\n19760430\n19760431\n19760501\n19760502\n19760503\n19760504\n19760505\n19760506\n19760507\n19760508\n19760509\n19760510\n19760511\n19760512\n19760513\n19760514\n19760515\n19760516\n19760517\n19760518\n19760519\n19760520\n19760521\n19760522\n19760523\n19760524\n19760525\n19760526\n19760527\n19760528\n19760529\n19760530\n19760531\n19760601\n19760602\n19760603\n19760604\n19760605\n19760606\n19760607\n19760608\n19760609\n19760610\n19760611\n19760612\n19760613\n19760614\n19760615\n19760616\n19760617\n19760618\n19760619\n19760621\n19760622\n19760623\n19760624\n19760625\n19760626\n19760627\n19760628\n19760629\n19760630\n19760631\n19760701\n19760702\n19760703\n19760704\n19760705\n19760706\n19760707\n19760708\n19760709\n19760710\n19760711\n19760712\n19760713\n19760714\n19760715\n19760716\n19760717\n19760718\n19760719\n19760720\n19760721\n19760722\n19760722ybdy\n19760723\n19760724\n19760725\n1.97607E+11\n19760726\n19760727\n19760728\n19760729\n19760730\n19760731\n19760801\n19760802\n19760803\n19760804\n19760805\n19760806\n19760807\n19760808\n19760809\n19760810\n19760811\n19760812\n19760813\n19760814\n19760815\n19760816\n19760817\n19760817+++\n19760817+++sw\n19760817+++xxk\n19760818\n19760819\n19760820\n19760821\n19760822\n19760823\n19760824\n19760825\n19760826\n19760827\n19760828\n19760829\n19760830\n19760831\n19760901\n1976090120\n19760902\n19760903\n19760904\n19760905\n19760906\n19760907\n19760908\n19760909\n19760910\n19760911\n19760912\n19760913\n19760914\n19760915\n19760916\n1976091622\n19760917\n19760918\n19760919\n19760920\n19760921\n19760922\n19760923\n19760924\n19760925\n19760926\n19760927\n19760928\n19760929\n19760930\n19760931\n19761001\n19761002\n19761003\n19761004\n19761005\n19761006\n19761007\n19761008\n19761009\n19761010\n19761011\n19761012\n19761013\n19761014\n19761015\n19761016\n19761017\n19761018\n19761019\n19761020\n19761021\n19761022\n19761022x\n19761023\n19761024\n1.9761E+13\n19761025\n19761026\n19761027\n19761028\n19761029\n1.9761E+11\n19761030\n19761031\n1.97611E+14\n19761101\n19761102\n19761103\n19761104\n19761105\n19761106\n19761107\n19761108\n19761109\n19761110\n19761111\n19761112\n19761112001\n19761113\n19761114\n19761114923yb\n19761115\n19761116\n19761117\n19761118\n19761119\n19761120\n19761121\n19761122\n19761123\n19761124\n19761125\n19761126\n19761127\n19761128\n19761129\n19761129@qq.com\n19761130\n19761131\n19761145118\n19761201\n19761202\n19761203\n19761204\n19761205\n19761206\n19761207\n19761208\n19761209\n19761210\n19761211\n19761212\n19761213\n19761214\n19761215\n19761216\n19761217\n19761218\n1976121826\n19761219\n1.97612E+11\n19761220\n19761221\n19761222\n19761223\n19761224\n19761225\n19761226\n19761227\n19761228\n19761229\n19761230\n19761231\n19761233\n19761234\n197616ly\n19761900\n19761973\n19761974\n19761975\n1.9762E+11\n19761976331\n19761977\n19761978\n19761979\n19761980\n19761981\n19761982\n19761983\n19761984\n19762000\n19762001\n19762002\n19762003\n19762004\n19762008\n19762009\n19762100\n197622789\n19763100\n1976333000\n1976626626\n19766316hm\n19766791\n19767400\n19768120\n19768228\n197682888\n19768888\n197695333\n1976DF9@qq.com\n19770000\n19770101\n19770102\n19770102lao\n19770103\n19770104\n19770105\n19770106\n19770107\n19770108\n19770109\n19770110\n197701104\n197701104t\n19770111\n19770112\n19770114\n19770115\n19770116\n19770117\n19770118\n19770119\n19770119810\n19770120\n19770121\n19770122\n19770123\n19770124\n19770125\n19770126\n19770127\n19770127ll\n19770128\n19770129\n19770130\n19770131\n19770201\n19770202\n19770203\n19770204\n19770205\n19770206\n19770207\n19770208\n19770209\n19770210\n19770211\n19770212\n19770213\n19770214\n19770215\n19770216\n19770217\n19770218\n19770219\n19770220\n19770221\n19770222\n19770223\n19770224\n19770225\n19770226\n19770227\n19770228\n19770229\n19770230\n19770231\n19770301\n19770302\n19770303\n19770304\n19770305\n19770306\n19770307\n19770308\n19770309\n19770310\n19770311\n19770312\n19770313\n19770314\n19770315\n19770316\n19770317\n19770318\n19770319\n19770320\n19770321\n19770322\n19770323\n19770324\n19770325\n19770326\n19770327\n19770328\n19770329\n19770330\n19770331\n19770401\n19770402\n19770403\n19770404\n19770405\n19770406\n19770407\n19770408\n19770409\n19770410\n19770411\n19770412\n19770413\n19770413&&\n19770414\n19770415\n19770416\n1.97704E+15\n19770417\n19770418\n19770419\n19770420\n19770420c\n19770421\n19770422\n19770423\n19770424\n19770425\n19770426\n19770427\n19770428\n19770429\n19770430\n19770431\n19770501\n19770502\n19770503\n19770504\n19770505\n19770506\n19770507\n1977050710\n19770508\n19770509\n19770510\n19770511\n19770512\n19770513\n19770514\n19770515\n19770516\n19770517\n19770518\n19770519\n19770520\n19770521\n19770522\n19770523\n19770524\n19770525\n19770525a\n19770526\n19770527\n19770528\n19770529\n19770530\n19770531\n19770601\n19770602\n19770603\n19770604\n19770605\n19770606\n19770607\n19770608\n19770609\n19770610\n19770611\n19770612\n19770613\n19770614\n19770615\n19770616\n19770617\n19770618\n19770619\n19770620\n19770621\n19770622\n197706220\n19770623\n19770624\n19770625\n19770626\n19770627\n19770628\n19770629\n19770630\n19770631\n19770701\n19770702\n19770703\n19770704\n19770705\n19770706\n19770707\n19770708\n19770709\n19770710\n19770711\n19770712\n19770713\n19770714\n19770715\n19770716\n19770717\n19770718\n19770719\n19770720\n19770721\n19770722\n19770723\n19770724\n19770725\n19770726\n19770727\n19770728\n19770729\n19770730\n19770731\n19770801\n19770802\n19770803\n19770804\n19770805\n19770806\n19770807\n19770808\n19770809\n19770810\n19770811\n19770812\n19770813\n19770814\n19770815\n19770816\n19770817\n19770818\n19770819\n19770820\n19770821\n19770822\n19770823\n19770824\n19770825\n19770826\n19770827\n19770828\n19770829\n19770830\n19770831\n19770901\n19770902\n19770903\n19770904\n19770905\n19770906\n19770907\n19770908\n19770909\n19770910\n19770911\n19770912\n19770913\n19770914\n19770915\n19770916\n19770917\n19770918\n19770919\n19770920\n19770921\n19770922\n19770923\n19770924\n19770925\n19770926\n19770927\n19770928\n19770929\n19770930\n19770931\n19771001\n19771002\n19771003\n19771004\n19771005\n19771006\n19771007\n19771008\n1.9771E+11\n19771009\n19771011\n19771012\n19771013\n19771014\n19771015\n19771016\n19771017\n19771018\n19771019\n19771021\n19771021a\n19771022\n19771023\n19771024\n19771025\n19771026\n19771028\n19771029\n19771030\n19771031\n19771101\n19771102\n19771103\n19771104\n19771106\n19771107\n19771108\n19771109\n19771110\n19771111\n19771112\n19771113\n19771114\n19771115\n19771116\n19771117\n19771119\n19771120\n19771121\n19771122\n19771123\n19771124\n19771125\n19771127\n19771128\n19771129\n19771129th\n19771130\n19771131\n19771200\n19771201\n19771202\n19771203\n19771204\n19771205\n19771206\n19771207\n19771208\n19771209\n19771210\n19771211\n19771212\n19771213\n19771214\n19771215\n19771216\n19771217\n19771218\n19771219\n19771220\n19771221\n19771222\n19771223\n19771224\n19771225\n19771226\n19771227\n19771228\n19771229\n19771230\n19771231\n19771234\n197712345\n19771314\n19771972\n19771973\n19771974\n19771976\n1.9772E+11\n19771978\n19771979\n19771980\n19771981\n19771982\n19771983\n19771984\n19771997\n19772000\n19772001\n19772002\n19772004\n19772008\n19772311\n19772528\n19772777\n1977513\n1977513.198\n19775151\n19777200\n19777777\n19777791\n1977821905\n1977842135\n19778630\n197786432\n19778899\n197797mfj\n19779898\n1977ab!1\n1977abcd\n1977wwk$\n1977xiao\n1978-0802\n19780000\n1978001117\n19780101\n19780102\n19780103\n19780103@yj@\n19780104\n19780105\n19780106\n19780107\n19780108\n19780109\n19780110\n19780111\n19780112\n19780113\n19780114\n19780115\n19780116\n19780117\n19780118\n19780119\n19780120\n19780121\n19780122\n19780123\n19780124\n19780125\n19780126\n19780127\n19780128\n19780129\n19780129pp\n19780130\n19780131\n19780201\n19780202\n19780203\n19780204\n19780205\n19780206\n19780207\n19780208\n19780209\n19780210\n19780211\n19780212\n1978021212\n19780213\n19780214\n19780215\n19780216\n19780217\n19780218\n19780219\n19780220\n19780221\n19780222\n19780223\n19780224\n19780225\n19780226\n19780227\n19780228\n19780229\n19780230\n19780231\n19780301\n19780302\n19780303\n19780304\n19780305\n19780306\n19780307\n19780308\n19780309\n19780309zhy\n19780310\n19780311\n19780312\n19780313\n19780314\n19780315\n19780316\n19780317\n19780318\n19780319\n19780320\n19780321\n19780322\n19780323\n19780324\n19780325\n19780326\n19780327\n19780328\n19780329\n19780330\n19780331\n19780401\n19780402\n19780403\n19780404\n19780405\n19780406\n19780407\n19780408\n19780409\n19780410\n19780411\n19780412\n19780413\n19780414\n19780415\n19780416\n19780416hyb\n19780417\n19780418\n19780419\n19780419atggy\n19780420\n19780421\n19780422\n19780423\n19780424\n19780425\n19780426\n19780427\n19780428\n19780429\n19780430\n19780431\n19780501\n19780502\n19780503\n19780504\n19780505\n19780506\n19780507\n19780508\n19780509\n1.97805E+11\n19780510\n19780511\n19780512\n19780513\n19780514\n19780515\n19780516\n19780517\n19780518\n19780519\n19780520\n19780521\n19780522\n19780523\n19780524\n19780525\n19780526\n19780527\n19780528\n1978052829\n19780529\n19780530\n19780531\n19780601\n19780602\n19780603\n19780604\n19780605\n19780606\n19780607\n19780608\n19780609\n19780610\n19780611\n19780612\n19780613\n19780614\n19780615\n19780616\n19780617\n19780618\n19780619\n1.97806E+11\n19780620\n19780621\n19780622\n19780623\n19780624\n19780625\n19780626\n19780627\n19780628\n19780629\n19780630\n19780631\n19780701\n19780702\n19780703\n19780704\n19780705\n19780706\n19780707\n19780708\n19780709\n19780710\n19780711\n19780712\n19780713\n19780714\n19780715\n19780716\n19780717\n19780718\n19780719\n19780720\n19780721\n19780722\n19780723\n19780724\n19780725\n19780726\n19780727\n19780728\n19780729\n19780730\n19780731\n19780801\n19780802\n19780803\n19780804\n19780805\n19780806\n19780807\n19780808\n19780809\n19780810\n19780811\n19780812\n19780813\n19780814\n19780815\n19780816\n19780817\n19780818\n19780819\n19780820\n19780821\n19780822\n19780823\n19780824\n19780825\n19780826\n19780827\n19780828\n19780829\n19780830\n19780831\n19780901\n19780902\n19780903\n19780904\n19780905\n19780906\n19780907\n19780908\n19780909\n19780910\n197809100\n19780911\n19780912\n19780913\n19780914\n19780915\n19780916\n19780917\n19780918\n19780919\n19780920\n19780921\n19780922\n19780923\n19780924\n19780925\n19780927\n19780928\n19780929\n19780930\n19780931\n19781002\n197810028\n19781003\n19781004\n19781005\n19781006\n19781007\n19781008\n19781009\n19781013\n19781014\n19781016\n19781017\n19781019\n1.9781E+11\n19781020\n19781024\n19781027\n19781029\n19781030\n19781031\n19781102\n19781103\n19781105\n19781106\n19781107\n19781108\n19781109\n19781110\n19781114\n19781117\n19781119\n19781123yll\n19781124\n19781125\n19781127\n19781129\n19781130\n19781131\n1978114000\n1978115312\n19781188\n19781201\n19781204\n19781205\n19781206\n19781207\n19781208\n19781209\n19781213\n19781214\n19781216\n19781217\n1.97812E+11\n19781219\n19781222\n19781227\n19781227001\n19781229\n19781231\n19781234\n1978123456\n19781240\n1978126w\n197812ab\n197812lg\n19781973\n19781974\n19781975\n19781976\n19781977\n1.9782E+11\n19781979\n19781980\n19781981\n19781982\n19781983\n19781984\n19781985\n19781986\n19781987\n19781996\n19782000\n19782001\n19782004\n19782006\n19782008\n19782129\n19782190\n19782222\n19782302\n19782552\n19784600\n1978514619\n19785600\n19785835\n19786219\n19786254296\n19786666\n19787878\n197880520\n19788791\n19788888\n197891025\n1978917815\n19789180\n19789188\n19789200\n1.97893E+13\n19789661\n19789790\n197899611\n1978aa9918\n1978abcd\n1978hyukho\n1978jing\n1978sldydu\n19790000\n19790101\n19790102\n19790103\n19790104\n19790105\n19790106\n19790107\n19790108\n19790109\n19790110\n19790111\n19790112\n19790113\n19790114\n19790115\n19790116\n19790117\n19790118\n19790118jay\n19790119\n19790120\n19790121\n19790122\n19790123\n19790124\n19790125\n19790126\n19790127\n19790128\n19790129\n19790130\n19790131\n1979019790\n19790201\n19790202\n19790204\n19790205\n19790206\n19790207\n19790208\n19790209\n19790209lili\n19790210\n19790211\n19790212\n1.97902E+11\n19790213\n19790214\n19790215\n19790216\n19790217\n19790218\n19790218abcd\n19790219\n19790220\n19790221\n19790222\n19790223\n19790224\n19790225\n19790226\n19790227\n19790228\n19790229\n19790230\n19790231\n19790301\n19790302\n19790303\n19790304\n19790305\n19790306\n19790307\n19790308\n19790309\n19790310\n19790311\n19790312\n19790313\n19790314\n19790316\n19790317\n19790319\n19790320\n19790321\n19790322\n19790323\n19790324\n19790325\n19790326\n19790327\n19790328\n19790329\n19790330\n19790331\n19790401\n19790402\n19790403\n19790404\n19790405\n19790406\n19790407\n19790407yqb\n19790408\n19790409\n19790410\n19790411\n19790412\n19790413\n19790414\n19790415\n19790416\n19790417\n19790418\n19790419\n19790420\n19790421\n19790422\n19790423\n19790424\n19790425\n19790426\n19790427\n19790428\n19790429\n19790430\n19790431\n19790501\n19790502\n19790502yqb\n19790503\n19790504\n19790505\n1.97905E+11\n19790506\n19790507\n19790508\n19790509\n19790510\n19790511\n19790512\n19790513\n19790514\n19790515\n19790516\n19790517\n19790518\n19790519\n19790520\n19790521\n19790522\n19790523\n19790524\n19790525\n19790526\n19790527\n19790528\n19790529\n19790530\n19790531\n19790601\n19790602\n19790603\n19790604\n19790605\n19790606\n19790607\n19790608\n19790609\n19790610\n19790611\n19790612\n19790613\n19790614\n19790615\n19790616\n19790617\n19790617520\n19790618\n19790619\n19790620\n19790621\n19790622\n19790623\n19790624\n19790625\n19790626\n19790627\n19790628\n19790629\n19790631\n19790701\n19790702\n19790703\n19790704\n19790705\n19790706\n19790707\n19790708\n19790709\n19790710\n19790711\n19790712\n19790713\n19790714\n19790715\n19790716\n19790717\n19790718\n19790719\n19790720\n19790721\n19790722\n19790723\n19790724\n19790725\n19790726\n19790727\n19790728\n19790729\n19790730\n19790731\n19790801\n19790802\n19790803\n19790804\n19790805\n19790806\n19790807\n19790808\n19790809\n19790810\n19790811\n19790812\n19790813\n19790814\n19790815\n19790815aaaa\n19790816\n19790817\n19790818\n1.97908E+11\n19790819\n19790820\n19790821\n19790823\n19790823891\n19790824\n19790825\n19790826\n19790827\n19790828\n1.97908E+15\n19790829\n19790830\n19790831\n19790901\n19790902\n19790903\n19790904\n19790905\n19790906\n19790907\n19790908\n19790910\n19790911\n19790912\n19790913\n19790914\n19790915\n19790917\n19790918\n19790919\n19790920\n19790921\n19790922\n19790923\n19790924\n19790925\n19790926\n19790927\n19790928\n19790929\n19790930\n19790931\n19791002\n19791003\n19791004\n19791005\n19791006\n19791007\n19791009\n19791010kt\n19791011\n19791014\n19791016\n19791017\n19791018\n1.9791E+11\n19791028a\n19791031\n19791070\n19791103\n19791106\n19791107\n19791110\n19791112\n19791113\n19791114\n19791115\n19791116\n19791117\n19791118\n19791121\n1979112100\n19791122\n19791124\n19791126\n1.97911E+11\n19791129\n19791130\n19791131\n19791200\n19791201\n19791202\n19791202n\n19791203\n19791204\n19791205\n19791206\n19791207\n19791209\n19791210\n1979121029\n19791211\n19791215\n19791216\n19791219\n19791221\n19791222\n19791223\n19791227\n1979122b\n19791230\n19791231\n19791232\n19791234\n197912mm\n19791314\n19791975\n19791976\n19791977\n19791978\n1.9792E+11\n19791980\n19791981\n19791982\n19791983\n19791984\n19791985\n19791986\n19791987\n19791988\n19791997\n19792000\n19792001\n19792002\n19792003\n19792004\n19792005\n19792008\n19792009\n19792100\n19792140\n1979215252\n1979216138\n19792222\n19792315\n19792400\n19792826\n19793100\n19793721\n19793800\n19794273\n197942xyx\n19794501\n19794949\n19795240\n19795276\n1979618156\n19796200\n19796488\n19796868\n197972562\n197976woaini\n19797979\n19797981\n1979799701\n19798062\n19798188\n197981woaini\n19798200\n19798230\n19798800\n19798888\n1979905112\n19799210\n1979924825\n19799621\n19799791\n1979chen\n19800000\n1.98E+11\n19800102\n19800103\n19800104\n19800105\n19800106\n19800107\n19800108\n19800109\n19800110\n19800111\n19800112\n19800113\n19800114\n19800115\n19800116\n19800117\n19800118\n19800119\n19800120\n19800121\n19800122\n19800123\n19800124\n19800125\n19800126\n19800127\n19800128\n19800129\n19800130\n19800131\n19800201\n19800202\n19800203\n19800204\n19800205\n19800206\n19800207\n19800208\n19800209\n19800210\n19800211\n19800212\n19800213\n19800214\n19800215\n19800217\n19800218\n19800219\n19800220\n19800221\n19800222\n19800223\n19800224\n19800225\n19800226\n19800227\n19800228\n1.98002E+11\n19800229\n19800230\n19800231\n198002789\n19800301\n19800302\n19800303\n19800304\n19800305\n19800306\n19800307\n19800308\n19800309\n19800310\n19800311\n19800313\n19800314\n19800315\n19800316\n1.98003E+15\n19800317\n19800318\n19800319\n19800320\n19800321\n19800322\n19800323\n19800324\n19800325\n19800326\n19800327\n19800328\n19800329\n19800330\n19800331\n198004000\n19800401\n19800402\n19800403\n19800404\n19800406\n19800407\n19800408\n19800409\n19800410\n19800411\n19800412\n19800413\n19800414\n19800415\n19800416\n19800417\n19800418\n19800419\n19800420\n19800421\n19800422\n19800423\n19800424\n19800425\n19800426\n19800427\n19800428\n19800429\n19800430\n19800431\n19800438\n19800501\n19800502\n19800503\n19800504\n19800505\n19800506\n19800507\n19800508\n19800509\n19800510\n19800511\n19800512\n19800513\n19800514\n19800515\n19800516\n19800517\n19800518\n19800519\n19800520\n19800521\n19800522\n19800523\n19800524\n19800525\n19800526\n19800527\n19800528\n19800529\n19800530\n19800531\n19800601\n19800602\n19800603\n19800604\n19800605\n19800606\n19800607\n19800608\n19800609\n19800610\n19800611\n19800612\n19800614\n19800615\n19800616\n19800617\n19800618\n19800619\n19800620\n19800621\n19800622\n19800623\n19800624\n19800625\n19800626\n19800627\n19800628\n19800629\n19800630\n19800631\n19800701\n19800702\n19800703\n19800704\n19800705\n19800706\n19800707\n19800708\n19800709\n19800710\n19800711\n19800712\n19800713\n19800714\n19800715\n19800716\n19800717\n19800718\n19800719\n19800720\n19800721\n19800722\n19800722ln\n19800723\n19800724\n19800725\n19800726\n19800727\n19800728\n19800729\n19800730\n19800731\n19800801\n19800802\n19800803\n19800804\n19800805\n19800806\n19800807\n19800808\n19800809\n19800810\n19800811\n19800813\n19800814\n19800815\n19800816\n19800817\n19800818\n19800820\n19800821\n19800822\n19800823\n19800824\n19800825\n19800826\n19800827\n19800828\n19800829\n1980082991\n19800829nic\n19800830\n19800831\n19800891\n19800901\n19800902\n19800903\n198009031\n19800904\n19800905\n1.98009E+11\n19800906\n1980090600\n19800907\n19800908\n19800909\n19800910\n19800911\n19800912\n19800913\n19800914\n19800915\n19800917\n19800918\n19800919\n198009190\n19800920\n19800921\n19800922\n19800923\n198009239\n19800924\n19800925\n19800926\n19800927\n19800928\n19800929\n19800930\n19800931\n198009lkj\n19801002\n19801004\n19801006\n19801008mj\n1980102130\n19801030\n19801031\n1980103122\n19801070\n19801101\n198011022\n1.98011E+11\n19801104\n19801113\n19801114gd\n1980111666\n198011185\n19801122a\n19801131\n19801180\n19801188\n19801200\n19801202\n19801203\n1980120579\n19801209\n1.98012E+11\n19801211ssxx\n1980121421\n1980121a\n19801222\n19801227\n19801234\n198012345\n1980123456\n19801280\n198012sr\n19801314\n198014521\n19801806\n19801922\n19801949\n19801970\n19801975\n19801976\n19801977\n19801978\n19801979\n1.9802E+11\n1.9802E+14\n19801981\n19801982\n19801983\n19801984\n19801985\n19801986\n19801990\n19801999\n19802000\n19802001\n19802002\n19802003\n19802004\n19802005\n19802008\n19802009\n19802222\n19802270\n19802323\n19802525\n19803012\n19803100\n1980311981\n19803230\n19803250\n19803500\n19804010\n19804050\n19804520\n19804549\n198045624\n198045ilu\n19805100\n198051lx\n19805250\n19805255\n19805896\n19806170\n19806200\n19806205639\n198062420\n19806688qp\n1.98072E+11\n1980721321\n1980721831\n198077007\n19808015\n19808018\n19808027\n19808080\n19808083\n19808088\n1980880101\n19808888\n198088cl\n1980911520\n19809130\n19809300016\n1.98095E+12\n19809999\n1980abcd\n1980shus\n1980tian\n1980wang\n1980woaini\n1980yang\n1981.10.02\n19810000\n19810011\n19810102\n19810103\n1981010355\n19810104\n19810105\n19810106\n19810107\n19810108\n19810109\n19810110\n19810111\n19810112\n19810113\n19810114\n19810115\n19810117\n19810118\n19810120\n19810122\n19810123\n19810125\n19810127\n19810128\n19810129\n19810130\n19810131\n19810131eeee\n198101dc\n19810204\n19810205\n19810207\n19810208\n19810209\n19810210\n19810211\n19810215\n19810216\n19810218\n19810220\n19810222\n19810223\n19810224\n19810225\n19810226\n19810227\n19810229\n19810230\n19810231\n19810302\n19810303\n19810305\n19810308\n19810309\n198103091\n19810313\n1981031303\n19810315\n19810316\n19810317\n19810319\n19810321\n19810322\n19810324\n19810326\n19810328\n19810329\n19810330\n19810331\n19810401\n19810402\n19810403\n19810404\n19810405\n19810406\n19810407\n19810408\n19810409\n19810410\n19810411\n19810411aiq\n19810413\n19810414\n19810415\n19810417\n19810418\n19810419\n19810420\n19810421\n19810422\n19810423\n19810424\n19810426\n19810427\n19810428\n19810429\n19810430\n19810431\n19810501\n19810502\n19810503\n19810505\n19810506\n19810507\n19810508\n19810509\n19810511\n19810512\n19810513\n19810514\n19810515\n19810516\n19810517\n19810518\n19810519\n19810520\n19810522\n19810523\n19810524\n19810525\n19810526\n19810529\n19810530\n19810531\n19810602\n19810603\n19810604\n19810605\n19810607\n19810608\n19810611\n19810612\n19810613\n19810614\n19810615\n19810616\n19810622\n19810625\n19810630\n19810631\n19810702\n19810703\n1981070303\n19810704\n19810706\n19810708\n19810709\n19810710\n1981071212\n19810713\n19810714\n19810715\n19810716\n19810717\n19810718\n19810720zl\n19810722\n19810724\n19810725\n19810726\n19810727\n19810728\n19810729\n19810730\n19810731\n19810802\n19810803\n19810804\n19810805\n19810806\n19810807\n19810809\n19810809king\n19810810\n19810811\n19810814\n19810818\n19810819\n19810820\n19810821\n19810822\n19810827\n19810829\n19810830\n19810831\n19810903\n19810904\n19810906\n19810907\n19810908\n1981090802\n19810913\n1.98109E+11\n1981091588\n19810931\n19811010lkx\n19811010wn\n19811024chenqian\n19811025wc\n19811031zyw\n1981108141\n19811104520\n19811105xb\n1981111626\n19811128cissy\n19811129510\n19811131\n19811204yyy\n198112107xk\n19811215jn\n19811225a\n19811230aa\n1.98112E+13\n19811234\n1981123456\n1981125215\n19811260\n1981128mayanwei\n19811290\n19811314\n19811318\n1981151228\n19811628\n19811891\n198118lx\n198118mm\n19811969\n19811976\n19811977\n19811978\n19811979\n19811980\n1.9812E+11\n19811982\n19811983\n19811984\n19811985\n19811986\n19811987\n19811988\n19812000\n19812001\n19812002\n19812005\n19812006\n19812009\n19812010\n19812020\n19812121\n19812222\n198122600\n198122842\n19812335\n19812345\n19812400\n19812747\n19812800\n1981312123\n19813145\n1.98132E+13\n19813210\n19813344\n19813347\n1981391225\n19814024\n1981417ch\n19814200\n19814210\n1.98142E+12\n19814255\n19814260\n1981426520\n1.98143E+11\n1.98145E+11\n19814800\n19814935\n19815100\n1981510kzb\n1.98151E+11\n19815120\n1981515412\n1.98152E+12\n1981518c\n19815190\n19815200\n1981520520\n1981520y\n19815210\n1.98153E+13\n1981525520\n1981528ws\n19815364\n19815566\n19815615\n19815678\n1981576893\n1981618666\n19816208\n1981622126\n1981622911\n19816253\n19816270\n19816600\n19816676\n19816677\n19816688\n198169vic\n19817120\n19817180\n1981719618\n1981720123\n1981720819\n1981721218\n19817230\n1981723hy\n19817260\n19817310\n19817564\n198175love\n19817600\n19817711\n19817755\n19817767\n19818024\n19818025\n19818130\n1981815520\n1981815912\n19818181\n19818191\n1981819520\n198182703\n19818283\n198185lb\n19818794\n19818888\n19818899\n19819022\n19819026\n19819200\n19819230\n1981927zlL\n1981929520\n19819367\n19819612\n198198215\n198198kin\n1981991930\n19819999\n1981ABCD\n1981asdf\n1981chen\n1981love\n1981lqyLQY\n1981nian\n1981tao*\n1981wang\n1981yjy79\n1981zhang\n1981zx98\n1982.527\n19820000\n19820011\n1.982E+11\n19820117x\n19820131\n1.98202E+11\n19820208wl\n19820212521\n19820215q\n19820223\n19820224\n19820225\n19820229\n19820230\n19820231\n1.98203E+15\n19820306nihaoma\n198203081\n19820313zf\n19820325**\n19820326\n19820331\n1982040899\n19820430\n19820431\n19820475\n19820507\n19820509\n19820511\n19820513\n19820522\n19820531\n19820630\n19820631\n19820706\n1.98207E+11\n1982071218\n19820727\n19820730\n1.98207E+12\n19820731\n19820823a\n1982082695\n19820828xy\n19820831\n1982090175\n19820904zbyyhm\n19820907xjy\n19820909281\n19820931\n1982100564\n19821005f\n1982101009\n1982101010\n1.9821E+11\n1982101815\n19821020074\n19821020l\n198210222\n1982102318\n19821023520\n1982102599\n198210266\n19821030ee\n19821050\n198210yh\n19821100\n1.98211E+11\n19821101andy\n19821109!@#\n1982111316\n19821115as\n1982111718\n1982112221\n1.98211E+13\n1982112900\n19821131\n198211466\n19821150\n1982116052\n1982119sh\n19821200\n19821212A\n19821213r2\n19821214a\n1.98212E+11\n198212212\n19821226tina\n1982122800\n19821234\n1982123456\n19821240\n198212456\n19821250\n198212611\n19821279\n19821280\n198212800\n19821310\n19821313\n19821314\n1982131400\n198215XYZ-1\n19821600\n19821680\n19821800\n19821818\n19821829\n198219191\n19821949\n19821953\n19821956\n19821972\n19821974\n19821976\n19821977\n19821978\n19821979\n19821980\n19821981\n1982198200\n1.9822E+11\n19821983\n19821984\n19821985\n19821986\n19821987\n19821988\n19821994\n19821997\n19821998\n19821999\n19822000\n19822001\n19822002\n19822003\n19822004\n19822006\n19822007\n19822009\n19822010\n19822120\n19822219\n19822222\n1.98223E+11\n19822300\n1982230304\n19822447\n1982272204\n19822891\n1982302821\n19823120\n19823130\n198231521\n1982315kzj\n19823178\n19823187\n19823200\n19823210\n19823240\n1982324369\n1982326419\n198232za\n19823456\n19823520\n19823546\n198235zz\n1.98237E+11\n19823721\n198237645\n1982376455\n19823841\n1.98241E+12\n1.98241E+15\n19824100\n1982410yy\n19824150\n19824160\n1982417tom\n19824180\n19824210\n19824250\n19824260\n19824280\n19824400\n19824416\n198246pk\n19824753\n198247qyf\n19824800\n19824913\n19825100\n19825122\n1982513520\n19825136\n19825150\n1982518660\n19825201314\n1982520520\n19825210\n19825230\n19825240\n19825300\n19825426\n19825858\n1982585858\n19826020\n19826024\n19826028\n19826130\n1982616425\n19826190\n19826200\n198262001\n1982624qqq\n19826270\n19826290\n1982629aj\n19826314\n1982641550\n198264feihaixi\n19826666\n19826688\n19826799\n19827120\n19827140\n19827180\n198271808\n1982721721\n19827300\n198275823\n19827613\n19827618306\n1982761925\n19827711\n19827769\n19827771a\n19828024\n19828060\n1982810wyz\n19828120\n19828150\n1982815s\n19828160\n19828190\n198281900\n198281AJ\n1982820o0o00o\n19828210\n19828227\n19828230\n19828280\n19828281\n19828282\n1982830712\n19828310\n1982831yue\n19828384\n19828486\n19828488\n19828888\n19828900\n19829016\n19829018\n19829019\n19829020\n19829028\n19829100\n1982911828\n19829130\n1982915E\n198291645\n198292183\n198292202\n19829230\n19829240\n19829250\n19829261\n1982926acd\n198292wcq\n19829300\n198296123\n19829800\n19829911\n19829999\n1982@1982\n1982@ygq250717\n1982abcd\n1982asdf\n1982chen\n1982GONZO\n1982guxing\n1982huangwenrui\n1982nian\n1982nowind\n1982sina\n1982Spa02\n1982wang\n1982yang\n1982year\n1982zhao\n1983-6-29\n19830000\n1983000527\n198301055\n19830109@z\n19830124abc\n19830129dd\n19830129yq\n19830131\n19830205*vv\n19830210125\n1983021057\n19830216520\n19830220LJ\n19830229\n19830230\n19830231\n1983031110\n1.98303E+11\n19830319\n19830319999\n19830320wang\n19830322\n19830331\n19830403\n19830406123\n19830409\n1.98304E+11\n19830413\n1983041937\n19830430\n19830431\n19830501511\n1.98305E+11\n19830509\n19830530\n19830531\n1983061990\n19830624q\n19830630\n19830631\n1983070233\n19830712zrl\n19830730\n19830731\n19830802\n19830814jiang\n19830822sll\n19830823306\n198308240\n1.98308E+11\n19830831\n198309040\n19830907ok\n19830907wm\n19830931\n198310....\n1.9831E+11\n19831009a\n1.9831E+12\n19831013tx\n198310201\n1983102312\n19831024210\n19831031521\n19831100\n19831101qq\n1983110200\n198311051\n1983111000\n198311120\n19831116zz\n19831119829\n1.98311E+11\n1983112311\n19831124666\n19831125bmx\n1983112630\n19831131\n1.98311E+12\n1.98311E+13\n198311363\n198311520\n19831160\n1983118lz\n1983118nic\n19831190\n19831200\n1983120310930yy\n1983120612\n19831207lx\n1983121400\n19831214568\n198312148\n19831218lf\n1983121dang\n19831222lyly\n19831222rxb\n198312300\n19831230aa\n19831232\n19831234\n1983123456\n19831240\n19831259\n19831260\n198312777\n19831290\n19831300\n1983130130\n19831313\n19831314\n19831314520\n19831412\n19831516\n1.98315E+11\n19831800\n19831810\n19831818\n19831971\n19831978\n19831979\n19831980\n19831981\n19831982\n1.9832E+11\n19831983v\n19831984\n19831985\n19831986\n19831987\n19831988\n19831991\n19831993\n19831998\n19831999\n19832000\n19832001\n19832004\n19832005\n19832006\n19832007\n19832009\n19832013\n19832014\n19832035\n19832100\n1983211abcd\n19832121\n1983212lay\n19832140\n19832160\n19832194408\n198322245\n19832231\n19832233\n198322411lww\n1983225123\n1983225525\n19832310\n1983231125\n198323520\n19832500\n19832510\n19832600\n19832626\n19833120\n1983313abbcd\n1983319gpf\n19833211\n1.98332E+12\n1983327168\n1983327509\n1983330216\n19833313\n1983331333\n1983355150\n198336zj\n1983382002\n19833846\n19833883\n19833891\n19834100\n1.98341E+11\n1983412207\n1983412jj\n1983414046\n198341810\n1983418abc\n19834210\n19834220\n19834230\n19834235\n1983427czc\n1983437412\n198344oyh\n19834500\n19834700\n1983483466\n19834865\n19835100\n1983510rage\n19835170\n19835180\n19835190\n1983519416\n1983519422\n19835200\n1983520520\n19835210\n19835280\n1983528416\n1.98353E+11\n1983530520\n19835659\n19835722\n19835940\n19836120\n19836180\n19836190\n19836200\n19836207\n19836258\n19836260\n19836300\n19836710\n19836912\n198369912\n19837120\n19837200\n19837210\n19837288710\n19837300\n198375ab\n198379345\n19838170\n19838181\n19838210\n198382123\n19838270\n19838326\n19838383\n19838384\n19838587\n198387629\n19838888\n19839110\n19839150\n19839160\n19839200\n1983922922\n19839290\n198393521\n19839500\n198397fly\n19839898\n1983990414\n19839999\n198399qj\n1983a1102\n1983abcd\n1983abzd\n1983f12j\n1983huangyu\n1983king\n1983love\n1983wewe\n1983wwx99\n1983xjgz\n1983yang\n1983zhou910yang\n1984.2.3\n19840000\n198400119\n198400803\n1984011700\n1.98401E+11\n19840118lili\n19840228juanjuan\n19840230\n19840231\n19840307xjx\n19840310cc\n19840317118\n1.98403E+11\n19840330\n19840331\n19840349\n1.98404E+11\n19840406\n19840418010\n19840425\n19840430\n19840431\n19840528c\n1984052902\n1984052903\n19840530\n19840531\n198405ss\n19840604aa\n1984061078\n19840630\n19840630520\n19840631\n19840704jin\n19840708f\n19840713ssq\n19840719\n1.98407E+11\n19840727\n19840727100\n19840731\n19840807a\n19840827a\n19840830\n19840831\n19840905.zjm\n19840913gn\n1.98409E+11\n19840924xu\n19840931\n19841009yygt\n19841010a\n19841010pmh\n19841013520\n19841020l\n1984102100\n198410241\n198410243\n19841024zztl\n19841026zwc\n19841027qq\n19841044\n19841052\n19841062\n19841080\n19841100\n1.98411E+15\n1.98411E+12\n198411248\n1984112599\n198411260\n1984112900\n19841131\n19841150\n1984116304\n19841166\n19841180\n19841182129\n1984118xh\n1.98412E+11\n198412100\n1984121212\n19841212abc\n1984121314\n1984121568\n19841222psp\n1.98412E+13\n198412300\n198412315\n19841234\n1984123456\n19841250\n19841270\n1984128000\n198412abcd\n19841310\n19841314\n19841627\n19841818\n19841857\n19841919\n19841955\n19841958\n19841976\n19841980\n19841981\n19841982\n19841983\n1.9842E+11\n1984198490\n19841985\n19841986\n19841987\n19841988\n19842001\n19842002\n19842004\n19842005\n19842006\n19842007\n19842010\n19842046\n19842100\n1984212314\n19842129\n1984213s\n1984219180\n19842211abc\n1.98422E+11\n19842220\n19842222\n19842234\n1984226llb\n19842288\n1984229331\n19842323\n19842411\n19842424\n1984259503\n19842739\n19842918\n19843020\n1984308che\n19843100\n198431018\n1984310chris\n19843120\n19843141\n19843150\n19843200\n19843210\n1984321121\n1984322lcl\n19843230\n1984326326\n198432911\n19843321\n198433333\n19843500\n1984351014\n198435328\n19843619\n198436xjy\n19843826\n19843848\n1984387860\n198441244\n1984412821\n19844160\n19844258388\n19844260\n19844300\n198443535\n198444hbw\n19844858\n19844891\n19845108\n19845110\n1984511lbc\n19845130\n19845140\n1984516zen\n19845170\n1984519523\n19845200\n19845201\n19845201314\n19845210\n19845250\n19845270\n19845280\n1984528yan\n19845290\n198454cr\n19845660198\n19845678\n19845766\n19845818\n1984592296\n19846177\n19846180\n198461pink\n19846200\n19846210\n1984628520\n19846306810\n19846455\n19846666\n19846758\n19847100\n198471233\n19847136\n19847149\n19847163\n198471830\n198472000\n19847210\n1984721817\n198472503\n19847305\n19847310\n19847466\n19847500\n19847722\n19847769\n19847788\n198478170\n198478170b\n19848130\n19848170\n19848188\n19848210\n198482131\n1984822d\n1984826hx\n19848270\n19848280\n19848484\n19848579\n19848586\n19848688\n198488712\n19848888\n19849100\n1984910520\n1984911922\n1.98491E+11\n19849130\n19849160\n1984919822\n19849211\n1984923000\n19849260\n19849266\n19849270\n19849700\n198498bbg\n19849999\n1984abcd\n1984ala35\n1984andy\n1984anji\n1984asdf\n1984chen\n1984erza\n1984jerry\n1984king\n1984leon\n1984love\n1984o556\n1984sega\n1984weilai\n1984yuanjing\n1984zhou\n1985-0226\n19850019\n1985001lw\n1985012011\n1.98501E+11\n19850131\n19850201mm\n1.98502E+11\n19850229\n19850230\n19850231\n19850316lw\n1.98503E+13\n198503233\n19850328473\n19850331\n19850405\n19850407\n1.98504E+11\n19850420lj\n19850430\n19850431\n19850514hnwml\n19850516xu\n19850531\n1.98506E+11\n19850621y\n19850631\n1.98507E+11\n19850727002\n19850731\n19850807as\n1985082277\n198508291\n19850830\n19850831\n19850909a\n1.98509E+11\n1985092322\n19850931\n19851000\n19851002900\n1.9851E+11\n1985100600\n198510111\n1985101123\n198510123\n198510180\n1985102299\n198510250\n198510258\n1985104502\n19851050\n19851090\n19851100\n198511000\n198511007\n1985110119\n19851103mt\n198511111\n1985111958\n1985112313\n19851125zl\n1985112615\n1985112647\n1985112800\n19851131\n1985114gyLL521\n19851150\n19851158\n19851180\n19851188\n1985118ae9\n198512.01\n19851200\n1985120400\n19851204wxwx\n198512110\n198512120\n1985121212\n19851215a\n198512170\n1.98512E+11\n1985121l\n1985122700\n1985123123\n19851234\n198512345\n1985123456\n19851234567\n19851240\n198512500\n1985125px\n19851267\n19851270\n19851278\n1985128bd\n198512ASDFGz\n19851310\n19851314\n19851417\n1985144144\n19851515\n198516QIN\n19851720\n19851818\n19851919\n1985194522\n1985196673\n19851979\n19851980\n19851981\n19851982\n19851983\n19851984\n1.9852E+11\n19851986\n19851987\n19851987123\n19851988\n19851989\n19851990\n19852000\n19852002\n19852004\n19852005\n1985201559\n19852046\n19852160\n19852200\n19852222\n1.98522E+11\n198522588\n1985227xqx\n1.98523E+11\n198526110\n19852828\n19853010\n19853090\n19853100\n19853160\n198531800\n1985321321\n1985324333\n19853246\n19853333\n1.98535E+11\n19854110\n19854120\n1985419000\n19854210\n19854220\n1985424a\n1985424faye\n1985424jqz\n198542520\n19854321\n198544516\n19854600\n19855104628\n1985511628\n1.98551E+13\n1985513fjc\n19855151\n198551618\n19855201314\n19855211\n19855250\n1985528\n198553wx\n19855555\n198558520\n19855891\n19856024\n198561288\n19856180\n198561851\n19856202\n19856232323\n19856250\n19856269\n19856600\n19856666\n198569420\n19857100\n19857111\n198571439\n19857180\n19857200\n1985720123\n1985720zqj\n19857211\n1985726822\n19857315\n19857326\n19857438912\n19857700\n19857878\n198578hfb\n19857900\n19857912\n19858100\n198581500\n198581520\n19858160\n198581615\n1.98582E+12\n19858210\n19858240\n19858288\n1985829www\n19858511\n19858525\n19858585\n19858687\n19858789\n19858888\n198588922\n1985902mihee\n19859100\n19859123\n19859170\n1.98593E+13\n198592ln\n19859400\n198594911\n19859595\n198595hhy\n19859600\n198598007\n198598724\n19859898\n1985a10b18\n1985a518\n1985abcd\n1985amai\n1985chao\n1985chen\n1985cuijian\n1985h07t28\n1985love\n1985nick\n1985t329x\n1985wang\n1985xiao\n1985yang\n1985yang0128li\n1985zhang\n1985zyjs\n198600!@#\n19860000\n19860097\n19860105YY\n198601144\n19860114tq\n19860126hero\n1986012860lxw\n19860130\n19860131\n19860201900\n198602051\n1986022600\n19860229\n19860230\n19860231\n1.98603E+12\n198603100\n19860331\n19860418emma\n19860423a\n19860430\n19860431\n19860502000\n1986052312\n1.98605E+11\n19860531\n19860614520\n19860614qxj\n19860623zouyin\n19860631\n19860663\n19860713xuzheng\n19860718qy\n19860720241\n198607238\n19860730\n19860731\n1986081277\n1.98608E+11\n19860824q\n19860831\n1.98609E+11\n19860930\n19860931\n19860985\n1.9861E+11\n198610080\n19861009a\n1986101010\n198610123\n19861014521\n198610149\n1986101520\n19861018133\n1986101900\n198610200\n198610221\n19861023ly\n19861028zsh\n1986103++--\n19861031stop\n1986106123\n19861078\n19861100\n19861104lxn\n198611060\n19861111225\n1986111168\n198611123\n19861116081x\n19861119sm\n1986111ksp\n1986112100\n1986112233\n19861124521\n1.98611E+11\n198611280\n19861131\n19861140\n19861142\n19861144\n19861150\n19861160\n19861180\n1986118107\n19861188\n19861190\n19861200\n1.98612E+11\n198612110\n198612120\n19861212520\n198612150\n19861218a\n198612215\n1986122chu\n1986123123\n19861234\n198612345\n1986123456\n19861237\n19861256\n1986126126\n19861280\n19861281\n1986128li\n19861290\n19861299\n19861300\n19861314\n19861326\n198613as\n198614123\n198614huangxin\n19861512\n19861515\n19861616\n19861818\n19861836\n19861943\n19861949\n19861978\n19861980\n19861982\n19861983\n19861984\n19861985\n1.9862E+11\n19861987\n19861988\n19861989\n19861990\n19861991\n19861996\n19862002\n19862003\n19862004\n19862005\n19862007\n19862014\n19862046\n19862100\n19862124\n19862130as\n1986213bb\n19862140\n19862200\n1986220614\n19862211\n19862222\n1986228518\n19862577\n1986270+-\n198627520\n19862911\n198629ff\n19863004\n198631100\n19863121022\n19863130\n1986315mc\n19863169\n1986319427\n19863200\n1986320211\n19863210\n1986323214\n1986323820\n1986327666\n1986342004\n198634lyjy\n19863514\n198635yx\n19863721\n1986389421\n19864141\n198641520\n19864183125\n19864210\n19864242\n19864247615\n19864250\n198642828\n19864343\n198645MIKA\n19865026\n19865100\n19865188\n198651qian\n19865200\n19865201314\n19865210\n198652244\n19865287\n1986529530\n198654123\n198654321\n198654520\n19865566\n19865588\n19865613yyl\n198657410\n198658317\n198658520\n19865941\n19866117\n19866142\n198661520\n1.98662E+11\n1.98662E+12\n19866233\n19866240\n198662425\n19866287\n1986629114\n1986636469\n19866410\n19866471\n19866666\n198667105\n19866891\n19867100\n1.98672E+12\n19867200\n19867321321\n19867702\n19867788\n198678813\n19868023\n19868120\n1986814z\n1986815815\n1986816919\n19868180\n19868250\n1986825825\n1.98683E+11\n19868393\n19868396\n198684qq\n19868686\n19868699\n1986875366\n198687910\n19868800\n1986881455\n19868873\n19868888\n198688wfz\n198689111\n1.98691E+13\n19869100\n19869110\n198691500\n19869170\n19869180\n1986919816\n19869200\n1986920yx\n19869230\n19869250\n1986927111\n1986927824\n198692891\n19869300\n198694520\n1986951127\n19869600\n198697ll\n19869898\n19869986\n1986abcd\n1986AsDf\n1986chen\n1986jing\n1986liuliu\n1986love\n1986tang\n1986wang\n1986xsq1203\n1986yang\n1986zhang\n19870000\n1987010101\n1987010203\n1.98701E+11\n198701060\n19870106a\n198701105\n19870119szl\n19870229\n19870230\n19870231\n19870301lilacs\n19870304love\n1.98703E+13\n1.98703E+15\n19870312q\n19870322520\n198704026\n19870402bbs\n19870405pizza520\n1.98704E+11\n19870431\n19870504ff\n19870504fyl\n19870504lyf\n198705230m\n1.98705E+11\n1.98706E+11\n19870623123\n1987062600\n19870631\n1.98707E+11\n19870705520\n19870731\n19870815ll\n19870818gyf\n198708270\n1987092437\n19870931\n19871006520\n19871010224\n198710120\n19871013xu\n1987101520\n19871015kimi\n1.9871E+11\n19871030ww\n1987109abcd\n19871100\n198711010\n19871106a\n19871110myl\n19871112zhang\n198711145\n19871114yhm\n198711151\n1.98711E+11\n19871122a\n198711260\n19871131\n19871150\n198711520\n198711539\n1987117y\n198712144\n1987121505\n1987121600\n1.98712E+11\n19871225a\n19871234\n198712345\n198712520\n19871305\n19871313\n19871314\n19871318\n1987143121\n198715315\n198716yt\n198717xcq\n19871819\n19871976\n19871979\n19871980\n19871982\n19871983\n19871984\n19871985\n19871986\n1.9872E+11\n19871988\n19871988leisheng\n19871989\n19871990\n19871991\n19872003\n19872004\n19872005\n1987217217\n198721818\n19872200\n19872222\n1987225000\n1987226312\n19872280\n19872288\n19872525\n19872635\n19872800\n19872858\n1.98729E+11\n19873120\n19873122\n1987312520\n1987312lzbwei\n19873210\n1.98732E+11\n1987329918\n19873526\n19873535\n19873627\n198736279\n1.98737E+11\n19873744\n19874100\n198741400\n19874141\n19874200\n19874210\n19874288\n19874444\n19874451\n198748321\n19874855\n19875100\n19875123\n19875133\n1987514520\n1987516ll\n19875201314\n1987520520\n19875210\n19875212\n1987524425\n19875250\n1987526666\n19875301\n19875305\n198753123\n19875353\n1.98754E+11\n1.98754E+12\n19875500\n19875566\n19875656\n19875762\n19876100\n19876110\n19876112\n19876120\n198761491\n19876150\n1987615308\n19876180\n19876210\n198762238\n19876230\n198762427\n19876250\n1987627824\n19876280\n19876282\n19876400\n1987645710\n19876500\n198765123\n19876543\n198765432\n19876666\n19876767\n198768513\n19876882\n19876969\n198770310\n19877166\n19877300\n19877891\n198779tcg\n19878138\n19878150\n198781529\n1987817211\n19878200\n19878210\n198782418\n198783463\n19878369\n1987850293\n198787520\n19878782\n19878787\n198787kuangyun\n198788520\n19878888\n198788930\n19879016\n19879020\n1987910001\n19879110\n1987911520\n1.98791E+12\n19879150\n1987915cy\n19879200\n19879212\n19879230\n1987924258\n198793458\n19879600\n1987961978\n19879686\n198797007\n19879800\n198798520\n1987991031\n1.98799E+11\n198799520\n19879999\n1987abcd\n1987amoqr\n1987boyslove\n1987chen\n1987jing\n1987love\n1987popo\n1987q3b9qbur7200\n1987wang\n1987xiao\n1987yang\n1987zhang\n1987zhao\n19880000\n198800217\n198801158\n19880124xy\n19880128ai\n19880212zj\n19880215weiba\n19880223lxl\n19880230\n19880231\n198802sr\n19880322wer\n1.98803E+11\n19880329527\n19880333\n1.98804E+11\n19880430\n19880431\n19880522wynh\n19880631\n19880711meme=\n1988072407\n19880731\n1.98808E+11\n198808ab\n198808ab198808\n19880902505\n19880902520\n19880907q\n19880918sbl\n19880930\n19880931\n1988101010\n198810143\n19881022sj\n198810230\n1988102815\n1988102987\n19881029yy\n19881030love\n19881088\n19881105zj\n19881110a\n1988111216\n1988112092\n1988112700\n198811300\n19881131\n1988113710\n198811429\n1988115520\n19881200\n19881201jy\n19881217qq.com\n198812210\n19881221aa\n19881222312\n19881234\n1988123sp\n19881245\n19881270\n19881314\n19881515\n1.98819E+11\n19881985\n19881986\n19881987\n1.9882E+11\n19881989\n19881990\n198819jyc\n19881z106l\n19882004\n19882005\n19882046\n19882100\n1.98821E+13\n19882140\n1988217520\n19882180\n19882222\n19882998\n19883075\n19883119887\n1988318*aly\n1988323wz\n1988349868\n198841120\n19884121959\n19885087\n1988526204\n19885276\n198852841\n1988528426\n19885566\n19885836\n1988585858\n19886118\n19886150\n198861700\n198865421\n1988660066\n19886666\n1988712000\n198871308\n198871577\n19887522\n1988793344\n198879mary\n198886yaozhui\n19889980\n1988abcd\n1988comeer\n1988LONG\n1988sang\n1988w44w519w\n1988wang\n1988yang\n1988yangzhu\n19890000\n19890106abz\n19890109qq\n1.98901E+11\n1.98901E+14\n19890131\n19890202yjjHXM\n19890229\n19890230\n19890231\n1989030603\n1989031717\n1989032425\n19890330\n19890331\n19890423TT\n19890424\n19890431\n198905070\n19890530\n19890531\n1989062011\n19890631\n198906@20\n19890703yx\n1.98907E+11\n19890724jie\n19890730\n19890731\n198908013\n19890807\n19890825520\n19890827k\n19890831\n19890930\n19890931\n19891009xxk\n1989101428*-\n198910146\n1.9891E+11\n19891027aaa\n1989103020\n19891112521\n1989112315\n19891131\n1989117jun\n19891203520\n1.98912E+11\n1989121399\n1989121911\n1.98912E+12\n198912300\n19891234\n198912345\n1989129a\n198912wang\n19891314\n19891626\n19891969\n19891987\n1.9892E+11\n19891990\n19891993\n19892005\n19892006\n19892007\n19892200\n19892230\n19892631\n198926xql\n19892747\n1989291700\n1989314pf\n1989317920\n1989318masi\n1989320520\n19893834973\n1989414510\n19894290\n19894295200\n198943aa\n198943abc\n1989511yjy\n19895201314\n1989527527\n1989547221\n1989580868\n198959qq\n1989603000\n1.98961E+11\n19896141\n19896220123\n1989624624\n1989626aijin\n19896464\n198966990\n1989714815\n19897221989\n1989892895\n19898981\n19898989\n198991311\n1989918abc\n1989926m\n19899889\n1989abcd\n1989asas\n1989bapp\n1989d122\n1989love\n1989m1989\n1989s12x15!\n1989wang\n1989zhang\n198A12e2\n198e4E83\n198maiti\n19900000\n19900103\n19900106\n19900107\n19900111\n19900112\n19900114\n19900115\n19900116\n19900117\n19900119\n19900120\n19900121\n19900127\n19900128\n19900129\n19900130\n19900131\n19900204\n19900212\n19900220\n19900221\n19900222\n19900223\n19900224\n19900225\n19900226\n19900229\n19900230\n19900231\n19900302\n19900303\n19900304\n19900305\n19900308\n19900309\n19900310\n19900311\n19900313\n19900315\n19900316\n19900317\n19900318\n19900319\n19900322\n19900323\n1.99003E+11\n19900324\n19900325\n19900326\n19900327\n19900328\n19900330\n19900331\n19900401\n199004016\n19900402\n19900402a\n19900403\n19900404\n19900405\n19900406\n19900407\n19900408\n19900409\n19900410\n19900411\n19900412\n19900413\n19900414\n19900416\n19900417\n19900418\n19900419\n19900420\n19900421\n19900422\n19900423\n19900424\n19900425\n19900426\n19900427\n19900427tom\n19900428\n19900429\n19900430\n19900431\n19900501\n19900502\n19900506\n19900507\n19900508\n19900509\n19900511\n19900514\n19900515\n199005152614zlg@\n19900517\n19900518\n19900519\n19900521\n19900522\n19900524\n19900527\n19900528\n19900529\n19900530\n19900531\n19900601\n19900602\n19900603\n19900604\n19900605\n19900606\n19900607\n19900608\n19900609\n19900610\n19900611\n19900612\n19900613\n19900614\n19900615\n19900616\n19900617\n19900618\n19900619\n19900620\n19900621\n19900622\n19900623\n19900625\n19900626\n19900627\n19900628\n19900629\n19900630\n19900631\n19900701\n19900701s\n19900702\n19900703\n19900704\n19900705\n19900706\n19900708\n19900709\n19900710\n19900710sh711\n19900712\n19900713\n19900714\n19900715\n19900716\n19900717\n19900719\n19900720\n19900721\n19900722\n19900723\n19900724\n19900725\n19900726\n19900727\n19900728\n19900729\n19900730\n19900731\n19900802\n19900803\n19900804\n19900805\n19900806\n19900807\n19900808\n19900809\n19900810\n19900812\n19900813\n19900814\n19900814s\n19900815\n19900816\n19900817\n19900819\n19900821\n19900822\n19900823\n19900825\n19900826\n19900827\n19900828\n19900829\n19900830\n19900831\n19900901\n19900902\n19900903\n19900904\n19900905\n19900906\n19900907\n1.99009E+11\n19900908\n19900909\n19900911\n19900912\n19900913\n19900914\n19900915\n19900917\n19900918\n19900919\n19900920\n19900921\n19900922\n19900923\n19900924\n19900925\n19900926\n19900927\n19900928\n19900929\n19900930\n19900931\n19900991\n19901004\n19901005\n19901006\n19901007\n19901009\n19901011a\n19901020ab\n1990102466\n19901031\n19901103\n19901104\n19901106\n19901107\n19901108\n19901109\n19901113\n19901114\n19901115926\n19901115hh\n19901116\n19901118\n19901119\n19901121\n19901131\n19901201\n19901202\n19901203\n19901204\n19901205\n19901207\n19901208\n1.99012E+11\n19901209\n19901216\n19901217\n19901219\n19901222\n19901223\n19901226\n19901228\n19901229\n19901231\n19901234\n199015wswp\n19901989\n19901991\n19901992\n19902001\n19902180\n1990323218\n19903287512\n199035716\n1990429love\n1990520712\n19905290\n1990624hx\n1990722a\n1990850love\n1990918ying\n1990abcd\n1990qqxz\n1990sheji\n19910101\n19910102\n19910103\n19910104\n19910105\n19910106\n19910107\n19910107lyy\n19910108\n19910109\n19910110\n19910111\n19910112\n19910113\n19910114\n19910115\n19910116\n19910117\n19910118\n19910119\n19910120\n19910121\n19910122\n19910123\n19910124\n19910125\n19910126\n19910127\n19910128\n19910129\n19910130\n19910131\n19910201\n19910202\n19910203\n19910204\n19910205\n19910206\n19910207\n19910208\n19910209\n1.99102E+11\n19910210\n19910211\n19910212\n19910213\n19910214\n19910215\n19910216\n19910217\n19910218\n19910219\n19910220\n19910221\n19910222\n19910223\n19910224\n19910225\n19910226\n19910227\n19910228\n19910229\n19910230\n19910231\n19910301\n19910302\n19910303\n19910304\n19910305\n19910306\n19910307\n19910308\n19910309\n19910310\n19910311\n19910312\n19910313\n19910314\n19910315\n19910316\n19910317\n19910318\n19910319\n19910320\n19910321\n19910322\n19910323\n19910323uu8\n19910324\n19910325\n19910326\n19910327\n19910328\n19910329\n19910330\n19910331\n19910401\n19910402\n19910403\n19910404\n19910405\n19910406\n19910407\n19910408\n1.99104E+11\n19910409\n19910410\n19910411\n19910412\n19910413\n19910414\n19910415\n19910416\n19910417\n19910418\n19910419\n19910420\n19910421\n19910422\n19910423\n19910424\n19910425\n19910426\n19910427\n19910428\n19910429\n19910430\n19910431\n19910501\n19910502\n19910503\n19910504\n19910505\n19910506\n19910507\n19910508\n19910509\n19910510\n19910511\n19910512\n19910513\n19910514\n19910515\n19910516\n19910517\n19910518\n19910519\n19910520\n1991052013\n19910521\n19910522\n19910523\n19910524\n19910525\n19910526\n19910527\n19910528\n19910529\n19910530\n19910531\n19910601\n19910602\n19910603\n19910604\n19910605\n19910606\n19910607\n19910608\n19910609\n19910610\n19910611\n19910612\n19910613\n19910614\n19910615\n19910616\n19910617\n19910618\n19910619\n199106191\n19910620\n19910621\n19910622\n19910623\n19910624\n19910625\n19910626\n19910627\n19910627smile\n19910628\n19910629\n19910630\n19910631\n19910701\n19910702\n19910703\n19910704\n19910705\n19910706\n19910707\n19910708\n19910709\n19910710\n19910711\n19910712\n19910713\n19910714\n19910715\n19910716\n19910717\n19910718\n19910719\n19910720\n19910721\n19910722\n19910723\n19910724\n19910725\n19910726\n19910727\n19910728\n19910729\n19910730\n19910731\n19910801\n19910802\n19910803\n19910804\n19910805\n19910806\n19910807\n19910808\n19910809\n19910810\n19910811\n19910812\n19910813\n19910814\n19910815\n19910816\n19910817\n19910818\n19910819\n19910820\n19910821\n19910822\n19910823\n19910824\n19910825\n19910826\n19910827\n19910828\n19910829\n19910830\n19910831\n19910901\n19910902\n19910903\n19910904\n19910905\n19910906\n19910907\n19910908\n19910909\n19910910\n19910911\n19910912\n19910913\n19910914\n19910915\n19910916\n19910917\n19910918\n19910919\n19910920\n19910921\n19910922\n19910923\n19910924\n19910925\n19910926\n19910927\n19910928\n19910929\n19910930\n19910931\n19911001\n19911002\n19911003\n19911004\n19911005\n19911006\n19911007\n19911008\n19911009\n19911010\n19911011\n19911012\n19911013\n19911014\n19911015\n19911016\n19911017\n19911018\n19911019\n19911020\n19911021\n19911022\n19911023\n19911024\n19911025\n19911026\n19911027\n19911028\n19911029\n19911030\n19911031\n19911101\n19911102\n19911103\n19911104\n19911105\n19911106\n19911107\n19911108\n19911109\n19911110\n19911111\n19911112\n19911113\n19911114\n19911115\n19911116\n19911117\n19911118\n19911119\n19911120\n19911121\n19911122\n19911123\n19911124\n19911125\n19911126\n19911127\n19911128\n19911129\n19911130\n19911131\n199111632\n19911201\n19911202\n19911203\n19911204\n19911205\n19911206\n19911207\n19911208\n1991120812\n19911209\n19911210\n19911211\n19911212\n19911213\n19911214\n19911215\n19911216\n19911217\n19911218\n19911219\n19911220\n19911221\n19911222\n19911223\n19911224\n19911225\n19911226\n19911227\n19911228\n19911229\n19911230\n19911231\n19912009\n1991211494\n199142000\n19915185303a\n199155cglcza\n1991812abcd\n199199199\n1991huoxing\n19920101\n19920102\n19920103\n19920104\n19920105\n19920106\n19920107\n19920108\n19920109\n19920110\n19920111\n19920112\n19920113\n19920114\n19920115\n19920116\n19920117\n19920118\n19920119\n19920120\n19920121\n19920122\n19920123\n19920124\n19920125\n19920126\n19920127\n19920128\n19920129\n19920130\n19920131\n19920201\n19920202\n19920203\n19920204\n19920205\n19920206\n19920207\n19920208\n19920209\n19920210\n19920211\n19920212\n19920213\n19920214\n19920215\n19920216\n19920217\n19920218\n19920219\n19920220\n19920221\n19920222\n19920223\n19920224\n19920225\n19920226\n19920227\n19920228\n19920229\n19920230\n19920231\n19920301\n19920302\n19920303\n19920304\n19920305\n19920306\n19920307\n19920308\n19920309\n19920310\n19920311\n19920312\n19920313\n19920314\n19920315\n19920316\n19920317\n19920318\n19920319\n19920320\n19920321\n19920322\n19920323\n19920324\n19920325\n19920326\n19920327\n19920328\n19920329\n19920330\n19920331\n19920401\n19920402\n19920403\n19920404\n19920405\n19920406\n19920407\n19920408\n19920409\n19920410\n19920411\n19920412\n19920413\n19920414\n19920415\n19920416\n19920417\n19920418\n19920419\n19920420\n19920421\n19920422\n19920423\n19920424\n19920425\n19920426\n19920427\n19920428\n19920429\n19920430\n19920431\n19920501\n19920502\n19920503\n19920503csh\n19920504\n19920505\n19920506\n19920507\n19920508\n19920509\n19920510\n19920511\n19920512\n19920513\n19920514\n19920515\n19920516\n19920517\n19920518\n19920519\n19920520\n19920521\n19920522\n19920523\n19920524\n19920525\n19920526\n19920527\n19920528\n19920529\n19920530\n19920531\n19920601\n19920602\n19920603\n19920604\n19920605\n19920606\n19920607\n19920608\n19920609\n19920610\n19920611\n19920612\n19920613\n19920614\n19920615\n19920616\n19920617\n19920618\n19920619\n19920620\n19920621\n19920622\n19920623\n19920624\n19920625\n19920626\n19920627\n19920628\n19920629\n19920630\n19920631\n19920701\n19920702\n19920703\n19920704\n19920705\n19920706\n19920707\n19920708\n19920709\n19920710\n19920711\n19920712\n19920713\n19920714\n19920715\n19920716\n19920717\n19920718\n19920719\n19920720\n19920721\n19920722\n19920723\n19920724\n19920725\n19920726\n19920727\n19920728\n19920729\n19920730\n19920731\n19920801\n19920802\n19920803\n19920804\n19920805\n19920806\n19920807\n19920808\n19920809\n19920810\n19920811\n19920812\n19920813\n19920814\n19920815\n19920816\n19920817\n19920818\n19920819\n19920820\n19920821\n19920822\n19920823\n19920824\n19920825\n19920826\n19920827\n19920828\n19920829\n19920830\n19920831\n19920901\n19920902\n19920903\n19920904\n19920905\n19920906\n19920907\n19920908\n19920909\n19920910\n19920911\n19920912\n19920913\n19920914\n19920915\n19920916\n19920917\n19920918\n19920919\n19920920\n19920921\n19920922\n19920923\n19920924\n19920925\n19920926\n19920927\n19920928\n19920929\n19920930\n19920931\n19921001\n19921002\n19921003\n19921004\n19921005\n19921006\n19921007\n19921008\n19921009\n19921010\n19921011\n19921012\n19921013\n19921014\n19921015\n19921016\n19921017\n19921018\n19921019\n19921020\n19921021\n19921022\n19921023\n19921024\n19921025\n19921026\n19921027\n19921028\n19921029\n19921030\n19921031\n19921101\n19921102\n19921103\n19921104\n19921105\n19921106\n19921107\n19921108\n19921109\n19921110\n19921111\n19921112\n19921113\n19921114\n19921115\n19921116\n19921117\n19921118\n19921119\n19921120\n19921121\n19921122\n19921123\n19921124\n19921125\n19921126\n19921127\n19921128\n19921129\n19921130\n19921131\n199211516\n19921201\n19921202\n19921203\n19921204\n19921205\n19921206\n19921207\n19921208\n19921209\n19921210\n19921211\n19921212\n19921213\n19921214\n19921215\n19921216\n19921217\n19921218\n19921219\n19921220\n19921221\n19921222\n19921223\n19921224\n19921225\n19921226\n19921227\n19921228\n19921229\n19921230\n19921231\n19921430\n19921989\n19921996\n19923027191\n19923110166\n199232623\n199244773\n199286894\n199287147\n19929206\n19929308\n19929312\n1992w1213\n19930101\n19930102\n19930103\n19930104\n19930105\n19930106\n19930107\n19930108\n19930109\n19930110\n19930111\n19930112\n19930113\n19930114\n19930115\n19930116\n19930117\n19930118\n19930119\n19930120\n19930121\n19930122\n19930123\n19930124\n19930125\n19930126\n19930127\n19930128\n19930129\n19930130\n19930131\n19930201\n19930202\n19930203\n19930204\n19930205\n19930206\n19930207\n19930208\n19930209\n19930210\n19930211\n19930212\n19930213\n19930214\n19930215\n19930216\n19930217\n19930218\n19930219\n19930220\n19930221\n19930222\n19930223\n19930224\n19930225\n19930226\n19930227\n19930228\n19930229\n19930230\n19930231\n19930301\n19930302\n19930303\n19930304\n19930305\n19930306\n19930307\n19930308\n19930309\n19930310\n19930311\n19930312\n19930313\n19930314\n19930315\n19930316\n19930317\n19930318\n19930319\n19930320\n19930321\n19930322\n19930323\n19930324\n19930325\n19930326\n19930327\n19930329\n19930330\n19930331\n19930401\n19930402\n19930403\n19930404\n19930405\n19930406\n19930407\n19930408\n19930409\n19930410\n19930411\n19930412\n19930413\n19930414\n19930415\n19930416\n19930417\n19930418\n19930419\n19930420\n19930421\n19930422\n19930423\n19930424\n19930425\n19930426\n19930427\n19930428\n19930429\n19930430\n19930431\n19930501\n19930502\n19930503\n19930504\n19930505\n19930506\n19930507\n19930508\n19930509\n19930510\n19930511\n19930512\n19930513\n19930514\n19930515\n19930516\n19930517\n19930518\n19930519\n19930520\n19930521\n19930522\n19930523\n19930524\n19930525\n19930526\n19930527\n19930528\n19930529\n19930530\n19930531\n19930601\n19930602\n19930603\n19930604\n19930605\n19930606\n19930607\n19930608\n19930609\n19930610\n19930611\n19930612\n19930613\n19930614\n19930615\n19930616\n19930617\n19930618\n19930619\n19930620\n19930621\n19930622\n19930623\n19930624\n19930625\n19930626\n19930627\n19930628\n19930629\n19930630\n19930631\n19930701\n19930702\n19930703\n19930704\n19930705\n19930706\n19930707\n19930708\n19930709\n19930710\n19930711\n19930712\n19930713\n19930714\n19930715\n19930716\n19930717\n19930718\n19930719\n19930720\n19930721\n19930722\n19930723\n19930724\n19930725\n19930726\n19930727\n19930728\n19930729\n19930730\n19930731\n19930801\n19930802\n19930803\n19930804\n19930805\n19930806\n19930807\n19930808\n19930809\n19930810\n19930811\n19930812\n19930813\n19930814\n19930815\n19930816\n19930817\n19930818\n19930819\n19930820\n19930821\n19930822\n19930823\n19930824\n19930825\n19930826\n19930827\n19930828\n19930829\n19930830\n19930831\n19930901\n19930902\n19930903\n19930904\n19930905\n19930907\n19930908\n19930909\n19930910\n19930911\n19930912\n19930913\n19930914\n19930915\n19930916\n19930917\n19930918\n19930919\n19930920\n19930921\n19930922\n19930923\n19930924\n19930925\n19930926\n19930927\n19930928\n19930929\n19930930\n19930931\n199310..qpaг╗gh\n19931001\n19931002\n19931003\n19931004\n19931005\n19931006\n19931007\n19931008\n19931009\n19931010\n19931011\n19931012\n19931013\n19931014\n19931015\n19931016\n19931017\n19931018\n19931019\n19931020\n19931021\n19931022\n19931023\n19931024\n19931025\n19931026\n19931027\n19931028\n19931029\n19931030\n19931031\n19931101\n19931102\n19931103\n19931104\n19931105\n19931106\n19931107\n19931108\n19931109\n19931110\n19931111\n19931112\n19931113\n19931114\n19931115\n19931116\n19931117\n19931118\n19931119\n19931120\n19931121\n19931122\n19931123\n19931124\n19931125\n19931126\n19931127\n19931128\n19931129\n19931130\n19931131\n19931201\n19931202\n19931203\n19931204\n19931205\n19931206\n19931207\n19931208\n19931209\n19931210\n19931211\n19931212\n19931213\n19931214\n19931215\n19931216\n19931217\n19931218\n19931219\n19931220\n19931221\n19931222\n19931223\n19931224\n19931225\n19931226\n19931227\n19931228\n19931229\n19931230\n19931231\n199318jhf\n19931994\n19931996\n19931997\n19932016\n19936917\n199374665\n1993931206\n1993yr08011993\n19940101\n19940102\n19940103\n19940104\n19940105\n19940106\n19940107\n19940108\n19940109\n19940110\n19940111\n19940112\n19940113\n19940114\n19940115\n19940116\n19940117\n19940118\n19940119\n19940120\n19940121\n19940122\n19940123\n19940124\n19940125\n19940126\n19940127\n19940128\n19940129\n19940130\n19940131\n19940201\n19940202\n19940203\n19940204\n19940205\n19940206\n19940207\n19940208\n19940209\n19940210\n19940211\n19940212\n19940213\n19940214\n19940215\n19940216\n19940217\n19940218\n19940219\n19940220\n19940221\n19940222\n19940223\n19940224\n19940225\n19940226\n19940227\n19940228\n19940229\n19940230\n19940231\n19940301\n19940302\n19940303\n19940304\n19940305\n19940306\n19940307\n19940308\n19940309\n19940310\n19940311\n19940312\n19940313\n19940314\n19940315\n19940316\n19940317\n19940318\n19940319\n19940320\n19940321\n19940322\n19940323\n19940324\n19940325\n19940326\n19940327\n19940328\n19940329\n19940330\n19940331\n19940401\n19940402\n19940403\n19940404\n19940405\n19940406\n19940407\n19940408\n19940409\n19940410\n19940411\n19940412\n19940413\n19940414\n19940415\n19940416\n19940417\n19940418\n19940419\n19940420\n19940421\n19940422\n19940423\n19940424\n19940425\n19940426\n19940427\n19940428\n19940429\n19940430\n19940431\n19940501\n19940502\n19940503\n19940504\n19940505\n19940506\n19940507\n19940508\n19940509\n19940510\n19940511\n19940512\n19940513\n19940514\n19940515\n19940516\n19940517\n19940518\n19940519\n19940520\n19940521\n19940522\n19940523\n19940524\n19940525\n19940526\n19940527\n19940528\n19940529\n19940530\n19940531\n19940601\n19940602\n19940603\n19940604\n19940605\n19940606\n19940607\n19940608\n19940609\n19940610\n19940611\n19940612\n19940613\n19940614\n19940615\n19940616\n19940617\n19940618\n19940619\n19940620\n19940621\n19940622\n19940623\n19940624\n19940625\n19940626\n19940627\n19940628\n19940629\n19940630\n19940631\n19940701\n19940702\n19940703\n19940704\n19940705\n19940706\n19940707\n19940708\n19940709\n19940710\n19940711\n19940712\n19940713\n19940714\n19940715\n19940716\n19940717\n19940718\n19940719\n19940720\n19940721\n19940722\n19940723\n19940724\n19940725\n19940726\n19940727\n19940728\n19940729\n19940730\n19940731\n19940801\n19940802\n19940803\n19940804\n19940805\n19940806\n19940807\n19940808\n19940809\n19940810\n19940811\n19940812\n19940813\n19940814\n19940815\n19940816\n19940817\n19940818\n19940819\n19940820\n19940821\n19940822\n19940823\n19940824\n19940825\n19940826\n19940827\n19940828\n19940829\n19940830\n19940831\n19940901\n19940902\n19940903\n19940904\n19940905\n19940906\n19940907\n19940908\n19940909\n19940910\n19940911\n19940912\n19940913\n19940914\n19940915\n19940916\n19940917\n19940918\n19940919\n19940920\n19940921\n19940922\n19940923\n19940924\n19940925\n19940926\n19940927\n19940928\n19940929\n19940930\n19940931\n19941001\n19941002\n19941003\n19941004\n19941005\n19941006\n19941007\n19941008\n19941009\n19941010\n19941011\n19941012\n19941013\n19941014\n19941015\n19941016\n19941017\n19941018\n19941018wlx\n19941018wth\n19941019\n19941020\n19941021\n19941022\n19941023\n19941024\n19941025\n19941026\n19941027\n19941028\n19941029\n19941030\n19941031\n19941101\n19941102\n19941103\n19941104\n19941105\n19941106\n19941107\n19941108\n19941109\n19941110\n19941111\n19941112\n19941113\n19941114\n19941115\n19941116\n19941117\n19941118\n19941119\n19941120\n19941121\n19941122\n19941123\n19941124\n19941125\n19941126\n19941127\n19941129\n19941130\n19941131\n19941201\n19941202\n19941203\n19941204\n19941205\n19941206\n19941207\n19941208\n19941209\n19941210\n19941211\n19941212\n19941213\n19941214\n19941215\n19941216\n19941217\n19941218\n19941219\n19941220\n19941221\n19941222\n19941223\n19941224\n19941225\n19941226\n19941227\n19941228\n19941229\n19941230\n19941231\n19941997\n19941998\n1994210kyn\n1.99422E+13\n1994585858\n199486zy.\n19950101\n19950102\n19950103\n19950104\n19950105\n19950106\n19950107\n19950108\n19950109\n19950110\n19950111\n19950112\n19950113\n19950114\n19950115\n19950116\n19950117\n19950118\n19950119\n19950120\n19950121\n19950122\n19950123\n19950124\n19950125\n19950126\n19950127\n19950128\n19950129\n19950130\n19950131\n19950201\n19950202\n19950203\n19950204\n19950205\n19950206\n19950207\n19950208\n19950209\n19950210\n19950211\n19950212\n19950213\n19950214\n19950215\n19950216\n19950217\n19950218\n19950219\n19950220\n19950221\n19950222\n19950223\n19950224\n19950225\n19950226\n19950227\n19950228\n19950229\n19950230\n19950231\n19950301\n19950302\n19950303\n19950304\n19950305\n19950306\n19950307\n19950308\n19950309\n19950310\n19950311\n19950312\n19950313\n19950314\n19950315\n19950316\n19950317\n19950318\n19950319\n19950320\n19950321\n19950322\n19950323\n19950324\n19950325\n19950326\n19950327\n19950328\n19950329\n19950330\n19950331\n19950401\n19950402\n19950403\n19950404\n19950405\n19950406\n19950407\n19950408\n19950409\n19950410\n19950411\n19950412\n19950413\n19950414\n19950415\n19950416\n19950417\n19950418\n19950419\n19950420\n19950421\n19950422\n19950423\n19950424\n19950425\n19950426\n19950427\n19950428\n19950429\n19950430\n19950431\n19950501\n19950502\n19950503\n19950504\n19950505\n19950506\n19950507\n19950508\n19950509\n19950510\n19950511\n19950512\n19950513\n19950514\n19950515\n19950516\n19950517\n19950518\n19950519\n19950520\n19950521\n19950522\n19950523\n19950524\n19950525\n19950526\n19950527\n19950528\n19950529\n19950530\n19950531\n19950602\n19950603\n19950604\n19950605\n19950606\n19950607\n19950608\n19950609\n19950610\n19950611\n19950612\n19950613\n19950614\n19950615\n19950616\n19950617\n19950618\n19950619\n19950620\n19950621\n19950622\n19950623\n19950624\n19950625\n19950626\n19950627\n19950628\n19950629\n19950630\n19950631\n19950701\n19950702\n19950703\n19950704\n19950705\n19950706\n19950707\n19950708\n19950709\n19950710\n19950711\n19950712\n19950713\n19950714\n19950715\n19950716\n19950717\n19950718\n19950719\n19950720\n19950721\n19950722\n19950723\n19950724\n19950725\n19950726\n19950727\n19950728\n19950729\n19950730\n19950731\n19950801\n19950802\n19950803\n19950804\n19950805\n19950806\n19950807\n19950808\n19950809\n19950810\n19950811\n19950813\n19950814\n19950815\n19950816\n19950817\n19950818\n19950819\n19950820\n19950821\n19950822\n19950823\n19950824\n19950825\n19950826\n19950827\n19950828\n19950829\n19950830\n19950831\n19950901\n19950902\n19950903\n19950904\n19950905\n19950906\n19950907\n19950908\n19950909\n19950910\n19950911\n19950912\n19950913\n19950914\n19950915\n19950916\n19950917\n19950918\n19950919\n19950920\n19950921\n19950922\n19950923\n19950924\n19950925\n19950926\n19950927\n19950928\n19950929\n19950930\n19950931\n19951001\n19951002\n19951003\n19951004\n19951005\n19951006\n19951007\n19951008\n19951009\n19951010\n19951011\n19951012\n19951013\n19951014\n19951015\n19951016\n19951017\n19951018\n19951019\n19951020\n19951021\n19951022\n19951023\n19951024\n19951025\n19951026\n19951027\n19951028\n19951029\n19951030\n19951031\n19951101\n19951102\n19951103\n19951104\n19951105\n19951106\n19951107\n19951108\n19951109\n19951110\n19951111\n19951112\n19951113\n19951114\n19951115\n19951116\n19951117\n19951118\n19951119\n19951120\n19951121\n19951122\n19951123\n19951124\n19951125\n19951126\n19951127\n19951128\n19951129\n19951130\n19951131\n19951201\n19951202\n19951203\n19951204\n19951205\n19951206\n19951207\n19951208\n19951209\n19951210\n19951211\n19951212\n19951213\n19951214\n19951215\n19951216\n19951217\n19951218\n19951219\n19951220\n19951221\n19951222\n19951223\n19951224\n19951225\n19951226\n19951227\n19951228\n19951229\n19951230\n19951231\n19951972\n19951998\n19951999\n19952002\n19952005\n1995823woaini\n19960101\n19960102\n19960103\n19960104\n19960105\n19960106\n19960107\n19960108\n19960109\n19960110\n19960111\n19960112\n19960113\n19960114\n19960115\n19960116\n19960117\n19960118\n19960119\n19960120\n19960121\n19960122\n19960123\n19960124\n19960125\n19960126\n19960127\n19960128\n19960129\n19960130\n19960131\n19960201\n19960202\n19960203\n19960204\n19960205\n19960206\n19960207\n19960208\n19960209\n19960210\n19960211\n19960212\n19960213\n19960214\n19960215\n19960216\n19960217\n19960218\n19960219\n19960220\n19960221\n19960222\n19960223\n19960224\n19960225\n19960226\n19960227\n19960228\n19960229\n19960230\n19960231\n19960301\n19960302\n19960303\n19960304\n19960305\n19960306\n19960307\n19960308\n19960309\n19960310\n19960311\n19960312\n19960313\n19960314\n19960315\n19960316\n19960317\n19960318\n19960319\n19960320\n19960321\n19960322\n19960323\n19960324\n19960325\n19960326\n19960327\n19960328\n19960329\n19960330\n19960331\n19960401\n19960402\n19960403\n19960404\n19960405\n19960406\n19960407\n19960408\n19960409\n19960410\n19960411\n19960412\n19960413\n19960414\n19960415\n19960416\n19960417\n19960418\n19960419\n19960420\n19960421\n19960422\n19960423\n19960424\n19960425\n19960426\n19960427\n19960428\n19960429\n19960430\n19960431\n19960501\n19960502\n19960503\n19960504\n19960505\n19960506\n19960507\n19960508\n19960509\n19960510\n19960511\n19960512\n19960513\n19960514\n19960515\n19960516\n19960517\n19960518\n19960519\n19960520\n19960521\n19960522\n19960523\n19960524\n19960525\n19960526\n19960527\n19960528\n19960529\n19960530\n19960531\n19960601\n19960602\n19960603\n19960604\n19960605\n19960606\n19960607\n19960608\n19960609\n19960610\n19960611\n19960612\n19960613\n19960614\n19960615\n19960616\n19960617\n19960618\n19960619\n19960620\n19960621\n19960622\n19960623\n19960624\n19960625\n19960626\n19960627\n19960628\n19960629\n19960630\n19960631\n19960701\n19960702\n19960703\n19960704\n19960705\n19960706\n19960707\n19960708\n19960709\n19960710\n19960711\n19960712\n19960713\n19960714\n19960715\n19960716\n19960717\n19960718\n19960719\n19960720\n19960721\n19960722\n19960723\n19960724\n19960725\n19960726\n19960727\n19960728\n19960729\n19960730\n19960731\n19960801\n19960802\n19960803\n19960804\n19960805\n19960806\n19960807\n19960808\n19960809\n19960810\n19960811\n19960812\n19960813\n19960814\n19960815\n19960816\n19960817\n19960818\n19960819\n19960820\n19960821\n19960822\n19960823\n19960824\n19960825\n19960826\n19960827\n19960828\n19960829\n19960830\n19960831\n19960901\n19960902\n19960903\n19960904\n19960905\n19960906\n19960907\n19960908\n19960909\n19960910\n19960911\n19960912\n19960913\n19960914\n19960915\n19960916\n19960917\n19960918\n19960919\n19960920\n19960921\n19960922\n19960923\n19960924\n19960925\n19960926\n19960927\n19960928\n19960929\n19960930\n19960931\n19961001\n19961002\n19961003\n19961004\n19961005\n19961006\n19961007\n19961008\n19961009\n19961010\n19961011\n19961012\n19961013\n19961014\n19961015\n19961016\n19961017\n19961018\n19961019\n19961020\n19961021\n19961022\n19961023\n19961024\n19961025\n19961026\n19961027\n19961028\n19961029\n19961030\n19961031\n1996106428\n19961101\n19961102\n19961103\n19961104\n19961105\n19961106\n19961107\n19961108\n19961109\n19961110\n19961111\n19961112\n19961113\n19961114\n19961115\n19961116\n19961117\n19961118\n19961119\n19961120\n19961121\n19961122\n19961123\n19961124\n19961125\n19961126\n19961127\n19961128\n19961129\n19961130\n19961131\n19961200\n19961201\n19961202\n19961203\n19961204\n19961205\n19961206\n19961207\n19961208\n19961209\n19961210\n19961211\n19961212\n19961213\n19961214\n19961215\n19961216\n19961217\n19961218\n19961219\n19961220\n19961221\n19961222\n19961223\n19961224\n19961225\n19961226\n19961227\n19961228\n19961229\n19961230\n19961231\n19962000\n19962001\n19962909\n199688665\n19969100\n19970101\n19970102\n19970103\n19970104\n19970105\n19970106\n19970107\n19970108\n19970109\n19970110\n19970111\n19970112\n19970113\n19970114\n19970115\n19970116\n19970117\n19970118\n19970119\n19970120\n19970121\n19970122\n19970123\n19970124\n19970125\n19970126\n19970127\n19970128\n19970129\n19970130\n19970131\n19970201\n19970202\n19970203\n19970204\n19970205\n19970206\n19970207\n19970208\n19970209\n19970210\n19970211\n19970212\n19970213\n19970214\n19970215\n19970216\n19970217\n19970218\n19970219\n19970220\n19970221\n19970222\n19970223\n19970224\n19970225\n19970226\n19970227\n19970228\n19970229\n19970230\n19970231\n19970301\n19970302\n19970303\n19970304\n19970305\n19970306\n19970307\n19970308\n19970309\n19970310\n19970311\n19970312\n19970313\n19970314\n19970315\n19970316\n19970317\n19970318\n19970319\n19970320\n19970321\n19970322\n19970323\n19970324\n19970325\n19970326\n19970327\n19970328\n19970329\n19970330\n19970331\n19970401\n19970402\n19970403\n19970404\n19970405\n19970406\n19970407\n19970408\n19970409\n19970410\n19970411\n19970412\n19970413\n19970414\n19970415\n19970416\n19970417\n19970418\n19970419\n19970420\n19970421\n19970422\n19970423\n19970424\n19970425\n19970426\n19970427\n19970428\n19970429\n19970430\n19970431\n19970501\n19970502\n19970503\n19970504\n19970505\n19970506\n19970507\n19970508\n19970509\n19970510\n19970510xxpd\n19970511\n19970512\n19970513\n19970514\n19970515\n19970516\n19970517\n19970518\n19970519\n19970520\n19970521\n19970522\n19970523\n19970524\n19970525\n19970526\n19970527\n19970528\n19970529\n19970530\n19970531\n19970601\n19970602\n19970603\n19970604\n19970605\n19970606\n19970607\n19970608\n19970609\n19970610\n19970611\n19970612\n19970613\n19970614\n19970615\n19970616\n19970617\n19970618\n19970619\n19970620\n19970621\n19970622\n19970623\n19970624\n19970625\n19970626\n19970627\n19970628\n19970629\n19970630\n19970631\n19970702\n19970703\n19970704\n19970705\n19970706\n19970707\n19970708\n19970709\n19970710\n19970711\n19970712\n19970713\n19970714\n19970715\n19970716\n19970717\n19970718\n19970719\n19970720\n19970721\n19970722\n19970723\n19970724\n19970725\n19970726\n19970727\n19970728\n19970729\n19970730\n19970731\n19970801\n19970802\n19970803\n19970804\n19970805\n19970806\n19970807\n19970808\n19970809\n19970810\n19970811\n19970812\n19970813\n19970814\n19970815\n19970816\n19970817\n19970818\n19970819\n19970820\n19970821\n19970822\n19970823\n19970824\n19970825\n19970826\n19970827\n19970828\n19970829\n19970830\n19970831\n19970901\n19970902\n19970903\n19970904\n19970905\n19970906\n19970907\n19970908\n19970909\n19970910\n19970911\n19970912\n19970913\n19970914\n19970915\n19970916\n19970917\n19970918\n19970919\n19970920\n19970921\n19970922\n19970923\n19970924\n19970925\n19970926\n19970927\n19970928\n19970929\n19970930\n19970931\n19971001\n19971002\n19971003\n19971004\n19971005\n19971006\n19971007\n19971008\n19971009\n19971010\n19971011\n19971012\n19971013\n19971014\n19971015\n19971016\n19971017\n19971018\n19971019\n19971020\n19971021\n19971022\n19971023\n19971024\n19971025\n19971026\n19971027\n19971028\n19971029\n19971030\n19971031\n19971101\n19971102\n19971103\n19971104\n19971105\n19971106\n19971107\n19971108\n19971109\n19971110\n19971111\n19971112\n19971113\n19971114\n19971115\n19971116\n19971117\n19971118\n19971119\n199711199\n19971120\n19971121\n19971122\n19971123\n19971124\n19971125\n19971126\n19971127\n19971128\n19971129\n19971130\n19971131\n19971201\n19971202\n19971203\n19971204\n19971205\n19971206\n19971207\n19971208\n19971209\n19971210\n19971211\n19971212\n19971213\n19971214\n19971215\n19971216\n19971217\n19971218\n19971219\n19971220\n19971221\n19971222\n19971223\n19971224\n19971225\n19971226\n19971227\n19971228\n19971229\n19971230\n19971231\n19971998\n1.9972E+11\n19971999\n19972000\n19972001\n19972002\n19972004\n19972006\n19972007\n19973389\n19977100\n1.99771E+11\n19977168\n19977171\n199771hk\n19977991\n19980000\n19980101\n19980102\n19980103\n19980104\n19980105\n19980106\n19980107\n19980108\n19980109\n19980110\n19980111\n19980112\n19980113\n19980114\n19980115\n19980116\n19980117\n19980118\n19980119\n19980120\n19980121\n19980122\n19980123\n19980124\n19980125\n19980126\n19980127\n19980128\n19980129\n19980130\n19980131\n19980148\n19980201\n19980202\n19980203\n19980204\n19980205\n19980206\n19980207\n19980208\n19980209\n19980210\n19980211\n19980212\n19980213\n19980214\n19980215\n19980216\n19980217\n19980218\n19980219\n19980220\n19980221\n19980222\n19980223\n19980224\n19980225\n19980226\n19980227\n19980228\n19980229\n19980230\n19980231\n19980301\n19980302\n19980303\n19980304\n19980305\n19980306\n19980307\n19980308\n19980309\n19980310\n19980311\n19980312\n19980313\n19980314\n19980315\n19980316\n19980317\n19980318\n19980319\n19980320\n19980321\n19980322\n19980323\n19980324\n19980325\n19980326\n19980327\n19980328\n19980329\n19980330\n19980331\n19980401\n19980402\n19980403\n19980404\n19980405\n19980406\n19980407\n19980408\n19980409\n19980410\n19980411\n19980412\n19980413\n19980414\n19980415\n19980416\n19980417\n19980418\n19980419\n19980420\n19980421\n19980422\n19980423\n19980424\n19980425\n19980426\n19980427\n19980428\n19980429\n19980430\n19980431\n19980501\n19980502\n19980503\n19980504\n19980505\n19980506\n19980507\n19980508\n19980509\n19980510\n19980511\n19980512\n19980513\n19980514\n19980515\n19980516\n19980517\n19980518\n19980519\n19980520\n19980521\n19980522\n19980523\n19980524\n19980525\n19980526\n19980527\n19980528\n19980529\n19980530\n19980531\n19980601\n19980602\n19980603\n19980604\n19980605\n19980606\n19980607\n19980608\n19980609\n19980610\n19980611\n19980612\n19980613\n19980614\n19980615\n19980616\n19980617\n19980618\n19980619\n19980620\n19980621\n19980622\n19980623\n19980624\n19980625\n19980626\n19980627\n19980628\n19980629\n19980630\n19980631\n19980701\n19980702\n19980703\n19980704\n19980705\n19980706\n19980707\n19980708\n19980709\n19980710\n19980711\n19980712\n19980713\n19980714\n19980715\n19980716\n19980717\n19980718\n19980719\n19980720\n19980721\n19980722\n19980723\n19980724\n19980725\n19980726\n19980727\n19980728\n19980729\n19980730\n19980731\n19980801\n19980802\n19980803\n19980804\n19980805\n19980806\n19980807\n19980808\n19980809\n19980810\n19980811\n19980812\n19980813\n19980814\n19980815\n19980816\n19980817\n19980818\n19980819\n19980820\n19980821\n19980822\n19980823\n19980824\n19980825\n19980826\n19980827\n19980828\n19980829\n19980830\n19980831\n19980901\n19980902\n19980902myson\n19980903\n19980904\n19980905\n19980906\n19980907\n19980908\n19980909\n19980910\n19980911\n19980912\n19980913\n19980914\n19980915\n19980916\n19980917\n19980918\n19980919\n19980920\n19980921\n19980922\n19980923\n19980924\n19980925\n19980926\n19980927\n19980928\n19980929\n19980930\n19980931\n19981001\n19981002\n19981003\n19981004\n19981005\n19981006\n19981007\n19981008\n19981009\n19981010\n19981011\n19981012\n19981013\n19981014\n19981015\n19981016\n19981017\n19981018\n19981019\n19981020\n19981021\n19981022\n19981022ly\n19981023\n19981024\n19981025\n19981026\n19981027\n19981028\n19981029\n19981030\n19981031\n19981101\n19981102\n19981103\n19981104\n19981105\n19981106\n19981107\n19981108\n19981109\n19981110\n19981111\n19981112\n19981113\n19981114\n19981115\n19981116\n19981117\n19981118\n19981119\n19981120\n19981121\n19981122\n19981123\n19981124\n19981125\n19981126\n19981127\n19981128\n19981129\n19981130\n19981131\n19981201\n19981202\n19981203\n19981204\n19981205\n19981206\n19981207\n19981208\n19981209\n19981210\n19981211\n19981212\n19981213\n19981214\n19981215\n19981216\n19981217\n19981218\n19981219\n19981220\n19981221\n19981222\n19981223\n19981224\n19981224119\n19981225\n19981226\n19981227\n19981228\n19981229\n19981230\n19981231\n1.99813E+11\n19981972\n1.9982E+11\n19981999\n19982000\n19982001\n19982002\n19982003\n19982005\n19982008\n19983010258\n19983886\n19984622\n19986170\n19986936\n19987386\n199881547\n1.99888E+11\n19989543\n1998982989\n19989898\n199899lms\n1998sexsex\n19990000\n19990101\n19990102\n19990103\n19990104\n19990105\n19990106\n19990107\n19990108\n19990109\n19990110\n19990111\n19990112\n19990113\n19990114\n19990115\n19990116\n19990117\n19990118\n19990119\n19990120\n19990121\n19990122\n19990123\n19990124\n19990126\n19990127\n19990128\n19990129\n19990130\n19990131\n19990201\n19990202\n19990203\n19990204\n19990205\n19990206\n19990207\n19990208\n19990209\n19990210\n19990211\n19990212\n19990213\n19990214\n19990215\n19990216\n19990217\n19990218\n19990219\n19990220\n19990221\n19990222\n19990223\n19990224\n19990225\n19990226\n19990227\n19990228\n19990229\n19990230\n19990231\n19990301\n19990302\n19990303\n19990304\n19990305\n19990306\n19990307\n19990308\n19990309\n19990310\n19990311\n19990312\n19990313\n19990314\n19990315\n19990316\n19990317\n19990318\n19990319\n19990320\n19990321\n19990322\n19990323\n19990324\n19990325\n19990326\n19990327\n19990328\n19990329\n19990330\n19990331\n19990401\n19990402\n19990403\n199904031\n19990404\n19990405\n19990406\n19990407\n19990408\n19990409\n19990410\n19990411\n19990412\n19990413\n19990414\n19990415\n19990416\n19990417\n19990418\n19990419\n19990420\n19990421\n19990422\n19990423\n19990424\n19990425\n19990426\n19990427\n19990428\n19990429\n19990430\n19990431\n19990501\n19990502\n19990503\n19990504\n19990505\n19990506\n19990507\n19990508\n19990509\n19990510\n19990511\n19990512\n19990513\n19990514\n19990515\n19990516\n19990517\n19990518\n19990519\n19990520\n19990521\n19990522\n19990523\n19990524\n19990525\n19990526\n19990527\n19990528\n19990529\n19990530\n19990531\n19990601\n19990602\n19990603\n19990604\n19990605\n19990606\n19990607\n19990608\n19990609\n19990610\n19990611\n19990612\n19990613\n19990614\n19990615\n19990616\n19990617\n19990618\n19990619\n19990620\n19990621\n19990622\n19990623\n19990624\n19990625\n19990626\n19990627\n19990628\n19990629\n19990630\n19990631\n19990701\n19990702\n19990703\n19990704\n19990705\n19990706\n19990707\n19990708\n19990709\n19990710\n19990711\n19990712\n19990713\n19990714\n19990715\n19990716\n19990717\n19990718\n19990719\n19990720\n19990721\n19990722\n19990723\n19990724\n19990725\n19990726\n19990727\n19990728\n19990729\n19990730\n19990731\n19990801\n19990802\n19990803\n19990804\n19990805\n19990806\n19990807\n19990808\n19990809\n19990810\n19990811\n19990812\n19990813\n19990814\n19990815\n19990816\n19990817\n19990818\n19990819\n19990820\n19990821\n19990822\n19990823\n19990824\n19990825\n19990826\n19990827\n19990828\n19990829\n19990830\n19990831\n19990901\n19990902\n19990903\n19990904\n19990905\n19990906\n19990907\n19990908\n19990909\n19990910\n19990911\n19990912\n19990913\n19990914\n19990915\n19990916\n19990917\n19990918\n19990919\n19990920\n19990921\n19990922\n19990923\n19990924\n19990925\n19990926\n19990927\n19990928\n19990929\n19990930\n19990931\n19990999\n19991001\n19991002\n19991003\n19991004\n19991005\n19991006\n19991007\n19991008\n19991009\n19991010\n19991011\n19991012\n19991013\n19991014\n19991015\n19991016\n19991017\n19991018\n19991019\n19991020\n19991021\n19991022\n19991023\n19991024\n19991025\n19991026\n19991027\n19991028\n19991029\n19991030\n19991031\n19991101\n19991102\n19991103\n19991104\n19991105\n19991106\n19991107\n19991108\n19991109\n19991110\n19991111\n19991112\n19991113\n19991114\n19991115\n19991116\n19991117\n19991118\n19991119\n19991120\n19991121\n19991122\n19991123\n19991124\n19991125\n19991126\n19991127\n19991128\n19991129\n19991130\n19991131\n199911323\n19991201\n19991202\n19991203\n19991204\n19991205\n19991206\n19991207\n19991208\n19991209\n19991210\n19991211\n19991212\n19991213\n19991214\n19991215\n19991216\n19991217\n19991218\n19991219\n19991220\n19991221\n19991222\n19991223\n19991224\n19991225\n19991226\n19991227\n19991228\n19991229\n19991230\n19991231\n1.9992E+11\n19992001\n19992002\n19992003\n19992005\n19992006\n19992008\n19992009\n1.99921E+14\n199921bf\n199931107\n19993233949\n19994208\n19995404\n19995631\n1999623623\n19998063\n1999816818\n1999821chu\n199988zyf\n19999991\n19999997\n1999999999\n1999raul7\n199C1b34\n199D1015\n19A23b43\n19ab5b98\n19B46fe0\n19B4juhg\n19b4juhg;;\n19bc379f\n19be35c8\n19c60eb4\n19D72cce\n19d868e4\n19da74f1\n19E14bc1\n19e2506d\n19E300aa\n19h5630153\n1a0c6E1C\n1a1a1a1a1a\n1a1b1c1a1b1c\n1a1b1c1d\n1a2a3b4b\n1a2b3c4d5\n1a2b3c4d5e6f7g\n1A2B3C4D5Eabcde\n1a2b3c4d5f\n1A2B3C4E\n1a2b3c4f\n1a2b3d4c\n1a2s3d4f5\n1a2s3dqwe\n1a2w3d4r\n1A466d27\n1a4b2c12\n1a7350ED\n1a8126E5\n1A984761\n1a9a7a9a\n1a9b8c6d\n1A9D660e\n1aaaaaaa\n1abcdefg\n1AC746fe\n1ad42585\n1ADD6dfd\n1AEA7aa5\n1AEF13fd\n1af6469c\n1and1is2\n1b4f3dac\n1B87602e\n1b8b6466\n1b96001f\n1BBB308d\n1bd65933\n1BE044af\n1bea70db\n1bf056f2\n1bf260f3\n1BF5782e\n1BFF7d65\n1c007639\n1C040ae5\n1C2E0258\n1c3f63B4\n1c3y723t\n1C541fc2\n1C5A4ba9\n1c6776b8\n1c89762F\n1C8D3f0b\n1c9a31f7\n1c9a3b3f\n1CA04031\n1cbb45D4\n1CC36fe5\n1CC97639\n1CF13b52\n1cr18ni9ti\n1d063ff6\n1d0a3c49\n1d2c3b4a\n1D34189e\n1D465520\n1D4D07bf\n1d7e2f0c\n1d806DE7\n1d9106AC\n1da46631\n1db107F9\n1DB3135d\n1db76cac\n1dc120be\n1dc17dbb\n1dc43D4F\n1dc734F6\n1dd40D7E\n1dd95BAF\n1DED2831\n1DFB3eda\n1E0B0c43\n1e0f4948\n1E1401b0\n1E184929\n1e2e5b08\n1e344f86\n1E3D208c\n1e3e77C0\n1e550273\n1E5D3076\n1e6600303\n1e6c218d\n1E754471\n1e885B60\n1E9051fa\n1e9c189b\n1EA52fa9\n1ead3C0B\n1EB12a7a\n1EC777b5\n1ee124781\n1ef13C5B\n1F001b9a\n1F1A23ce\n1f1b103f\n1F2700f1\n1F405264\n1f485ad5\n1F4F690e\n1f5350fa\n1f5e4da3\n1F755856\n1f7c713a\n1F850ec9\n1fa73143\n1FAB68f2\n1FB039b3\n1fd06b3e\n1fd570D8\n1FDD5e2a\n1FFF2637\n1h7aty8k\n1i0o1i0o\n1iloveyou\n1j2h3g4f\n1l0vey0u\n1l0veyou\n1l1l00OO\n1l1l1l1l\n1l2x3z4l\n1liu1liu00\n1lveyu00\n1m23q1m23q\n1n2zr3ys\n1n76tG2tzT\n1ndMiss7on\n1o76tG2tzT\n1o76tG2tzU\n1o86tG20yU\n1o86tG2tyU\n1o86tG2tzU\n1o86tH20yU\n1o86tH20yV\n1p86tH20xV\n1p86tH20yV\n1p96tH20tV\n1p96tH20xV\n1p96tI20tW\n1p97tI20tW\n1py19840103\n1q0p2w9o3e8i\n1Q23Lyc45j\n1q2aw3zse4\n1q2q3q4q\n1q2q3q4q5q\n1q2q3q4q5q6q\n1q2w3e1q2w3e\n1q2w3e4f\n1q2w3edell\n1q2z3h88\n1q3e5t7u\n1q3e5t7u9o\n1q97tI30tW\n1q97tI31tW\n1q97tI31tX\n1qa1qa1qa\n1qa2ws3ed4rf5tg\n1qa7tJ31tX\n1qaA1qaz\n1qaz0okm\n1qaz0pг╗/\n1qaz0plm\n1qaz1234\n1qaz1qaz1qaz\n1qaz2345\n1qaz2qaz\n1qaz2wsxгнгн-\n1qaz2wsx!\n1qaz2wsx!@\n1qaz2wsx3\n1qaz2wsx3e\n1qaz2wsx?\n1qaz2wsxc\n1qaz2wsxE\n1qaz2wsxp0\n1qaz3edc5tgb\n1qaz4rfv\n1qaz663012\n1QAZ7410\n1QAZ9IJN\n1qaz9ol.8ik\n1qazcde3\n1qazwsxedc\n1qazZAQ!\n1qqaazzwsx\n1qw2azxs\n1ra7tJ310Y\n1ra7tJ31tX\n1ra7tJ31tY\n1ra7tK310Y\n1rmp1h0g\n1sheng1shi\n1u79ob5df2h2u2a\n1u7a6j9w\n1w2a3n4g\n1w2q3r4e\n1w2w3w4w\n1wdv2efb\n1woailoume\n1y7q8w6p\n1yiwusuoyou\n1z1z1z1z\n1z2x3c4v5b\n1z2x3c4v5b6n7m\n1z2z3z4z\n1zhaowei\n1zmbowdoin\n1zxcvbnm\n2.7182818\n2.718281828\n2000000000\n20000002\n20000101\n20000102\n20000103\n20000104\n20000105\n20000106\n20000107\n20000108\n20000109\n20000110\n20000111\n20000112\n20000113\n20000114\n20000115\n20000116\n20000117\n20000118\n20000119\n20000120\n20000121\n20000122\n20000123\n20000124\n20000125\n20000126\n20000127\n20000128\n20000129\n20000130\n20000131\n20000201\n20000202\n20000203\n20000204\n20000205\n20000206\n20000207\n20000208\n20000209\n20000210\n20000211\n20000212\n20000213\n20000214\n20000215\n20000216\n20000217\n20000218\n20000219\n20000220\n20000221\n20000222\n20000223\n20000224\n20000225\n20000226\n20000227\n20000228\n20000229\n20000230\n20000231\n20000301\n20000302\n20000303\n20000304\n20000305\n20000306\n20000307\n20000308\n20000309\n20000310\n20000311\n20000312\n20000313\n20000313a\n20000314\n20000315\n20000316\n20000317\n20000318\n20000319\n20000320\n20000321\n20000322\n20000323\n20000324\n20000325\n20000326\n20000327\n20000328\n20000329\n20000330\n20000331\n20000401\n20000402\n20000403\n20000404\n20000405\n20000406\n20000407\n20000408\n20000409\n20000410\n20000411\n20000412\n20000413\n20000414\n20000415\n20000416\n20000417\n20000418\n20000419\n20000420\n20000421\n20000422\n20000423\n20000424\n20000425\n20000426\n20000427\n20000428\n20000429\n20000430\n20000431\n20000501\n20000502\n20000503\n20000504\n20000505\n20000506\n20000507\n20000508\n20000509\n20000510\n20000511\n20000512\n20000513\n20000514\n20000515\n20000516\n20000517\n20000518\n20000519\n20000520\n20000521\n20000522\n20000523\n20000524\n20000525\n20000526\n20000527\n20000528\n20000529\n20000530\n20000531\n20000601\n20000602\n20000603\n20000604\n20000605\n20000606\n20000607\n20000608\n20000609\n20000610\n20000611\n20000612\n20000613\n20000614\n20000615\n20000616\n20000617\n20000618\n20000619\n20000620\n20000621\n20000622\n20000623\n20000624\n20000625\n20000626\n20000627\n20000628\n20000629\n20000630\n20000631\n20000701\n20000702\n20000703\n20000704\n20000705\n20000706\n20000707\n20000708\n20000709\n20000710\n20000711\n20000712\n20000713\n20000714\n20000715\n20000716\n20000717\n20000718\n20000719\n20000720\n20000721\n20000722\n20000723\n20000724\n20000725\n20000726\n20000727\n20000728\n20000729\n20000730\n20000731\n20000801\n20000802\n20000803\n20000804\n2.00008E+13\n20000805\n20000806\n20000807\n20000808\n20000809\n20000810\n20000811\n20000812\n20000813\n20000814\n20000815\n20000816\n20000817\n20000818\n20000819\n20000820\n20000821\n20000822\n20000823\n20000824\n20000825\n20000826\n20000827\n20000828\n20000829\n20000830\n20000831\n20000901\n20000902\n20000903\n20000904\n20000905\n20000906\n20000907\n20000908\n20000909\n20000910\n20000911\n20000912\n20000913\n20000914\n20000915\n20000916\n20000917\n20000918\n20000919\n20000920\n20000921\n20000922\n20000923\n20000924\n20000925\n20000926\n20000927\n20000928\n20000929\n20000930\n20000931\n20001000\n20001001\n20001002\n20001003\n20001004\n20001005\n20001006\n20001007\n20001008\n20001009\n20001010\n20001011\n20001012\n20001013\n20001014\n20001015\n20001016\n20001017\n20001018\n20001019\n20001020\n20001021\n20001022\n20001023\n20001024\n20001025\n20001026\n20001027\n20001028\n20001029\n20001030\n20001031\n20001101\n20001102\n20001103\n20001104\n20001105\n20001106\n20001107\n20001108\n20001109\n20001110\n20001111\n20001112\n20001113\n20001114\n20001115\n20001116\n20001117\n20001118\n20001119\n20001120\n20001121\n20001122\n20001123\n20001124\n20001125\n20001126\n20001127\n20001128\n20001129\n20001130\n20001131\n20001201\n200012019\n20001202\n20001203\n20001204\n20001205\n20001206\n20001207\n20001208\n20001209\n20001210\n20001211\n20001212\n20001213\n20001214\n20001215\n20001216\n20001217\n20001218\n20001219\n20001220\n20001221\n20001222\n20001223\n20001224\n20001225\n20001226\n20001227\n20001228\n20001229\n20001230\n20001231\n20001234\n200012zym\n20001314\n200013579\n20001695\n20001976\n20001978\n20001979\n20001980\n20001981\n20001982\n20001984\n20001988\n20001997\n20001999\n20002004\n20002005\n20002009\n20002020\n20002096\n20002139\n20002254\n200026143\n20003000\n20003205\n2000524125\n20005263\n20005620\n20006444\n2000644430\n200071039\n20007789\n20007853\n20008153\n20008178\n20008222\n20008877\n2000AND315\n2000comeer\n2000e936\n2000love\n2000ZSY0814nv\n2000zxcv\n20010000\n200100280\n20010101\n20010102\n20010103\n20010104\n20010105\n20010106\n20010107\n20010108\n20010109\n20010110\n20010111\n20010112\n20010113\n20010114\n20010115\n20010116\n20010117\n20010118\n20010119\n20010120\n20010121\n20010122\n20010123\n20010124\n20010125\n20010126\n20010127\n20010128\n20010129\n20010130\n20010131\n200101324\n20010201\n20010202\n2001020219\n20010203\n20010204\n20010205\n20010206\n20010207\n20010208\n20010209\n20010210\n20010211\n20010212\n20010213\n20010214\n20010215\n20010216\n20010217\n20010218\n20010219\n20010220\n20010221\n20010222\n20010223\n20010224\n20010225\n20010226\n20010227\n20010228\n20010229\n20010230\n20010231\n20010301\n20010302\n20010303\n20010304\n20010305\n20010306\n20010307\n20010308\n20010309\n20010310\n20010311\n20010312\n20010313\n20010314\n20010315\n20010316\n20010317\n20010318\n20010319\n20010320\n20010321\n20010322\n20010323\n20010324\n20010325\n20010326\n20010327\n20010328\n20010329\n20010330\n20010331\n20010401\n20010402\n20010403\n20010404\n20010405\n20010406\n20010407\n20010408\n20010409\n20010410\n20010411\n20010412\n20010413\n20010414\n20010415\n20010416\n20010417\n20010418\n20010419\n20010420\n20010421\n20010422\n20010423\n20010424\n20010425\n20010426\n20010427\n20010428\n20010429\n20010430\n20010431\n2001045038\n20010480\n20010501\n20010502\n20010503\n20010504\n20010505\n20010506\n20010507\n20010508\n20010509\n20010510\n20010511\n20010512\n20010513\n20010514\n20010515\n20010516\n20010517\n20010518\n20010519\n20010520\n20010521\n20010522\n20010523\n20010524\n20010525\n20010526\n20010527\n20010528\n20010529\n20010530\n20010530210\n20010531\n20010601\n20010602\n20010603\n20010604\n20010605\n20010606\n20010607\n20010608\n20010609\n20010610\n20010611\n20010612\n20010613\n20010614\n20010615\n20010616\n20010617\n20010618\n20010619\n20010620\n20010621\n200106211\n20010622\n20010623\n20010624\n20010625\n2.00106E+11\n20010626\n20010627\n20010628\n20010629\n20010630\n20010631\n20010701\n20010702\n20010703\n20010704\n20010705\n20010706\n20010707\n20010708\n20010709\n20010710\n20010711\n20010712\n20010713\n20010714\n20010715\n20010716\n20010717\n20010718\n20010719\n20010720\n2001072008\n20010721\n20010722\n20010723\n20010724\n20010725\n20010726\n20010727\n20010728\n20010729\n20010730\n20010731\n20010801\n20010802\n20010803\n20010804\n20010805\n20010806\n20010807\n20010808\n20010809\n20010810\n20010811\n20010812\n20010813\n20010814\n20010815\n20010816\n20010817\n20010818\n20010819\n20010820\n20010821\n20010822\n20010823\n20010824\n20010825\n20010826\n20010827\n20010828\n20010829\n20010830\n20010831\n20010874\n20010901\n20010902\n20010903\n20010904\n20010905\n20010906\n20010907\n20010908\n20010909\n20010910\n20010911\n20010912\n20010913\n20010914\n20010915\n20010916\n20010917\n20010918\n20010919\n20010920\n20010921\n20010922\n20010923\n20010924\n20010925\n20010926\n20010927\n20010928\n20010929\n20010930\n20010931\n20011001\n20011002\n20011003\n20011004\n20011005\n20011006\n20011007\n20011008\n20011009\n20011010\n20011011\n20011012\n20011013\n20011014\n2001101474\n20011015\n20011016\n20011017\n20011018\n20011019\n20011020\n20011021\n20011022\n20011023\n20011024\n20011025\n20011026\n20011027\n20011028\n20011029\n20011030\n20011031\n2001105330\n20011101\n20011102\n20011103\n20011104\n20011105\n20011106\n20011107\n20011108\n20011109\n20011110\n20011111\n20011112\n20011113\n20011114\n20011115\n20011116\n20011117\n20011118\n20011119\n20011120\n20011121\n20011122\n20011123\n20011124\n20011125\n20011126\n20011127\n20011128\n20011129\n20011130\n20011131\n2001114336\n20011201\n20011202\n20011203\n20011204\n20011205\n20011206\n20011207\n20011208\n20011209\n20011210\n20011211\n20011212\n20011213\n20011214\n2001121403\n20011215\n20011216\n20011217\n20011218\n20011219\n20011220\n20011221\n20011222\n20011223\n20011224\n20011225\n20011226\n20011227\n20011228\n20011229\n20011230\n20011231\n20011234\n2001123456\n20011244\n20011311\n2001137222\n20011392\n2001143111\n20011551\n200115ghg\n20011976\n20011978\n20011980\n20011981\n20011982\n20011983\n20011984\n20011997\n2.0012E+11\n20012001d\n20012004\n20012005\n20012007\n20012008\n20012009\n20012326\n20012476\n2.0013E+13\n2001314w\n20013342\n20013429\n20013500\n200136658\n20013700\n2.00138E+11\n20014229\n2001429<>\n20014587\n20014609\n20015181128\n20015726\n20015930\n200159311\n20016192\n20016528\n200168cnet\n2001724044\n20017789\n20017ecd\n20018310\n20018355\n20018541\n200185627\n2001abcd\n2001l5z21\n2001love\n2001mmeng\n2001qswj\n2001w8200869\n200200200\n20020101\n20020102\n20020103\n20020104\n20020105\n20020106\n20020107\n20020108\n20020109\n20020110\n20020111\n20020112\n20020113\n20020114\n20020115\n20020116\n20020117\n20020118\n20020119\n20020120\n20020121\n20020122\n20020123\n20020124\n20020125\n20020126\n20020127\n20020128\n20020129\n20020130\n20020131\n20020141\n20020201\n20020202\n20020203\n20020204\n20020205\n20020206\n20020207\n20020208\n20020209\n20020209jtl\n20020210\n20020211\n20020212\n20020213\n20020214\n20020215\n20020216\n20020217\n20020218\n20020219\n20020220\n20020221\n20020222\n20020223\n20020224\n20020225\n20020226\n20020227\n20020228\n20020229\n20020230\n20020231\n20020234\n20020301\n20020302\n20020303\n20020304\n20020305\n20020306\n20020307\n20020308\n20020309\n20020310\n20020311\n20020312\n20020313\n20020314\n20020315\n20020316\n20020317\n20020318\n20020319\n20020320\n20020321\n20020322\n20020323\n20020324\n20020325\n20020326\n20020327\n20020328\n20020329\n20020330\n20020331\n20020347\n20020401\n20020402\n20020403\n20020404\n20020405\n20020406\n20020407\n20020408\n20020409\n20020410\n20020411\n20020412\n20020413\n20020414\n20020415\n20020416\n20020417\n20020418\n20020419\n20020420\n20020421\n20020422\n20020423\n20020424\n20020425\n20020426\n20020427\n20020428\n20020429\n20020430\n20020431\n20020501\n20020502\n20020503\n20020504\n20020505\n20020506\n20020507\n20020508\n20020509\n20020510\n20020511\n20020512\n20020513\n20020514\n20020515\n20020516\n20020517\n20020518\n20020519\n20020520\n20020521\n20020522\n20020523\n20020524\n20020525\n20020526\n20020527\n20020528\n20020529\n20020530\n20020531\n20020601\n20020602\n20020603\n20020604\n20020605\n20020606\n20020607\n20020608\n20020609\n20020610\n20020611\n20020612\n20020613\n20020614\n20020615\n20020616\n20020617\n20020618\n20020619\n20020620\n20020621\n20020622\n20020623\n20020624\n20020625\n20020626\n20020627\n20020628\n20020629\n20020630\n20020631\n20020701\n20020702\n20020703\n20020704\n20020705\n20020706\n20020707\n20020708\n20020709\n20020710\n20020711\n20020712\n20020713\n20020714\n20020715\n20020716\n20020717\n20020718\n20020719\n20020720\n20020721\n20020722\n20020723\n20020724\n20020725\n20020726\n20020727\n20020728\n20020729\n20020730\n20020731\n20020801\n200208013\n20020802\n20020803\n20020804\n20020805\n20020806\n20020807\n20020808\n20020809\n20020810\n20020811\n20020812\n20020813\n20020814\n20020815\n20020816\n20020817\n20020818\n20020819\n20020820\n20020821\n20020822\n20020823\n2002082301\n20020824\n20020825\n20020826\n20020827\n20020828\n20020829\n20020830\n20020831\n20020901\n2.00209E+11\n20020902\n20020903\n20020904\n20020905\n20020906\n20020907\n20020908\n20020909\n20020910\n20020911\n20020912\n20020912ss\n20020913\n20020914\n20020915\n20020916\n20020917\n20020918\n20020919\n20020920\n20020921\n20020922\n20020923\n20020923067\n20020924\n20020925\n20020926\n20020927\n20020928\n20020929\n20020930\n2002093067\n20020931\n200209988\n20021000\n20021001\n20021002\n20021003\n20021004\n20021005\n20021006\n20021007\n20021008\n20021009\n20021010\n20021011\n20021012\n20021013\n20021014\n20021015\n20021016\n20021017\n20021018\n20021019\n20021020\n20021021\n20021022\n20021023\n20021024\n20021025\n20021026\n20021027\n20021028\n20021029\n20021030\n20021031\n20021101\n20021102\n20021103\n20021104\n20021105\n20021106\n20021107\n20021108\n20021109\n20021110\n20021111\n200211115\n20021112\n20021113\n20021114\n20021115\n20021116\n20021117\n20021117GAOMING\n20021118\n20021119\n20021120\n20021121\n20021122\n20021123\n20021124\n20021125\n20021126\n20021127\n20021128\n20021129\n20021130\n20021131\n20021201\n20021202\n20021202ma\n20021203\n20021204\n20021205\n20021206\n20021207\n20021208\n20021209\n20021210\n20021211\n20021213\n20021214\n20021215\n20021216\n20021217\n20021218\n20021219\n20021220\n20021221\n20021222\n20021223\n20021224\n20021225\n20021226\n20021227\n20021228\n20021229\n20021230\n20021231\n20021234\n20021240\n200212521\n20021313\n20021314\n2002133055\n20021458\n20021522\n2002153113\n200216117\n20021717\n20021740\n20021773\n20021778\n2002190235\n20021977\n20021978\n20021979\n20021981\n20021982\n20021983\n20021984\n20021985\n20021986\n20021987\n20021998\n20021999\n20022004\n20022005\n20022006\n20022007\n20022010\n20022049\n20022113\n20022122\n2002231042\n20022316\n2002231924\n2.00231E+11\n20023506\n20023658\n20024030\n20024319\n200244yang!\n200254105\n20025630\n2002588615\n2002713wu\n20027789\n200278212lk\n20028218\n20028899\n20029930000\n20029999\n2002a110127\n2002bamboo\n2002comehust\n2002fifa\n2002toutou111\n2002yhdln\n20030000\n200300125\n200300400\n20030084\n20030101\n200301013\n20030102\n20030103\n20030104\n20030105\n20030106\n20030107\n20030108\n20030109\n20030110\n20030111\n20030112\n20030113\n20030114\n20030115\n20030116\n20030117\n20030118\n20030119\n20030120\n20030121\n20030122\n20030123\n20030124\n20030125\n20030126\n20030127\n20030128\n20030129\n20030130\n20030131\n20030201\n20030202\n20030203\n20030204\n20030205\n20030206\n20030207\n20030208\n20030209\n20030210\n20030211\n2003021151\n20030212\n20030213\n20030214\n20030215\n20030216\n20030217\n20030218\n20030219\n20030220\n20030221\n20030222\n20030223\n20030224\n20030225\n20030226\n20030227\n20030228\n20030229\n20030230\n20030231\n20030301\n20030302\n20030303\n20030304\n20030305\n20030306\n20030307\n20030308\n20030309\n20030310\n20030311\n20030312\n20030312fwt\n20030313\n20030314\n20030315\n20030316\n20030317\n20030318\n20030319\n20030320\n20030321\n20030322\n20030323\n20030324\n20030325\n20030326\n20030327\n20030328\n20030329\n20030330\n20030331\n2003034204\n20030401\n20030402\n20030403\n20030404\n20030405\n20030406\n20030407\n20030408\n20030409\n20030410\n20030411\n20030412\n20030413\n20030414\n20030415\n20030416\n20030417\n20030418\n20030419\n20030420\n20030421\n20030422\n20030423\n20030424\n20030425\n20030426\n20030427\n20030428\n20030429\n20030430\n20030431\n2003044138\n20030501\n20030502\n20030503\n20030504\n20030505\n20030506\n20030507\n20030508\n20030509\n20030510\n20030511\n20030512\n20030513\n20030514\n20030515\n20030516\n20030517\n20030518\n20030519\n20030520\n20030521\n20030522\n20030523\n20030524\n20030525\n20030526\n20030527\n20030528\n20030529\n20030530\n20030531\n20030601\n20030602\n20030603\n20030604\n20030605\n20030606\n20030607\n20030608\n20030609\n20030610\n20030611\n20030612\n20030613\n20030614\n20030615\n20030616\n20030617\n20030618\n20030619\n20030620\n20030621\n20030622\n20030623\n20030624\n20030625\n20030626\n20030627\n20030628\n20030629\n20030630\n20030631\n20030701\n20030702\n20030703\n20030704\n20030705\n20030706\n20030707\n20030708\n20030709\n20030710\n20030711\n20030712\n20030713\n20030714\n20030715\n20030716\n20030717\n20030718\n20030719\n20030720\n20030721\n20030722\n20030723\n20030724\n20030725\n20030726\n20030727\n20030728\n20030729\n20030730\n20030731\n20030769\n20030789\n20030801\n20030802\n20030803\n20030804\n20030805\n20030806\n20030807\n20030808\n20030809\n20030810\n20030811\n20030812\n20030813\n20030814\n20030815\n20030816\n20030817\n20030818\n20030819\n20030820\n20030821\n20030822\n20030823\n20030824\n20030825\n20030826\n20030827\n20030828\n20030829\n20030830\n20030831\n20030901\n20030902\n20030903\n20030904\n20030905\n20030906\n20030907\n20030908\n20030909\n20030910\n20030911\n20030912\n20030913\n20030914\n20030915\n20030916\n20030917\n20030918\n20030919\n20030920\n20030921\n20030922\n20030923\n20030924\n20030925\n20030926\n20030927\n20030928\n20030929\n20030930\n20030931\n20031001\n2003100183\n20031002\n20031003\n20031004\n20031005\n20031006\n20031007\n20031008\n20031009\n20031010\n20031011\n20031012\n20031013\n20031014\n20031015\n20031016\n20031017\n20031018\n20031019\n20031020\n20031021\n20031022\n20031023\n20031024\n20031025\n20031026\n20031027\n20031028\n20031029\n20031030\n20031031\n2003105124\n2003108011\n20031101\n200311011\n20031102\n20031103\n20031104\n20031105\n20031106\n20031107\n20031108\n20031109\n20031110\n20031111\n20031112\n20031113\n20031114\n20031115\n20031116\n20031117\n20031118\n20031119\n20031120\n20031121\n20031122\n20031123\n20031124\n20031125\n20031126\n20031127\n20031128\n20031129\n20031130\n20031131\n2003113553\n200311521\n20031201\n20031202\n20031203\n20031204\n20031205\n20031206\n20031207\n20031208\n20031209\n20031210\n20031211\n20031212\n20031213\n20031214\n20031215\n20031216\n20031217\n20031218\n20031219\n20031220\n20031221\n20031222\n20031223\n20031224\n20031225\n20031226\n20031226tvxq\n20031227\n20031228\n20031229\n20031230\n20031231\n20031234\n20031314\n2003135529\n20031437\n20031975\n20031979\n20031981\n20031983\n20031984\n20031985\n20031986\n20031987\n20031988\n20031995\n20032005\n20032006\n20032007\n20032009\n20032014\n2003225900\n20032444\n20032521\n20032709\n20033002\n200331528\n20033153\n20033211\n200332810\n2.00341E+12\n20034466\n200348553\n20035117\n2003521515\n2003541788\n20036789\n20037511\n2003814600\n20038460582\n200390252\n2003914242\n2003hllx\n2003love\n2003ly2003\n2003nice\n2003yklhs\n20040101\n20040102\n20040103\n20040104\n20040105\n20040106\n20040107\n20040108\n20040109\n20040110\n20040111\n20040112\n20040113\n20040114\n20040115\n20040116\n20040117\n20040118\n20040119\n20040120\n20040121\n20040122\n20040123\n20040124\n20040125\n20040126\n20040127\n20040128\n20040129\n20040130\n20040131\n20040201\n20040202\n20040203\n20040204\n20040205\n20040206\n20040207\n20040208\n20040209\n20040210\n20040211\n20040212\n20040213\n20040214\n20040215\n20040216\n20040217\n20040218\n20040219\n20040220\n20040221\n20040222\n20040223\n20040224\n20040225\n20040226\n20040227\n20040228\n20040229\n20040230\n20040231\n20040301\n20040302\n20040303\n20040304\n20040305\n20040306\n20040307\n20040308\n20040309\n20040310\n20040311\n20040312\n20040313\n20040314\n20040315\n20040316\n20040317\n20040318\n20040319\n20040320\n20040321\n20040322\n20040323\n20040324\n20040325\n20040326\n20040327\n20040328\n20040329\n20040330\n20040331\n20040334\n20040401\n20040402\n20040402067\n20040403\n20040404\n20040405\n20040406\n20040407\n20040408\n20040409\n20040410\n2.00404E+11\n20040411\n20040412\n20040413\n20040414\n20040415\n20040416\n20040417\n20040418\n20040419\n20040420\n20040421\n20040422\n2.00404E+12\n20040423\n20040424\n20040425\n20040426\n20040427\n20040428\n20040429\n20040430\n20040431\n20040501\n20040502\n20040503\n20040504\n20040505\n20040506\n20040507\n20040508\n20040509\n20040510\n20040511\n20040512\n20040513\n20040514\n20040515\n20040516\n20040517\n20040518\n20040519\n20040520\n20040521\n20040522\n20040523\n20040524\n20040525\n20040526\n20040527\n20040528\n20040529\n20040530\n20040531\n20040601\n20040602\n20040603\n20040604\n20040605\n20040606\n20040607\n20040608\n20040609\n20040610\n20040611\n20040612\n20040613\n20040614\n20040615\n20040616\n20040617\n20040618\n20040619\n20040620\n20040621\n20040622\n20040623\n20040624\n20040625\n20040626\n20040627\n20040628\n20040629\n20040630\n20040631\n20040701\n20040702\n20040703\n20040704\n20040705\n20040706\n20040707\n20040708\n20040709\n20040710\n20040711\n20040712\n20040713\n20040714\n20040715\n20040716\n20040717\n20040718\n20040719\n20040720\n20040721\n20040722\n20040723\n20040724\n20040725\n20040726\n20040727\n20040728\n20040729\n20040730\n20040731\n200407833\n20040801\n20040801105\n20040802\n20040803\n20040804\n20040805\n20040806\n20040807\n20040808\n20040809\n20040810\n20040811\n20040812\n20040813\n20040814\n20040815\n20040816\n20040817\n20040818\n20040819\n20040820\n20040821\n20040822\n20040823\n20040824\n20040825\n20040826\n20040827\n20040828\n20040829\n20040830\n20040831\n20040901\n20040902\n20040903\n20040904\n20040905\n20040906\n20040907\n20040908\n20040909\n20040910\n20040911\n20040912\n20040913\n20040914\n20040915\n20040916\n20040917\n20040918\n20040919\n20040920\n20040921\n20040922\n20040923\n20040924\n20040925\n20040926\n20040927\n20040928\n20040929\n20040930\n20040931\n20040956\n2.0041E+11\n20041001\n20041002\n20041003\n20041004\n20041005\n20041006\n20041007\n20041008\n20041009\n20041010\n20041011\n20041012\n20041013\n20041014\n20041015\n20041016\n20041017\n20041018\n20041019\n20041020\n20041021\n20041022\n20041023\n20041024\n20041025\n20041026\n20041027\n20041028\n20041029\n20041030\n2004103002\n20041031\n200410501\n20041101\n20041102\n20041103\n20041104\n20041105\n20041106\n20041107\n20041108\n20041109\n20041110\n20041111\n20041112\n20041113\n20041114\n20041115\n20041116\n20041117\n20041118\n20041119\n20041120\n20041121\n20041122\n20041123\n20041124\n20041125\n20041126\n20041127\n20041128\n20041129\n20041130\n20041131\n20041200457\n20041201\n20041202\n20041203\n20041204\n20041205\n20041206\n20041207\n20041208\n20041209\n20041210\n20041211\n20041212\n20041213\n20041214\n20041215\n20041216\n20041217\n20041218\n20041219\n20041220\n20041221\n20041222\n20041223\n20041224\n20041225\n20041226\n20041227\n20041228\n20041229\n20041230\n20041231\n20041232\n20041234\n200412399qq\n20041314\n200419121\n20041982\n20041983\n20041984\n20041985\n20041986\n20041987\n20041999\n20042006\n20042007\n20042009\n20043212\n20043512\n2004381015\n20044002\n20044083\n20044200\n20045776\n20046701\n20046789\n200481zzh\n2004lalao\n2004nian\n2004plhdl\n2.00501E+11\n20050101\n20050102\n20050103\n20050104\n20050105\n20050106\n20050107\n20050108\n20050109\n20050110\n20050111\n20050112\n20050113\n20050114\n20050115\n20050116\n20050117\n20050118\n20050119\n20050120\n20050121\n20050122\n20050123\n20050124\n20050125\n20050126\n20050127\n20050128\n20050129\n20050130\n20050131\n20050201\n20050201ms\n20050202\n20050203\n20050204\n20050205\n20050206\n20050207\n20050208\n20050209\n20050210\n20050211\n20050212\n20050213\n20050214\n20050215\n20050216\n20050217\n20050218\n20050219\n20050220\n20050221\n20050222\n20050223\n20050224\n20050225\n20050226\n20050227\n20050228\n20050229\n20050230\n20050231\n20050301\n20050302\n20050303\n20050304\n20050305\n20050306\n20050307\n20050308\n20050309\n20050310\n20050311\n20050312\n20050313\n20050314\n20050315\n20050316\n20050317\n20050318\n20050319\n20050320\n20050321\n20050322\n20050323\n20050324\n20050325\n20050326\n20050327\n20050328\n20050329\n20050330\n20050331\n20050401\n20050402\n20050403\n20050404\n20050405\n20050406\n20050407\n20050408\n20050409\n20050410\n20050411\n20050412\n20050412@@??\n20050413\n20050414\n20050415\n20050416\n2.00504E+11\n20050417\n20050418\n20050419\n20050420\n20050421\n20050422\n20050423\n20050424\n20050425\n20050426\n20050427\n20050428\n20050429\n20050430\n20050431\n20050501\n20050502\n20050503\n20050504\n20050505\n20050506\n20050507\n20050508\n20050509\n20050510\n20050511\n20050512\n20050513\n20050514\n20050515\n20050516\n20050517\n20050518\n20050519\n20050520\n20050521\n20050522\n20050523\n20050524\n20050525\n20050526\n20050527\n20050528\n20050529\n20050530\n20050531\n20050601\n20050602\n20050603\n20050604\n20050605\n20050606\n20050607\n20050608\n20050609\n20050610\n20050611\n20050612\n20050613\n20050614\n20050615\n20050616\n20050617\n20050618\n20050619\n20050620\n20050621\n20050622\n20050623\n20050624\n20050625\n20050626\n20050627\n20050628\n20050629\n20050630\n20050631\n20050701\n2005070111\n20050702\n20050703\n20050704\n20050705\n20050706\n20050707\n20050708\n20050709\n20050710\n20050711\n20050712\n20050713\n20050714\n20050715\n20050716\n20050717\n20050718\n20050719\n20050720\n20050721\n20050722\n20050723\n20050724\n20050725\n20050726\n20050727\n20050728\n20050729\n20050730\n20050731\n20050744071\n20050801\n20050802\n20050803\n20050804\n20050805\n20050806\n20050807\n20050808\n20050809\n20050810\n20050811\n20050812\n20050813\n20050814\n20050815\n20050816\n20050817\n20050818\n20050819\n20050820\n20050821\n20050822\n20050823\n20050824\n20050825\n20050826\n20050827\n20050828\n20050829\n20050830\n20050831\n20050901\n20050902\n20050903\n20050904\n20050905\n20050906\n20050907\n20050908\n20050909\n20050910\n20050911\n20050912\n20050913\n20050914\n20050915\n20050916\n20050917\n20050918\n20050919\n20050920\n20050921\n20050922\n20050923\n20050924\n20050925\n20050926\n20050927\n20050928\n20050929\n20050930\n20050931\n20051001\n20051002\n20051003\n20051004\n20051005\n20051006\n20051007\n20051008\n20051009\n20051010\n20051011\n20051012\n20051013\n20051014\n20051015\n20051016\n20051017\n20051017e\n20051017v\n20051018\n20051019\n20051020\n20051021\n20051022\n20051023\n20051024\n20051025\n20051026\n20051027\n20051028\n20051029\n20051030\n20051031\n20051101\n20051102\n20051103\n20051104\n20051105\n20051106\n20051107\n20051108\n20051109\n20051110\n20051111\n20051112\n20051113\n20051114\n20051116\n20051117\n20051118\n20051119\n20051120\n20051120122\n20051121\n20051122\n20051123\n20051124\n20051125\n20051126\n20051127\n20051128\n20051129\n20051130\n20051131\n2005114119\n20051201\n20051202\n20051203\n20051204\n20051205\n20051206\n20051207\n20051208\n20051209\n20051210\n20051211\n20051212\n20051213\n20051214\n20051215\n20051216\n20051217\n20051218\n20051219\n20051220\n20051221\n20051222\n20051223\n20051224\n20051225\n20051225h\n20051226\n2.00512E+11\n20051227\n20051228\n20051229\n20051230\n20051231\n2005131121\n20051314\n20051976\n20051984\n20051985\n20051986\n20051987\n20051995\n20052004\n20052007\n20052009\n200521082\n2005219sfj\n20052491\n2.0053E+11\n200531zzw\n200533078\n2005406032\n2005417bb\n2005430114\n20054720\n20054841\n20055002\n2005600643\n20056201092\n20056768\n20056789\n20058888\n20059999\n2005n726\n2006+2006\n20060000\n2006000307\n20060101\n2006010101\n20060102\n20060103\n20060104\n20060105\n20060106\n20060107\n20060108\n20060109\n20060110\n20060111\n20060112\n20060113\n20060114\n20060115\n20060116\n20060117\n20060118\n20060119\n20060120\n20060121\n20060122\n20060123\n20060124\n20060125\n20060126\n20060127\n20060128\n20060129\n20060130\n20060131\n20060201\n20060202\n20060203\n20060204\n20060205\n20060206\n20060207\n20060208\n20060209\n20060210\n20060211\n20060212\n20060213\n20060214\n20060215\n20060216\n20060217\n20060218\n20060219\n20060220\n20060221\n20060222\n20060223\n20060224\n20060225\n20060226\n20060227\n20060228\n20060229\n20060230\n20060231\n20060301\n20060302\n20060302218\n20060303\n20060304\n20060305\n20060306\n20060307\n20060308\n20060309\n20060310\n20060311\n20060312\n20060313\n20060314\n20060315\n20060316\n20060317\n20060318\n20060319\n20060320\n20060321\n20060322\n20060323\n20060324\n20060325\n20060326\n20060327\n20060328\n20060329\n20060330\n20060331\n20060401\n20060402\n20060403\n20060404\n20060405\n20060406\n20060407\n20060408\n20060409\n20060410\n20060411\n20060412\n20060413\n20060414\n20060415\n20060416\n20060417\n20060418\n20060419\n20060420\n20060421\n20060422\n20060423\n20060424\n20060425\n20060426\n20060427\n20060428\n20060429\n20060430\n20060431\n20060444101\n20060501\n2.00605E+11\n20060502\n20060503\n20060504\n20060505\n20060506\n20060507\n20060508\n20060509\n20060510\n20060511\n20060512\n20060513\n20060514\n20060515\n20060516\n20060517\n20060518\n20060519\n20060520\n20060521\n20060522\n20060523\n20060524\n20060525\n20060526\n20060527\n20060528\n20060529\n20060530\n20060531\n20060601\n20060602\n20060603\n20060604\n20060605\n20060606\n20060607\n20060608\n20060609\n20060610\n20060611\n20060612\n20060613\n20060614\n20060615\n20060616\n20060617\n20060618\n20060619\n20060620\n20060621\n20060622\n20060623\n20060624\n20060625\n20060626\n20060627\n20060628\n20060629\n20060630\n20060631\n20060701\n20060702\n20060703\n20060704\n20060705\n20060706\n20060707\n20060708\n20060709\n20060710\n20060711\n20060712\n20060713\n20060714\n20060715\n20060716\n20060717\n20060718\n2.00607E+11\n20060719\n20060719nadya\n20060720\n20060721\n20060722\n20060723\n20060724\n20060725\n20060726\n20060727\n20060728\n20060729\n20060730\n20060731\n20060801\n20060802\n20060803\n20060804\n20060805\n20060806\n20060807\n200608075\n20060808\n20060809\n20060810\n20060811\n20060812\n20060813\n20060814\n20060815\n20060816\n20060817\n20060818\n20060819\n20060820\n20060821\n20060822\n20060823\n20060824\n20060825\n20060826\n20060827\n20060828\n20060829\n20060830\n20060831\n20060901\n20060902\n20060903\n20060904\n20060905\n20060906\n20060907\n20060908\n20060909\n20060910\n20060911\n20060912\n20060913\n20060914\n20060915\n20060916\n20060917\n20060918\n20060919\n20060920\n20060921\n20060922\n20060923\n20060924\n20060925\n20060926\n20060927\n20060928\n20060929\n20060930\n20060931\n20061001\n20061002\n20061003\n20061004\n20061005\n20061006\n20061007\n20061008\n20061009\n20061010\n20061011\n20061012\n20061013\n20061014\n20061015\n20061016\n20061017\n20061018\n20061019\n20061020\n20061021\n20061022\n20061023\n20061024\n20061025\n20061026\n20061027\n20061028\n20061029\n20061030\n20061031\n20061081256\n20061101\n20061102\n20061103\n20061104\n20061105\n20061106\n20061107\n20061108\n20061109\n20061110\n20061111\n20061112\n20061112w\n20061113\n20061114\n20061115\n20061116\n20061117\n20061118\n20061119\n20061120\n20061121\n20061122\n20061123\n20061124\n20061125\n20061126\n20061127\n20061128\n20061129\n20061130\n20061131\n20061201\n20061202\n20061203\n20061204\n20061205\n20061205057\n20061206\n20061207\n20061208\n20061209\n20061210\n20061211\n20061212\n20061213\n20061214\n20061215\n20061216\n20061217\n20061218\n20061219\n20061220\n20061221\n20061222\n20061223\n20061224\n20061225\n20061226\n20061227\n20061228\n20061229\n20061230\n20061231\n20061234\n200612345\n2006123456\n20061314\n20061501\n20061983\n20061984\n20061985\n20061986\n20061987\n20062005\n200620060\n20062009\n20062010\n20062027hyh\n2.0064E+11\n20064149\n20064166\n2006443220\n20065906\n20066002\n20067332463\n200674617\n2006764130\n2006777888\n20068888\n200692046\n200698ky\n200699569\n2006tianya\n2006xkxk\n20070000\n20070102\n20070103\n20070104\n20070105\n20070106\n20070107\n20070108\n20070109\n20070110\n20070111\n20070112\n20070113\n20070114\n20070115\n20070116\n20070117\n20070118\n20070119\n20070120\n20070121\n20070122\n20070123\n20070124\n20070125\n20070126\n20070127\n20070128\n20070129\n20070130\n20070131\n20070201\n20070202\n20070203\n20070204\n20070205\n20070206\n20070207\n20070208\n20070209\n20070210\n20070211\n20070212\n20070213\n20070214\n20070215\n20070216\n20070217\n20070218\n20070219\n20070220\n20070221\n20070222\n20070223\n20070224\n20070225\n20070226\n20070227\n20070228\n20070229\n20070230\n20070231\n20070301\n2.00703E+14\n20070302\n20070303\n20070304\n200703047\n20070305\n20070306\n20070307\n20070308\n20070309\n20070310\n20070311\n20070312\n20070313\n20070314\n20070315\n20070316\n20070317\n20070318\n20070319\n20070320\n20070321\n20070322\n20070323\n20070324\n20070325\n20070326\n20070327\n20070328\n20070329\n20070330\n20070331\n20070401\n20070402\n20070403\n20070404\n20070405\n20070406\n20070407\n20070408\n20070409\n20070410\n20070411\n20070412\n20070413\n20070414\n20070415\n20070416\n20070417\n20070418\n20070419\n20070420\n20070421\n20070422\n20070423\n20070424\n20070425\n20070426\n20070427\n20070428\n20070429\n20070430\n20070431\n20070501\n20070502\n20070503\n20070504\n20070505\n20070506\n20070507\n20070508\n20070509\n20070510\n20070511\n20070512\n20070513\n20070514\n20070514wunai\n20070515\n20070516\n20070517\n20070518\n20070519\n20070520\n20070521\n20070522\n20070523\n20070524\n20070525\n20070526\n20070527\n20070528\n20070529\n20070530\n20070531\n20070601\n20070602\n20070603\n20070604\n20070605\n20070606\n20070607\n2007060708\n20070608\n20070609\n20070610\n20070611\n20070612\n20070613\n20070614\n20070615\n20070616\n20070617\n20070618\n20070619\n20070620\n20070621\n20070622\n20070623\n20070624\n20070625\n20070626\n20070627\n20070628\n20070629\n20070630\n20070631\n20070657\n20070701\n20070702\n20070703\n20070704\n20070705\n20070706\n20070707\n20070708\n20070709\n20070710\n20070711\n20070712\n20070713\n20070714\n20070715\n20070716\n20070717\n20070718\n20070719\n20070720\n20070721\n20070722\n20070723\n20070724\n20070725\n20070726\n20070727\n20070728\n20070729\n20070730\n20070731\n20070801\n20070802\n20070803\n20070804\n20070805\n20070806\n20070807\n20070808\n20070809\n20070810\n20070811\n20070812\n20070813\n20070814\n20070815\n20070816\n20070817\n20070818\n20070819\n20070820\n20070821\n20070822\n20070823\n20070824\n20070825\n20070826\n20070827\n20070828\n20070829\n20070830\n20070831\n20070901\n20070902\n20070903\n20070904\n20070905\n20070906\n20070907\n20070908\n20070909\n20070910\n20070911\n20070912\n20070913\n20070914\n20070915\n20070916\n20070917\n20070918\n20070919\n20070920\n20070921\n20070922\n20070923\n20070924\n20070925\n20070926\n20070927\n20070928\n20070929\n20070930\n20070931\n20071001\n20071002\n20071003\n20071004\n20071005\n20071006\n20071007\n20071008\n20071009\n20071010\n20071011\n20071012\n20071013\n20071014\n20071015\n20071015521\n20071016\n20071017\n20071018\n20071019\n20071020\n20071021\n20071022\n20071023\n20071024\n20071025\n20071026\n20071027\n20071028\n20071029\n20071030\n20071031\n20071101\n20071102\n20071103\n20071104\n20071105\n20071106\n20071107\n20071108\n20071109\n20071110\n20071111\n20071112\n20071113\n20071114\n20071115\n20071116\n20071117\n20071118\n20071119\n20071120\n20071121\n20071121ZZX\n20071122\n20071123\n20071124\n20071125\n20071126\n20071127\n20071128\n20071129\n20071130\n20071131\n2007119wl\n20071201\n20071202\n20071203\n20071204\n20071205\n20071206\n20071207\n20071208\n20071209\n20071210\n20071211\n20071212\n20071213\n20071214\n20071215\n20071216\n20071217\n20071218\n20071219\n20071220\n20071221\n20071222\n20071223\n20071224\n20071225\n2007122525\n20071226\n20071227\n20071228\n20071229\n20071230\n20071231\n20071314\n20072009\n20072045\n2007212307\n2.00723E+11\n20072613689\n2.0073E+11\n200751888\n20076494\n2007678nmet\n20076864\n20077002\n20078888\n20079066\n2007aixin\n2007butterfly\n2007ziilovezi\n2008.com\n20080000\n200800kfbb\n2.00801E+11\n20080102\n20080103\n20080104\n20080105\n20080106\n20080107\n20080108\n20080109\n20080110\n20080111\n20080112\n20080113\n20080114\n20080115\n20080116\n20080117\n20080118\n20080119\n20080120\n20080121\n20080122\n20080123\n20080124\n20080125\n20080126\n20080127\n20080128\n20080129\n20080130\n20080131\n20080201\n20080202\n20080203\n20080204\n20080205\n20080206\n20080207\n20080208\n20080209\n20080210\n20080211\n20080212\n20080213\n20080214\n20080215\n20080216\n20080217\n20080218\n20080219\n20080220\n2.00802E+11\n20080221\n20080222\n20080223\n20080224\n20080225\n20080226\n20080227\n20080228\n20080229\n20080230\n20080231\n20080301\n20080302\n20080303\n20080304\n20080305\n20080306\n20080307\n20080308\n20080309\n20080310\n20080311\n20080312\n20080313\n20080314\n20080315\n20080316\n20080317\n20080318\n20080319\n20080320\n20080321\n20080322\n20080323\n20080324\n20080325\n20080326\n20080327\n20080328\n20080329\n20080330\n20080331\n20080400362\n20080401\n20080402\n20080403\n20080404\n20080405\n20080406\n20080407\n20080408\n20080409\n20080410\n20080411\n20080412\n20080413\n20080414\n20080415\n20080416\n20080417\n20080418\n20080419\n20080420\n20080421\n20080422\n20080423\n20080424\n20080425\n2008042530\n20080426\n20080427\n20080428\n20080429\n20080430\n20080431\n20080501\n20080502\n20080503\n20080504\n20080505\n20080506\n20080507\n20080508\n20080509\n20080510\n20080511\n20080512\n2.00805E+11\n20080513\n20080514\n20080515\n20080516\n20080517\n20080518\n20080519\n20080520\n20080521\n20080522\n20080523\n20080524\n20080525\n20080526\n20080527\n20080528\n20080529\n20080530\n20080531\n20080601\n20080602\n20080603\n20080604\n20080605\n20080606\n20080607\n20080608\n20080609\n200806099\n20080610\n20080611\n20080612\n20080613\n20080614\n20080615\n20080616\n20080617\n20080618\n20080619\n20080620\n20080621\n20080622\n20080623\n20080624\n20080625\n20080626\n20080627\n20080628\n20080629\n20080630\n20080631\n20080701\n20080702\n20080703\n20080704\n20080705\n20080706\n20080707\n20080708\n20080709\n20080710\n20080711\n20080712\n20080713\n20080714\n20080715\n20080716\n20080717\n20080718\n20080719\n20080720\n20080721\n20080722\n20080723\n20080724\n20080725\n20080726\n20080727\n20080728\n20080729\n20080730\n20080731\n20080801\n20080802\n20080803\n20080804\n20080805\n20080806\n20080807\n20080808a\n20080808liu\n20080809\n20080810\n20080811\n20080812\n20080813\n20080814\n20080815\n20080816\n20080817\n20080818\n20080819\n20080820\n20080821\n20080822\n20080823\n20080824\n20080825\n20080826\n20080827\n20080828\n20080829\n20080830\n20080831\n20080898\n20080901\n20080902\n20080903\n20080904\n20080905\n20080906\n20080907\n20080908\n20080909\n20080910\n20080911\n20080912\n20080913\n20080914\n20080915\n20080916\n20080917\n20080918\n20080919\n20080920\n20080921\n20080922\n20080923\n20080924\n20080925\n20080926\n20080927\n20080928\n20080929\n20080930\n20080931\n20081000\n20081001\n20081002\n20081003\n20081004\n20081005\n20081006\n20081007\n20081008\n20081009\n20081010\n20081011\n20081012\n20081013\n20081014\n20081015\n20081016\n20081017\n20081018\n20081019\n20081020\n20081021\n20081022\n20081023\n20081024\n2.0081E+11\n20081025\n20081026\n20081027\n20081028\n20081029\n20081030\n20081031\n20081101\n20081102\n20081103\n20081104\n20081105\n20081105zzh\n20081106\n20081107\n20081108\n20081109\n20081110\n20081111\n20081112\n20081113\n20081114\n20081115\n20081116\n20081117\n20081118\n20081119\n20081120\n20081121\n20081122\n20081123\n20081124\n20081125\n20081126\n20081127\n20081128\n20081129\n20081130\n20081131\n20081201\n20081202\n20081203\n20081204\n20081205\n20081206\n20081207\n20081208\n20081209\n20081210\n20081211\n20081212\n20081213\n20081214\n20081215\n20081216\n20081217\n20081218\n20081219\n20081220\n20081221\n20081222\n20081223\n20081224\n20081225\n20081226\n20081227\n20081228\n20081229\n20081230\n20081231\n200812345\n20081314520\n20081333\n200816321\n20081701\n20081818\n20081981\n20081982\n20081983\n20081984\n20082004\n200820082\n2008200855\n20082012\n2008228520\n20083542\n20084444\n20085008\n20085121428\n20085188\n2008520520\n2008521521\n20087418\n200874839\n200880800\n200881287\n200882114\n200888123\n2.00888E+11\n200888qqq\n20088yue8ri\n20089696aa\n2008abcd\n2008aoyun\n2008aoyunhui\n2008asdf\n2008beijing\n2008bjay\n2008bjhyn\n2008boan1\n2008CHINA\n2008good\n2008H2008\n2008happy\n2008huang\n2008love\n2008mima\n2008nian\n2008riyueji\n2008sgcx\n2008shoes\n2008wang\n2008wenping\n2008wykbdfs\n2008xinmima\n2008zhang\n20090000\n20090102\n20090103\n20090104\n20090105\n20090106\n20090107\n20090108\n20090109\n20090110\n20090111\n20090112\n20090113\n20090114\n20090115\n20090116\n20090117\n20090118\n20090119\n20090120\n20090121\n20090122\n20090123\n20090124\n20090125\n20090126\n20090127\n20090128\n20090129\n20090130\n20090131\n20090201\n20090202\n20090203\n20090204\n20090205\n20090206\n20090207\n20090208\n20090209\n20090210\n20090211\n20090212\n20090213\n20090214\n20090215\n20090216\n20090217\n20090218\n20090219\n20090220\n20090221\n20090222\n20090223\n20090224\n20090225\n20090226\n20090227\n20090228\n20090229\n20090230\n20090231\n2009028456\n200902fk\n20090301\n2.00903E+15\n20090302\n20090303\n20090304\n20090305\n20090306\n20090307\n20090308\n20090309\n20090310\n20090311\n20090312\n20090313\n20090314\n20090315\n20090316\n20090317\n20090318\n20090319\n20090320\n20090321\n20090322\n20090323\n20090324\n20090325\n20090326\n20090327\n20090328\n20090329\n20090330\n20090331\n20090401\n20090402\n20090403\n20090404\n20090405\n20090406\n20090407\n20090408\n20090409\n20090410\n20090411\n20090412\n20090413\n20090414\n20090415\n20090416\n20090417\n20090418\n20090419\n20090420\n20090421\n20090422\n20090423\n20090424\n20090425\n20090426\n20090427\n20090428\n20090429\n20090430\n20090431\n20090501\n20090502\n20090503\n20090504\n20090505\n20090506\n20090507\n20090508\n20090509\n20090510\n20090511\n20090512\n20090513\n20090514\n20090515\n20090516\n20090517\n20090518\n20090519\n20090520\n20090521\n20090522\n20090523\n20090524\n20090525\n20090526\n20090527\n20090528\n20090529\n20090530\n20090531\n20090601\n20090602\n20090603\n20090604\n20090605\n20090606\n20090607\n20090608\n20090609\n20090610\n20090611\n20090612\n20090613\n20090614\n20090615\n20090616\n20090617\n20090618\n20090619\n20090620\n20090621\n20090622\n20090623\n20090624\n20090625\n20090626\n20090627\n20090628\n20090629\n20090630\n20090631\n20090701\n20090702\n20090703\n20090704\n20090705\n20090706\n20090707\n20090708\n20090709\n20090710\n20090711\n20090712\n20090713\n20090714\n20090715\n20090716\n20090717\n20090718\n20090719\n20090720\n20090721\n20090722\n20090723\n20090724\n20090725\n20090726\n20090727\n20090728\n20090729\n20090730\n20090731\n20090801\n20090802\n20090803\n20090804\n20090805\n20090806\n20090807\n20090808\n20090809\n20090810\n20090811\n20090812\n20090813\n20090814\n20090815\n20090816\n20090817\n20090818\n20090819\n20090820\n20090821\n20090822\n20090823\n20090824\n20090825\n20090826\n20090827\n20090828\n20090829\n20090830\n20090831\n20090901\n20090902\n20090903\n20090904\n20090905\n20090906\n20090907\n20090908\n2009090909\n2009090925\n20090910\n20090911\n20090912\n20090913\n20090914\n20090915\n20090916\n20090917\n20090918\n20090919\n20090920\n20090921\n20090922\n20090923\n20090924\n20090925\n20090926\n20090927\n20090928\n20090929\n20090930\n20090931\n20091001\n20091002\n20091003\n20091004\n20091005\n20091006\n20091007\n20091008\n20091009\n20091010\n20091011\n20091012\n20091013\n20091014\n20091015\n20091016\n20091017\n20091018\n20091019\n20091019abcd\n20091020\n20091021\n20091022\n20091023\n20091024\n20091025\n20091026\n20091027\n20091028\n20091029\n20091030\n20091031\n2.00911E+11\n20091101\n20091102\n20091103\n20091104\n20091105\n20091106\n20091107\n20091108\n20091109\n20091110\n20091111\n2009111111\n20091112\n20091113\n20091114\n20091115\n20091116\n20091117\n20091118\n20091119\n20091120\n20091121\n20091122\n20091123\n20091124\n20091125\n20091126\n20091127\n20091128\n20091129\n20091130\n20091131\n20091201\n20091202\n20091203\n20091204\n20091205\n20091206\n20091207\n20091208\n20091209\n20091210\n20091211\n20091212\n20091213\n20091214\n20091215\n20091216\n20091217\n20091218\n20091219\n20091220\n20091221\n20091222\n20091223\n20091224\n20091225\n20091226\n20091227\n20091228\n20091229\n20091230\n20091231\n20091234\n200912345\n2009123456\n2.00912E+12\n20091314\n20091688\n20091977\n20091985\n20091986\n20091987\n20091988\n20092000\n20092006\n2009200661\n20092012\n20092014\n20092215\n20092599\n2009503726\n200951178\n20095858\n20097600\n20098888\n20099002\n20099999\n2009abcd\n2009anewlife\n2009aysia\n2009chenkunsi\n2009china\n2009good\n2009happy\n2009jiasibo\n2009jiayou\n2009love\n2009nian\n2009tata\n2009tianya\n2009usoi\n2009woaini\n2009ygjyzx\n2009young_tore\n2009yuli\n20100101youge\n20100102\n20100103\n20100104\n20100105\n20100106\n20100107\n20100108\n20100109\n20100110\n20100111\n20100112\n20100113\n20100114\n20100115\n20100116\n20100117\n20100118\n20100119\n20100120\n20100121\n20100122\n20100123\n20100124\n20100125\n20100126\n20100127\n20100128\n20100129\n20100130\n20100131\n20100201\n2010020100\n20100202\n20100203\n20100204\n20100205\n20100206\n20100207\n20100208\n20100209\n20100210\n20100211\n20100212\n20100213\n20100214\n20100215\n20100216\n20100217\n20100218\n20100219\n20100220\n20100221\n20100222\n20100223\n20100224\n20100225\n20100226\n20100227\n20100228\n20100229\n20100230\n20100231\n20100301\n20100302\n20100303\n2010030303\n20100304\n20100305\n20100306\n20100307\n20100308\n20100309\n20100310\n20100311\n20100312\n20100313\n20100314\n20100315\n20100316\n20100317\n20100318\n20100319\n20100320\n20100321\n20100322\n20100323\n20100324\n20100325\n20100326\n20100327\n20100328\n20100329\n20100330\n20100331\n20100401\n20100402\n20100403\n20100404\n20100405\n20100406\n20100407\n20100408\n20100409\n20100410\n20100411\n20100412\n20100413\n20100414\n20100415\n20100416\n20100417\n20100418\n20100419\n20100420\n20100421\n20100422\n20100423\n20100424\n20100425\n20100426\n20100427\n20100428\n20100429\n20100430\n20100431\n20100501\n20100502\n20100503\n20100504\n20100505\n20100506\n20100507\n20100508\n20100509\n20100510\n20100511\n20100512\n20100513\n20100514\n20100515\n20100516\n20100517\n20100518\n20100519\n20100520\n20100521\n20100522\n20100523\n20100524\n20100525\n20100526\n20100527\n20100528\n20100529\n20100530\n20100531\n20100601\n20100602\n20100603\n20100604\n20100605\n20100606\n20100607\n20100608\n20100609\n20100610\n20100611\n20100612\n20100613\n20100614\n20100615\n20100616\n20100617\n20100618\n20100619\n20100620\n20100621\n20100622\n20100623\n20100624\n20100625\n20100626\n20100627\n20100628\n20100629\n20100630\n20100631\n20100701\n20100702\n20100703\n20100704\n20100705\n20100706\n20100707\n20100708\n20100709\n20100710\n20100711\n20100712\n20100713\n20100714\n20100715\n20100716\n20100717\n20100718\n20100719\n20100720\n20100721\n20100722\n20100723\n20100724\n20100725\n20100726\n20100727\n20100728\n20100729\n20100730\n20100731\n20100801\n20100802\n20100803\n20100804\n20100805\n20100806\n20100807\n20100808\n20100809\n20100810\n20100811\n20100812\n20100813\n20100814\n20100815\n20100816\n20100817\n20100818\n20100819\n20100820\n20100821\n20100822\n20100823\n20100824\n20100825\n20100826\n20100827\n20100828\n20100829\n20100830\n20100831\n20100901\n20100902\n20100903\n20100904\n20100905\n20100906\n20100907\n20100908\n20100909\n20100910\n20100911\n20100912\n20100913\n20100914\n20100915\n20100916\n20100917\n20100918\n20100919\n20100920\n20100921\n20100922\n20100923\n20100924\n20100925\n20100926\n20100927\n20100928\n20100929\n20100930\n20100931\n20101002\n20101003\n20101004\n20101005\n20101006\n20101007\n20101008\n20101009\n20101011\n20101012\n20101013\n20101014\n20101015\n20101016\n20101017\n20101018\n20101019\n20101020\n20101021\n20101022\n20101023\n20101024\n20101025\n20101026\n20101027\n20101028\n20101029\n20101030\n20101031\n20101101\n20101102\n20101103\n20101104\n20101105\n20101106\n20101107\n20101108\n20101109\n20101110\n20101111\n20101112\n20101113\n20101114\n20101115\n20101116\n20101117\n20101118\n20101119\n20101120\n20101121\n20101122\n20101123\n20101124\n20101125\n20101126\n20101127\n20101128\n20101129\n20101130\n20101131\n20101201\n20101202\n20101203\n20101204\n20101205\n20101206\n20101207\n20101208\n20101209\n20101210\n20101211\n20101212\n20101213\n20101214\n20101215\n20101216\n20101217\n20101218\n20101219\n20101220\n20101221\n20101222\n20101223\n20101224\n20101225\n20101226\n20101227\n20101228\n20101229\n20101230\n20101231\n2010123456\n20101891\n20101904\n2010191907\n20101982\n20101983\n20102008\n2.0102E+11\n20102012\n20102206\n20103119\n201038501\n20106789\n2010727time\n2010800882\n20108888\n2010abcd\n2010jcdd\n2010nian\n2010tianya\n2010wanxue\n2010xiaofei\n20111365\n20111593\n20112420\n20113891\n20114891\n201202203\n20121220\n20121222\n20121223\n20121231\n201288...\n201306yjqb\n201314.2013\n2013141314\n20131414\n2013141516\n20131420\n201314584\n20131488\n201314abc\n201314bb\n201314qa\n201314waif\n201314Wonder8879\n201314zl\n201399zjh\n201399zjh.\n20141040714\n20142033\n201430506\n20145054\n20152015\n20162016\n2.01642E+11\n2.01712E+11\n20172017\n20173a32\n20178686\n20180917\n20182018\n20190009\n20192019\n2019840811\n201987611\n202.102.4.14\n20201314\n20201320\n2020202020\n202021309\n202022247\n2020301103\n202032129llg\n202033ses\n20203891\n20203910\n20204117\n20205050\n20205188\n202060235\n20209420\n20212021\n20212223\n20212345\n20213891\n20220110\n20221114\n20222022\n20224041\n20224389\n2022846MJgg\n2023106659\n20232023\n20242024\n20251246\n20252025\n20257329\n20262026\n2027978lei\n20282028\n202B128c\n20301314\n20302030\n203021101\n203033716\n20304050\n2030405060\n20307080\n20311086\n20312031\n20312529\n2.0314E+13\n20322032\n20332033\n2033260tian\n20344dc9\n20345156\n203513200\n20352035\n20359879\n20372037\n2.0373E+12\n20378921981\n20382038\n20392039\n20402040\n20406080\n2040608010\n20409236\n204103615\n20432043\n2043wade\n20451303\n20452045\n204587mm\n2046000ai\n20461115\n20461203\n20462046\n20462047\n2046520aaa\n20466402\n20466452\n20469527\n20471120\n20472047\n204771f2\n20482048\n20491001\n204978860\n20500250\n20502050\n205031521\n20505791\n205077764\n20508090\n20508891\n205118001\n20512051\n205181825\n205201314\n20521101\n20525085\n205279573\n2.05319E+11\n20542054\n20562056\n20582058\n20611132\n20642064\n206534wq\n20678363\n20702891\n207061196\n20736531\n20772077\n20782078\n20792079\n20799822\n20801122\n20802080\n208040C0\n2080555a\n20806422\n2.081E+11\n2081033699\n2081512002\n20821002\n20824015\n20838419\n20862086\n20872087\n20882088\n20891905\n20892735\n208kefu776\n208sh208\n20902891\n20911205\n209114251\n20912091\n20925261203\n20931320\n209345743\n20982098\n20989009\n20991314\n20992099\n20AC4ac2\n20b427a0\n20c862F5\n20cb0216\n20D77110\n20ec79a7\n20ef49af\n20english\n20f57989\n20zjk6124004\n21000000\n21001123\n21002100\n210046yyj\n21006659\n2.10099E+15\n21012015\n210120177\n21013891\n2101724Jay\n210198468\n2.10214E+14\n21022102\n210312090\n21031313\n21032103\n210325013\n21042104\n21049585\n21052105\n210526045\n21054679\n21056785\n2105963465\n21060100\n210603q1525\n21062106\n21070279\n21072107\n21072268\n210778420\n21081010\n21082108\n2.10823E+11\n21083313\n21087628\n210877ren\n21092109\n21095711\n21097956\n2110050411\n21101200\n21101332\n21101957\n21102110\n21111111\n21112028\n21112111\n21113891\n2111740e\n2111a108\n21120903\n21122782\n211286712\n211314000\n2113141314\n21131415\n21131421\n2.11314E+11\n211314520\n211314521\n21131499\n211314love\n21132113\n2113221986\n21141111\n21142114\n211511330\n21152115\n21162863\n21165005\n21165118\n21169469\n21170679\n21172117\n211752100\n21182118\n21184333\n21192119\n211983928\n21199287\n21200899\n21202120\n21204891\n21211314\n2121131421\n21211321\n21211421\n212118113\n21211891\n21212156\n212121hi\n21212211\n21213521\n21214837\n21215791\n21216507\n21216891\n21217123\n21219421\n2121ab1212\n21220036\n212200810\n21220612\n212212212\n21222122\n21222222\n21222324\n2122232425\n21224EE7\n21230419\n2123242526\n21232426\n21235456\n212359root\n212418213\n212428917\n21246637\n21251314\n21251566\n21252125\n21252813\n2126132ascc\n21262126\n21264634\n21265134\n21271400\n21272127\n21278386\n212812shu\n21281327\n21282128\n212900384\n212929gzg\n21293859\n212e3337\n21300000\n21302130\n21305688\n21306340\n21312131\n21314151\n2131415161\n2131758282\n2.13204E+13\n213213lv\n21322132\n2133094a\n21332133\n21342134\n21342153\n21345026\n21346136\n21346578\n2135037213\n21352135\n2135777931\n21362136\n21362804\n21365789\n21382087\n21382138\n213841988\n2.14E+11\n21400hxs\n21402140\n214101619\n21412141\n214129721\n21422142\n21423142\n214256964\n21432143\n214322517\n21435678\n2143658709\n214365879\n2144141014\n21442144\n21445514\n214520205\n21452145\n21460046\n2.15E+09\n21461562\n21462146\n21471347\n21472147\n2147483647\n2147483648\n214788938\n21478963\n21482148\n21489707\n214917818\n214923611\n2149381375\n21502150\n21503000\n2150333333\n21504571\n21512151\n215201314\n215215215\n215282748\n21532153\n21534500\n21541484\n215436724\n21552155\n21552928\n215533ac\n215537663\n215590000\n21561314\n21562156\n21562247\n21581010\n21582158\n215861923\n21597321\n21602160\n2.16068E+11\n21607891\n2161117107\n2161225xp\n21613326\n216203926\n21622162\n216221fc\n21624572\n21632163\n21639229\n21642164\n21652028\n216568754\n21662166\n21663621\n21663621ff\n21682168\n21685026\n216918508\n21702170\n2171707882\n217217217\n2.17252E+13\n21730000\n21734465\n2175770563\n21761317\n21770325\n21771337\n21771881\n217891qqqq\n21820427\n21831220\n21831445\n2184197a\n21852185\n21862186\n21881000\n21885276\n2.189E+11\n21892189\n21894angel\n21897182121\n21899821\n21902190\n21912354\n219219219\n21928265\n21937999\n219616262\n219619919\n21972197\n219751122\n21981080\n21982198\n21984-03083\n21985595\n2199127551\n21991314\n21992199\n219c5871\n219SHEJY\n21AINIYAN\n21b61029\n21b84da1\n21ba1461\n21CA00db\n21century\n21cn.com\n21e350eb\n21e5585d\n21FB21a5\n21huihui\n21sjcity\n22001117\n22001166\n22002200\n22003276\n220041229\n2201021965\n2201041984\n22010480\n22011111\n22012201\n22012341\n22014891\n22015932\n22017891\n220220220\n2.20222E+14\n22022202\n2202321085\n220233qfw\n2202422024\n22024232\n220303aa\n22032203\n220325507\n22033600\n22039813\n22040203\n22042204\n22052205\n2.20524E+13\n22057118\n220617520\n22062206\n22063531\n22072207\n22082208\n22083941\n22092010\n22100891\n22102210\n22104636\n22106836\n22110212\n221102999\n2211198lili\n2211198msl\n22112211\n2211234567\n221125zhj\n22112891\n22113344\n22114891\n2211836lxc\n2211yydy\n22120000\n2.21205E+13\n22122212\n221285861\n221314520\n22132134\n22132213\n2.21327E+13\n22134843\n22135132\n22152215\n22155190\n22160931\n221611890\n22162216\n22174241\n221775lxl\n22182218\n2218456391\n22192219\n22193877\n221977468\n22199678\n22199999\n2220061550\n222017sn\n22202220\n22204136\n22212221\n22221015\n2222200000\n22222001\n22222211\n22222220\n22222221\n2.22222E+11\n2.22222E+15\n2.22222E+19\n22222222a\n22222223\n2222222ya\n22222233\n222222aa\n2222255555\n22223339\n22226118\n2222aaaa\n2222bbbb\n22232223\n22232425\n222333111\n222333222\n22233323\n222333456\n222341314\n2.22368E+11\n222444666\n222514192\n22252574\n22257130\n22260478\n222628914\n222666888\n22268ggkk\n222718222\n222723abcdef\n22277571sam\n222888zzj\n2228983735\n22294514\n222a111b\n222b005B\n222C73da\n222q222q\n22300223\n22302230\n223027509\n223031520\n22312231\n22312291a\n2231778123\n22318710\n2231922123\n22322152\n22322232\n223223223\n223224306\n223241000\n22325c80\n22331218\n22332233\n223330108\n223334444\n22335566\n2233557700\n22335588\n2233588688\n22336655\n22336699\n22337788\n22338899\n22342234\n22343234\n22343410\n22344443123\n2.23468E+11\n223511032\n22352235\n22352255\n22352520\n22362236\n22365222\n22372237\n22373390\n22377322\n22380768\n223826121\n2238497a\n223921414hl\n22393847\n223e6928\n223f58B5\n22402240\n22410303\n22422242\n224224224\n224290285ywj\n22430306\n22432243\n2243252721\n224347abc\n22442244\n22445566\n2244668800\n22446688abc\n22448498\n22450504\n2246567A\n2.247E+12\n224711811\n22471615\n224718mt\n22482248\n22485757\n22490884\n22492249\n22502250\n2250276896\n22512251\n22513664759\n22516656\n225201314\n22522252\n225225225\n225226687\n22526771\n2.25327E+13\n2253459123\n22536875908\n22539245\n22549293\n22552255\n22556633\n22556655\n22556688\n22557518\n225588123\n22558833\n22558899\n22562256\n22572257\n22580696\n225816lin\n22582258\n22587758\n225F5df4\n22600212\n2260433603\n22605401\n22610766c\n22612217\n22612261\n22622262\n226226226\n22631036\n2.26318E+13\n22632263\n22637201\n22641822\n2.26432E+12\n22646334\n226565506\n22661486\n22662266\n22665720\n22667788\n22668800\n22668844\n22668899\n22682268\n22692269\n22705043\n227169532\n227227227\n2.27321E+11\n22735401\n22741380819\n22742970\n22750104\n22754188\n2.276E+11\n2276182c\n22763115\n227645721\n22766506\n22771188\n22772277\n227799345\n227811023\n227a4462\n227A5bb2\n22802280\n22803144\n22812281\n2281672603\n22820920\n2.28218E+11\n22822102\n228228228\n22833229\n2284416123\n228454287\n22847707\n2284789yyj\n22862286\n228680722\n22869005\n22870928\n228754552\n228777834\n22882288\n22886666\n22889250\n22900000\n22902290\n22910488\n22912EFC\n2291990229\n229229229\n22927097\n229299951\n229386455\n229528622\n22962aa6\n22966856\n2.29681E+13\n229715774\n2297974159\n22985496\n22992299\n22993141\n22AC1981\n22b3595B\n22c0503a\n22cb12e9\n22cf0f3c\n22D03a24\n22dc23c9\n22EC6222\n22xx2001lu\n23000000\n23000440\n230009hlx\n23002300\n2300250403\n23007433\n23009037\n23012301\n2302104c\n23022302\n2302264520\n230230230\n23023631\n230267054\n2302785121\n230300807\n23032303\n2305021981\n23052305\n23055335\n23062119\n23062306\n23068784\n23069052\n23069910\n230711qiao\n23071979\n23072307\n23080274\n23081712\n23082308\n23089278\n23092309\n23094333\n23100611\n23102310\n23103410\n23111123\n23112311\n2.31147E+11\n2311578321\n23116293\n23122312\n23122782\n231231231\n23126f18\n23131423\n23132313\n23138581828\n23142314\n23143834\n23145789\n23151206\n231519149\n23152315\n231564897\n23161151\n23162316\n23166458\n23169992\n23172317\n23182318\n23187510\n231893abcd\n23192319\n23195154\n23195580\n231999tt\n232018__\n23202320\n232134403\n232140792\n2321721981\n23220018\n23220126\n2322050331\n23220909\n23222322\n232232232\n23223387\n23224446\n232245301\n2.32252E+11\n23230004\n23232233\n23232318\n23232424\n2323296ch\n23233232\n232345456\n23235656\n23235858\n23238087\n23239014\n23242324\n2324252627\n23245437\n23250042\n23252325\n23252983\n23257791\n23262308\n23262326\n232689270\n23270075\n23272327\n2327456a\n232750038\n23276597\n23280930\n23282247\n23282328\n23282624\n232840789\n23292329\n23304187\n23304265\n23304569\n23304661\n23306880\n23309584\n23312331\n23312586\n23313230\n23313575\n23315997\n23322332\n233233233\n233235545\n23323678\n23323838\n233288czy\n2332hueg78\n2333024500\n23332333\n23332558\n23332626\n23335948\n233387624\n23342334\n2335072748\n233529510\n23362336\n23371252\n23375992\n23380403\n23382033\n23382338\n23384469\n23389069\n23389266\n23390713\n23392295\n23395511\n233973203jpf\n23400692\n23403fda\n23406170571cj\n23412341\n23413366\n23421314\n23422342\n2342916257\n234338636\n2344214793\n23442344\n23446426\n23447485\n23455392\n23455432\n234561aa\n2345623456\n23456712\n23456788\n23456789a\n234567as\n234569123\n23457814\n234584124\n23458441\n23458915\n23462346\n2346660195\n234707623\n23472347\n23482348\n234850110\n234862692\n23487397\n234890210\n234wersdf\n23501300\n23502350\n23503617\n23505545\n23506817\n23507122\n23511787\n23511D43\n23512351\n23513500\n235201314\n23521178\n23521860\n235235235\n235285988\n235290ph\n2.353E+11\n2353022020\n23531200\n23535811\n23535ABC\n23537792\n23542645\n23552355\n2355325min\n235535312\n2355360125\n235572222\n2.35606E+11\n23562356\n235659241\n23567890\n23568900\n23568911\n23568923\n2.35689E+11\n23568974\n2357055555\n23571113\n2357111317\n2.35711E+11\n23571434\n23572354\n23572357\n23575116\n23581321\n2358132134\n23581347\n23582358\n23592359\n2359678363\n235a235a\n235A509c\n235B5155\n23602360\n236102098\n23612361\n2361414zt\n23618201\n2.36187E+13\n23622362\n236236236\n236251298\n23632363\n2363550512\n23639867\n23641247\n2364795789\n23651251\n23652365\n23652521\n23653755\n23654321\n23654789\n23657557\n2365809966\n2366.88822\n23661631\n23662366\n23665240\n23666564\n23677316\n23682368\n236843453\n236862646\n23687252\n23692147\n23692369\n236927sh\n23694207\n23698741\n236987412\n23698gsysey2k\n23699146\n236D23a0\n237003sq\n23706264\n237142hgj\n23714520\n237187935\n237237237\n23728499\n23740030\n23742762\n2374364PCH\n23752849\n237546803\n23761332\n2376825253\n23777DEF\n23782378\n23782379\n2378young\n23791175\n23792379\n237e41BB\n23802380\n23808888\n238105liu\n23812381\n23813525\n23816191\n238238238\n23846264\n2384626433\n238555061\n238571211\n23858050\n23866878\n23867C3F\n2387023870\n23874021\n238786yang\n23882388\n23883991\n23884009\n23885525\n2.38866E+13\n23887679\n23887915\n23892389\n23898115\n238b1C4F\n23902390\n23908633\n23922392\n239239239\n239249guo\n23926280\n23932393\n23937001\n23939889\n23944082\n23952970\n2395347860\n2395562123\n2395642dsw\n239610982\n2396363a\n23970100\n23974014\n23980670\n23982398\n23991140\n23992399\n239d103A\n23df504C\n23f47691\n23FC2494\n23jordan\n23jun23jun\n23qwe23asd\n23tianyu\n24002400\n24012401\n2401787918\n24022402\n24023472\n240240240\n24030921\n24032403\n24034689\n24042404\n24045503\n24049743\n24052405\n24062406\n240648DC\n240679647\n240702270\n24072407\n24074709\n240798581\n24082408\n24094232\n240955648zln\n241020BJN\n24102410\n2411035230\n24112411\n24114712914\n241150626\n24122412\n24122612\n24123198\n241236082\n24125536\n241263484\n24132413\n241422600\n24142414\n24152415\n24159413\n24162416\n24172417\n24182418\n24202420\n242044070\n242102166\n24212421\n24212672\n242141581\n242191330\n242226hclzz\n24223931\n242289804\n24231158\n24231869\n24232423\n24234094\n24252425\n24252627\n24262426\n24268855\n2427217430\n24278384\n24282428\n24286b56\n24302430\n243049215\n24306012\n2430652110\n24306666\n24312431\n243497597\n24351845\n24352435\n24354486929\n24362436\n24367826\n24372437\n2437296561\n24374925\n24378603\n24382438\n243850743\n24385699\n244087540\n24413659\n24422442\n24425178\n24451903\n24468044\n244810747\n24483146\n244840554\n244891gz\n244974000mn\n24500wzh\n24501365\n24510528\n24512451\n24515181\n245201147\n245245245\n24532453\n24540685\n24562456\n24565012\n24567311\n24567890\n24572457\n24574862\n245761925\n24582458\n245834578\n246246246\n24631912\n24635439\n24669988\n24672467\n24674508\n24678900\n24678aaa\n24680000\n24680063\n24680123\n24680135\n24680200\n2468024680\n2468097531\n24680abc\n2.4681E+11\n246810feifei\n24681234\n2468135790\n24681379\n24683579\n246837915\n246873915\n24687531\n24688642\n24689387\n246897531\n2468abcd\n2468love\n24691356\n246913578\n24692469\n24704170\n247062373\n247152003\n24724154\n247247247\n24726939\n247295511\n2474730716\n247558331\n247627924\n24777d6d\n247822441\n24782478\n24790318\n24802480\n248163264\n24832142\n24836569\n2.49E+87\n248579048\n248615379\n24861793\n248617935\n24862486\n248626291\n24862684\n24863179\n248631795\n24865000\n248783288\n248783ggg\n24882488\n2489189124gw\n24902346\n2490566728\n2.49057E+15\n249057850\n24914EE0\n249175624\n2492535y\n249321911\n249517132\n24952680\n24954091\n24957355\n24980160yu\n24985133\n24992499\n24994537\n24@big066\n24a61829\n24b26ff7\n24B64554\n24l13e02e\n25000000\n2.50012E+11\n25001300\n25002500\n250052947\n25012056\n25012501\n25012502\n25015942\n25021010\n25022502\n250244603\n250297440\n25032503\n250335627\n250343681\n25042504\n2504616147\n250472175\n25052099\n25053596\n250563418\n25061941\n25062506\n25070000\n250745681\n25082508\n25085220\n25092509\n250929123\n25095458\n25101589\n25102510\n251120223\n25112511\n25114721\n25115183\n251171016\n25120324\n25122512\n25122828\n251245664\n25125123\n251251251\n2512616abcd\n25131400\n251314000\n251314123\n2513141314\n25131415\n25131425\n251314521\n2513147758\n251314ok\n25132513\n25132514\n251328628\n25135273\n25136zhu\n25137767\n251415844\n25142281063\n25142332\n25142514\n25152515\n2515787\n25162516\n2516441984\n2.51674E+12\n25172517\n251768927\n25182518\n251828520hn\n2518425184\n2518836248\n25192519\n251938988\n25194028\n25197758\n252013032\n2.52013E+11\n25201986\n25202520\n25202755\n252036qvtf\n25204269\n252053176\n252054731\n252083qqq\n25209328\n252108135\n252110176\n25211314\n252125114\n25212521\n252137985\n252150205\n252166439\n25222522\n25222741\n252252252\n25232523\n252329720\n252387444\n25242524\n25245443\n25248678\n25251205\n25251314\n2525131425\n252513250\n2525132525\n2525132588\n25251425\n2525145225\n252515144\n25252255\n25252426\n2525252525\n2525639x\n25257755\n252577588\n252577589\n25257758a\n25257758sm\n25257785\n25259238\n25259775\n252597758\n252600788\n25260912\n25261314\n25262728\n2526272829\n2.52627E+11\n25262829\n2526TZDJ\n252707911\n25271314\n252713257\n252779998\n25282528\n25283879\n25292529\n252950560\n253002zm\n25301179815\n25302530\n253028003\n25304759\n253102715\n25312531\n25322532\n25323908\n25329090\n25332533\n25336420\n253368011\n253401815\n253408100\n25342534\n253441037\n25352535\n25355686\n25361758\n25362222\n25362536\n2536496481\n25369382\n253699360\n25372537\n253825948\n2538574e\n253905292\n25392539\n25399632\n25412541\n25412823\n2541724E\n25419971\n25428204\n25432543\n25434981\n254391269\n254483185\n254510521\n254517422\n25458307\n2545opjAS\n254685427\n254712500\n25472547\n254750345\n25482474\n254854996\n254863816\n25487985\n254962923\n25503878\n25508138\n25510720\n25512924\n2.55136E+11\n25520c76\n25522552\n25523507\n25524fb7\n255251252\n255255255\n25529917\n25530552\n25531003\n25536736\n25540902152\n25552692\n25565701\n25582558\n25584222z\n25584920\n2558648590\n25600991\n256060502\n25606574\n25611314\n25612561\n25615331\n25623288\n256256256\n2.56257E+11\n2562a4944\n25632563\n25633652\n2.56343E+13\n25643358\n256502550\n25650601\n25650641\n25662566\n25665776\n25671255\n25675291\n25679188\n25680212\n25681457i\n25681856\n25682086\n25682568\n25685651\n25692569\n25693709\n25695537\n25702570\n25706213\n257143CA\n25724900\n257257257\n25731371974\n25733667\n25739288\n257758521\n25776016\n25782569\n25782578\n2578293xxx\n25787856\n25800000\n258000258\n25800852\n25801234\n25806558\n258118489\n25812581\n25814f54\n258157390\n258159357\n2.58168E+11\n25819299\n25823935\n2582525825\n2582525975\n25825259775\n258258*8\n25825800\n258258123\n25825825\n2.58258E+12\n258258369\n25825888\n25825897758\n258259250\n25826456\n25827758\n25832683\n258369123\n2583691470\n258369258\n2.58369E+11\n258369369\n258369abc\n258369bb\n258369ok\n258369qq\n258433069\n25845600\n258456123\n2.58456E+11\n258456qq\n25845822\n25851301\n25852258\n25854800\n25857432\n25862586\n25864560\n25870000\n25872136\n25872187\n25872587\n258741369\n2587419630\n25876210\n25877148\n25877580\n2587758258\n2587758520\n25877588\n25878321\n258789123\n258794613\n258798463\n25880288\n25881230\n25881401\n25882588\n25882621\n258852258\n258852aoe\n258870004\n25888747\n25889699\n25889761\n2.58909E+11\n258921521\n25892369\n25892589\n25893113\n25893121\n25893204\n25893613\n25894080\n25894446\n25894794\n258950945\n258963147\n2.58963E+11\n258dd379\n25911314\n25916072\n25918011\n25921314\n25923400\n25925138\n25927847\n25928245\n25932298\n2.59382E+12\n259431753\n2596364fall\n259714025\n2.59758E+11\n25977580\n2597758521\n25977588\n259775885\n25982881www\n2598565@126.com\n25988888\n25991314\n25992107\n25992599\n25993599\n25993837\n25996015\n259a4268\n25a72CC6\n25A82e29\n25AE117a\n25B640e0\n25b914da\n25cc7852\n25e24ED5\n25E47684\n25f5149f\n25yuanjuba\n260005714\n26002600\n26012601\n2602090126\n26022602\n260257654\n260260260\n2603068332\n260313031\n26032603\n26042604\n26050108\n26060680\n26062606\n26072607\n26076116\n26082608\n260916513\n26095333\n2.61026E+11\n26102610\n261110592\n26112611\n261131063\n26122612\n26123618\n261261261\n261308ng\n26131393\n261314czm99\n261325mrj\n26132613\n26138003\n2614051mn\n261505222\n261516976\n261546832\n26159886@126.com\n26179389\n26181111\n26182618\n2618732e\n26191700\n261978729\n261E758f\n262007360\n26202620\n26202669\n26202898\n262095352\n26214057\n26218834\n26229896\n26231009\n26232623\n262403zxc\n26242624\n2.62483E+14\n262514520\n26252625\n262542258\n26255925\n26261122\n26261954\n2626262626\n262626ab\n262633887\n262646554\n2626@totti\n26272627\n26272829\n26277945\n2627821815\n262799505\n2628001002\n26282628\n26282930\n262831224\n26292629\n26293071\n262970614\n263010ln\n26302650\n26305424\n26305951\n26306906\n26312631\n2631363110\n26315059\n26316119\n26316the\n263197589\n263263263\n26331788\n26332633\n26333558\n263425082\n26342960\n263446629\n26344761141\n26345385\n26347607\n26352635\n26360643\n26362636\n2.63647E+11\n263656502\n26365715\n263687697\n26371005\n26371604\n2639532007\n263964560\n264017923\n26414340\n2641926504ice\n26432643\n2643383279\n26434486\n26465022\n26482648\n2648334dq\n26505ef0\n26512651\n26513344\n2651772200\n26518888\n26519100\n26521468\n26524481\n26525390\n265265265\n26529152\n26531246\n26531740\n26532653\n26535897\n2653589793\n26537691\n26540789\n26546452\n26560142\n26561314\n26561314yang\n26563905\n2657496123\n2658046gy\n2.65823E+12\n26584586\n2658716521\n265874587\n26591314\n26592659\n26594837\n26606581\n26607448\n26608818\n26608866\n266266266\n26630439\n26633710\n26642160\n26643818\n26647432\n26655217\n26658145\n26673788\n26681290\n266813274\n26681348\n26685637\n2670716a\n26716071\n26722672\n26733044\n267405508\n267448975\n2674604o2674604\n26755969\n26762676\n26802680\n2681147259\n26818145\n26826546\n268268268\n2683033628\n26841397\n268413975\n26841987\n26842684\n26859837\n26866034\n26870390\n2687abcd\n2688053my\n26882688\n26888518\n26888826\n26889100\n268B3269\n26901386\n269056156\n2691171d\n26912555\n269269269\n26948791\n26952695\n2695king\n2696947327\n26982266\n269849918abc#\n269879968\n269935960\n269961902\n269E1351\n26F04fdd\n26F479a8\n26FF50bd\n270017544\n27001872\n270068314\n27007207\n270136273\n27020460\n27034391\n270350293\n270489975\n270700137\n270715691\n2707592D\n270819953\n270855224\n270970121\n27104129\n2710594168\n2.71059E+12\n27112711\n271140743\n2712261qaz\n2712385hyj\n271315775\n27135973\n27142714\n2714927149\n271573962\n27160623\n27162716\n27163020\n27174617\n271783589\n271809878\n27182718\n271828182\n2.71828E+12\n2.71828E+11\n271856373\n271914zmc\n271b0E83\n271d08ba\n271f0AD6\n27202720\n272036773\n27204910\n27206481\n27209361\n27214206\n27214417\n27220620\n272211628\n27223091\n2722747wawa\n27229817\n272346230\n27239416\n2724251314\n272501052b\n27251919\n27252699\n27252725\n272534975\n272535600\n272601699\n272639442\n27272222\n27272277\n2727272727\n27281627\n27282728\n27289678\n27296922\n272984711\n27301886\n27302158\n27303247\n27305277\n273080563\n27312713\n27312731\n27316731\n27321017\n27322732\n273325530\n27341101\n27342734\n273449673\n273459552\n2735230748\n273570696\n273585825\n27360105\n273645621\n27372880\n27376304\n27376547\n27376891\n27384616\n27384636\n27391651\n27398921\n27412849\n274284325\n27433126\n27448542\n27455140\n274582166\n274700383\n274809203\n2748230735\n27482748\n27485109qq\n274920340\n27495898\n275091865\n27511820\n27512751\n275155834\n2.75156E+11\n275156809\n275196506\n275304f0\n275377970yy\n27546322\n27547284\n27551164\n275716438\n27572181\n27576012\n2758115200\n27582842\n275rysahbj\n276016592\n2761202416\n27613624\n27641212\n27641601a\n27643172\n27644066\n276450023\n276460543q\n276645710\n27664781\n27677815\n276853326\n2769040lwh\n27691029\n276951438\n27709358\n27710221\n27713757\n277262934\n27727727\n277420327\n27750930\n27761989\n27776720\n27782778\n277950648\n27803310\n27814068\n278423304\n278440332\n278567048\n278676809\n278737170\n278773429\n278778204\n2787854087\n27881598\n278899172\n27890956\n27892789\n27896327\n27912791\n2.79171E+11\n279184321\n27934000\n27950288\n27956342\n2796381988\n27972289\n2797471E\n279750814\n279911586\n27996473\n27AB466d\n27B14f51\n27BA2b02\n27bb55EB\n27CD0532\n27D47b13\n27f0304A\n27f14f5b\n2800101qwe\n28002800\n2.80E+08\n28012801\n28020067\n2802208911\n28032803\n28035903\n28042551abc\n28042804\n28062727\n280775803\n280801130\n28082808\n28102810\n28102839\n28103718\n2810390b\n28108787\n281183857\n28118900\n28122812\n281272760\n28129588\n28130299\n28147023\n281476770\n28150325\n28152815\n2815297qq\n28155709\n281577y999\n281599394\n2.81609E+12\n2816128161\n2816164b\n28162816\n28163824\n28180560\n28180888\n281812471\n28181812\n28182818\n28182918\n282000ryj\n28202757\n28215352\n2821757169\n282209662\n28224596\n2822506117\n28230E8D\n28247978\n2825628257\n28256432\n28262826\n28266005\n28271669\n28271812\n28271880\n28280016\n282821698\n282826341\n28284787\n2828583\n28286880\n28287758\n2828975885\n28292829\n282936168\n283007665\n2830151530\n283042960\n2830478lyl\n28309153\n28312831\n2.83162E+15\n283198574\n28327787\n283431148\n28349422\n283502797\n28360551\n2836909a\n283706256\n2837290xyb\n28374655\n283814580\n28384858\n28392839\n283947193\n283951107\n284042637\n28413380\n28414640\n2841493160\n28422163\n2843028113\n28430950\n2843412761\n284365780\n28440457\n28440458\n2845628456\n28456629\n284568638\n28462846\n28463a4e\n2847594jj\n284866587\n28512424\n2851588285tse\n28516228\n28525252\n2852676000\n28532666\n28540617\n285409223\n28545293\n28550170\n28561654\n2856216948\n28562856\n28568474\n285698857\n285723382\n28576185\n285814511\n2858194601\n285858230\n285867056\n285920584\n2859283632\n28599496\n285D2f39\n28609854\n2.86126E+13\n28614512\n28625891228\n286421485\n286433136\n28654652\n28662866\n2866655114\n28671ab4\n28676768\n28682868\n286929869\n28693845\n28701161\n28701255\n2.87054E+13\n28707998\n28709856\n28713455\n28721247\n28721261\n28726075\n287472770\n28751396\n28757060\n287646795\n287669330\n28773061\n28780808\n28786531\n287921022\n287Livegreen\n28802880\n28812881\n28821045\n28822882\n28825252\n28826392\n28829004\n28831437\n28841114\n2.88455E+13\n2885532lidan\n28856677\n28857306\n28864460\n28867472\n2887415157\n28882888\n2889518899\n289022867\n28902890\n28908015\n28910101\n28910192\n28910309\n28911628\n28912891\n289140947\n289161850\n289200610p\n289239392\n28937981\n28941153\n289454237\n2.89503E+11\n289544420\n28969683\n28978300\n2.90E+48\n28987152\n289897259\n28989836\n28994555\n289954392\n28995666\n289963614\n289C20a5\n28AF38f7\n28af3f79\n28AxrpuNFA\n28AxspuMFA\n28AxspuNFA\n28c12b80\n28C3509f\n28c60ade\n28D932f9\n28DA39b2\n28E351ec\n28f14eda\n28qacq2w\n28qtiouNFz\n28rtiouNFz\n28rtjntMEy\n28rtjntMEz\n28rtjotMEz\n28rtjouMEz\n28stjntMEy\n28stkntLDy\n28stkntMEy\n28yxqqvNGA\n28yxqqvPGA\n28yxqqvPGB\n28zxqpvNGA\n28zxqqvNGA\n28zxrpuN22\n28zxrpuNFA\n28zxrpvNFA\n290037604\n29012901\n29032903\n29034166\n290495150\n29060985\n29061748\n29068012\n29068259\n290773696\n290779543\n29081166\n290832047\n290990www\n29102910\n29103092\n2910715568\n29115500\n2911797114\n29118665500\n29121302\n29127463\n29128352\n291291291\n29129968\n2913179zz\n2.91487E+11\n29155448\n2915829158\n29170b54\n29172917\n291821022\n29182918\n29184000allen\n29187930\n29192919\n291934179\n291943924\n2919445~~\n29201314\n29202920\n29213148ll\n29245218\n29251314\n292513148\n292547955\n29258521\n29271414\n29280177\n29281378\n29282928\n29288492\n29290101\n292906511\n29292929\n2929292929\n29302930\n2930521d\n29317477\n29320628\n29336210\n293372a0\n29341673\n29370337\n29382b08\n294013695\n29422942\n294558414\n29458934\n29462946\n294696649\n294753618\n294828098\n294857703\n29487F2A\n295001423\n29502950\n295201314\n295272aa\n29530da8\n2954439622\n2956829568\n29586414\n295992003\n295d5cd9\n2961yangan887\n29647275\n2.96506E+11\n29652965\n296541855\n296686553\n29672967\n296790117p\n29692969\n296f81xj\n29706511\n29710601\n297166463\n297197527\n29747504\n29769088\n297960919\n29802104\n29803365\n29816285\n29831227\n29831313\n29833983\n29838743\n298644701\n298699123\n298754154\n29882988\n2991696121\n29922992\n2997195414\n299793458\n29989164\n29991215\n299XL175\n29AD5407\n29CB6cf4\n29cc69ba\n29EA76cf\n29F57cbf\n29F60b5c\n29sdqzmhhj\n29yxqqvPGB\n2A052f40\n2a07124B\n2A0A4608\n2a0b1683\n2a1e2ED5\n2a2b036a\n2a2f7A67\n2a3a4a66\n2A4D1dfe\n2A6462ab\n2a8c18B3\n2A947248\n2a9e0c9f\n2aaiiorl\n2AC27083\n2ac86ef2\n2ad85CCF\n2ad85f5f\n2ADC6397\n2ae64f12\n2af4480D\n2B053ca2\n2b1827FF\n2b292c5e\n2B2B18b1\n2b5d23B2\n2b5fg111\n2B6077ad\n2B8E1ee9\n2b9506e6\n2bc80EAE\n2BC84618\n2BD87c8b\n2BDD0dfd\n2bef17b2\n2bef3ab5\n2c0734f5\n2C295b61\n2C480acf\n2C4B236e\n2c4b4cf3\n2c5b0bf5\n2c642AE8\n2c6a79D2\n2c717798\n2C721e8d\n2c89024b\n2c98009b\n2ca55b2f\n2CD6202a\n2cda6906\n2cdb61DA\n2CEF4e9a\n2CFB4186\n2d29558a\n2D38035f\n2d441A7C\n2d4b1D97\n2d500583\n2d555b9a\n2D7D24a5\n2d7f2ab4\n2d7f734a\n2DA97b31\n2daf287B\n2DB57ff4\n2DC24ca4\n2DCB07e2\n2DCB2300\n2DDD3499\n2dfe2ac8\n2e1a27DD\n2E1B2e95\n2E282966\n2e2e33AD\n2E553030\n2e5b24AD\n2E5F2100\n2e9b3D10\n2ea85DAB\n2eab55d5\n2EAB70f4\n2EB75a98\n2ec02310\n2ECF372a\n2EE83ab1\n2F0A4b54\n2f1253C5\n2f173e41\n2f2a21B9\n2f3d2834\n2f407d91\n2f492306\n2f4c4433\n2f57057f\n2F62673f\n2F683ac5\n2f961b52\n2fbb4d22\n2FEF51b1\n2ff979eb\n2FFB3763\n2gether4ever\n2jm483hot\n2l3i4b5o6\n2lxxajux\n2m56xE2AJT\n2m56xExAZS\n2m56xExAZT\n2m56xF2AJT\n2m66xF2AJT\n2n66xF2AJT\n2n66xF2zIT\n2n66xF2zIU\n2n66xF2zJT\n2n66xG2zIU\n2n76xG2yHU\n2n76xG2yIU\n2n76xG2zIU\n2O08l234\n2oo66790\n2oxxalxx\n2p76xG2yHU\n2p76xG2yHV\n2p76xH2xHV\n2p76xH2yHV\n2p77xH2xGV\n2p77xH2xHV\n2p77xH3xGW\n2p87xH3xGW\n2pfxd4v1\n2q3w4e5r\n2q3w4e5r6t\n2q87xH3wGW\n2q87xH3xGW\n2q87xI3vFX\n2q87xI3wFW\n2q87xI3wFX\n2q87xI3wGW\n2qazcde7\n2qq2qq2qq\n2r87xI3vFX\n2r87xJ3vFX\n2r97xJ3vFX\n2r97xJ3xEX\n2r97xJ3xEY\n2r97xJ3xFX\n2r98xJ3xDY\n2r98xJ3xEY\n2ra7tK310Y\n2rb7tK310Y\n2rb8tK310Y\n2rb8tK320Y\n2ruoning\n2sb8tK420Z\n2sb8tL420Z\n2sc8tL420A\n2sinxcosx\n2tangtang\n2tc8tL420A\n2tc8tL421A\n2tc8tM421A\n2tc8tM431A\n2tc8tM431z\n2tc9tM431z\n2td9tM431z\n2twocaca\n2ud90N531y\n2ud90N531z\n2ud90N541y\n2ud90N542y\n2uFoEver\n2W00dpr0\n2w3w4w5w\n2wm28mntrr\n2wobamage\n2wsx2wsx\n2wsx4rfv\n2wsxxsw2\n2wyl008dy\n2WZwJXUk\n2yuechu1\n3*zAbmiao\n3..1415926\n3.141592\n3.1415925\n3.1415926.\n3.141592657\n3.14159267\n3.141592679\n3.1415926a\n3.1415928\n3.141596\n3.1415962\n3.142.71\n3.143.14\n3.2.1.0.\n3.3.3.3.\n3.6.9.2.5.8\n30000000\n30001339\n30003000\n300068323\n300081ab\n3.00101E+11\n3001025b\n30013001\n30013891\n30016891\n300187726\n300200100\n30021503\n30023002\n30024300\n3002649369\n300276717\n300280loy\n300300300\n30031001\n30033003\n30039812147\n300400sjy\n30049641\n30063006\n30073007\n30083008\n3008duan\n30093009\n30103010\n301051522\n3010531008\n30108891\n3011202207\n3011221009\n30113011\n30114965\n3011594xwj\n3011811046\n301202303\n30123012\n3013001300\n30130213\n301302303\n30132014\n30133013\n30141592\n3014159265\n30141592653\n30141592654\n301415927\n30141596\n301415seven\n30143014\n30153015\n3015447ckj\n30163016\n3017625354\n30183018\n301900123654qwer\n30201200\n30201314\n3020201088\n30203020\n30213021\n30215551\n30215891\n30218848\n30223022\n30225130\n30233023\n30243024\n30253025\n3026001225\n30263026\n3026cctv\n30273027\n30283028\n30293029\n302962815\n3.0298E+11\n302honz9\n303016121\n3030256123\n3030303030\n303030li\n303034070\n30305217\n30306060\n303067746\n30307757\n303091230\n303105004\n3031211145\n30313031\n30313233\n30313886\n30317577\n303266562\n30333033\n30334487\n30335124\n303357531\n303358218\n3034261126syf\n303464115\n303650624qw\n303667077\n30370911\n30375358\n303776998\n30383038\n303849b7\n30393039\n303A4fc6\n303e134C\n304006691\n3040121042\n304031040\n30405060\n304059224\n3040kong\n3041116040\n304143365\n30414443\n30419638\n304220180\n30422375\n304334627\n30449289\n3044deng8663ying\n304511020\n30453045\n304540811\n3046112006\n30461479\n3046317zyh\n30468890\n30470324\n30474402\n304753df\n30481c76\n30482021\n304961lun\n304967812\n30500659\n30505019\n30510312\n30511314\n30513051\n3051822zpp\n305201314\n305305hong\n305339040\n30535719\n30543054\n3.05518E+11\n305530035\n305561857\n305623020\n3058046236\n305918510\n306048711\n306062064\n306111917\n30623062\n30624100\n30624300\n30624700\n30624770\n306330033\n3064170612\n306497080\n306502633\n3.0653E+11\n30653065\n3065925521\n306601016\n30663066\n306648209\n30693069\n307060215\n30714059\n307210200\n307218127\n30728755\n3.07288E+13\n307308309\n30733073\n307339526\n307489630\n307593233\n30761802\n307655682\n307802818\n307@@527\n307b1F1E\n307ilike\n307joan307\n308009625\n3080577232\n308106306\n30813081\n308159277\n308176246\n308273421\n308333345\n308501zzjj\n30853085\n3085328625\n30853488\n30859957\n308704060\n308752680\n30883088\n308905729\n309184060\n3091896162\n30934361\n309413391\n309416920\n309417198\n309506515\n3095137155\n309579539\n309751984\n30982101\n30983098\n30990277\n309909701\n30993082\n30993099\n30a806D6\n30B71d80\n30bb4CA0\n30bf2dd5\n30D82d6a\n30e12ABB\n30e8057E\n30FA3e0d\n31001006\n3100104301\n31003100\n3100435597\n31007513\n31010080\n310103513\n3.10106E+11\n3101091984sdby\n310110760\n31012126\n31013101\n31014891\n31015891\n31020583520\n31023102\n31032428\n31037963\n31037hanxu\n3104037054\n31043104\n310459cc\n3105005793\n31053105\n3.10609E+11\n31063106\n310653zzz\n310701300\n31082679cc\n31083108\n3108536zsx\n310888888\n31091202\n31093c5d\n310986618\n310D5e44\n310lzvn10\n31102815\n31105891\n31106891\n31110891\n31113891\n31115992\n31121977\n31123112\n31130029\n31131420\n31133113\n3113681lzr\n311415926\n31143114\n3115120328wst\n31156022\n31173117\n3118040931\n3118200244\n31183118\n311918le\n3119221124\n31194fcd\n31201314\n312016721\n31203120\n31207319\n312111755\n31213121\n312135728\n31213891\n31214212\n312145214\n312148290\n31214891\n31215891\n312159830\n312162600\n31216891\n312188lzz\n312210179\n31223122\n312312353\n31233123\n31234511\n312353213\n31243124\n3.12455E+12\n312470253\n31251611\n31253125\n312618278\n31263126\n312645978\n312663580s\n31273127\n31283128\n31283930\n31293129\n31296810\n31300021\n3130101975\n31303130\n31306723\n3131313131\n31313311\n313137yhhll\n31316300\n313201452\n31320706\n31323132\n31323334\n313313313\n31332586\n31333133\n31351349c\n31362921280\n31363136\n31367803\n31373137\n31374005\n313747900\n313764451\n3.13912E+11\n31400000\n314036589\n31404891\n31413141\n31415126\n31415161\n314151zq\n3141531415\n31415900\n31415920\n31415923\n31415925\n314159260\n3141592600\n314159261\n3141592611\n314159262\n3141592627\n314159263\n31415926314\n3141592650\n31415926520\n31415926528\n3.14159E+12\n3.14159E+13\n3.14159E+14\n3141592655\n3141592656\n3141592657\n3141592658\n314159266\n3141592666\n314159267\n3141592678\n31415926789\n314159268\n3141592688\n31415926927\n31415926a\n31415926aa\n31415926abc\n31415926abcd\n31415926h\n31415926l\n31415926qq\n31415928\n31415929\n314159314\n31415988\n314159abc\n314159xf\n314159zzb\n31419037\n314219liu\n31423142\n31425364\n314285769\n31432331\n31433613\n314358300\n314410fzywrh\n31442149\n314432289\n31443989\n31445810\n3.14485E+11\n314485995\n3145125214\n31453145\n314585584\n31460715\n314621211\n31463146\n314647921\n314731026\n31480257\n314823120\n31482548\n31492768\n314D1d9c\n31502891\n31503150\n315042763\n315063102\n315071946\n31510282\n31514114\n315189380\n31531500\n31533153\n315357344sa\n31536000\n315397010\n315415515\n31552535\n31553155\n31554773\n315550584\n31555300\n3155530520\n3.15553E+12\n3155530ming\n3155530wyx\n31556926\n31560132\n31563156\n315648237\n3156880335\n315717686\n31573157\n31576658\n31583158\n31584729\n315954135\n315_shouders\n31600506\n3160265678\n31603160\n31610999\n31612177\n316129265\n31615239\n316201170\n316218117\n31623162\n31624544\n3163161981\n31632942134\n31643164\n316497852\n31657567\n3166227877\n31662354\n31663166\n31663166w\n31665757\n31667416\n3.16694E+15\n31673167\n31674979\n3167650148\n31678888\n31680906\n31683168\n31683169\n316879565\n31693169\n3169693421\n317024792\n31703170\n317066441\n3170731707\n3171992127\n3.17254E+13\n317317317\n31733173\n317339856\n3174162c\n317644428\n317644428)\n31773177\n317744abc\n31776974\n31783178\n31787564\n31788307\n317969113\n3179888789\n31799475\n318000QQ\n31803180\n318109xx\n318130063\n3182041330\n31829730\n318369318\n31839097\n3184480099\n31853211\n31863186\n318723580\n318756+-\n318826129\n31883188\n31893212\n31901242\n3190889yangke\n319150b9\n31929339\n319519CGD\n31953195\n319609448\n3196101027\n31963196\n31973197\n31983198\n31985888\n31993199\n31C858c7\n31CF0a03\n31D05be1\n31f040e3\n31F573f6\n31hcy17lg\n32000000\n320021313\n32003200\n32010203\n3201121975\n32013201\n32014318\n32014891\n32015011\n32015891\n32016891\n32021919\n32021979\n32021982\n32023202\n32023215\n320293464\n3203231986\n3203241984\n3203251980\n32033203\n3.20382E+11\n32039684\n3204154a\n32043204\n32048319\n3204831983\n32050789\n320524zkl\n3206211986\n32063206\n3206870367\n3207045299\n3.20721E+11\n3207214035\n320721ww\n3207231983\n32073207\n32075188\n32080518\n320811yy\n3208261982\n3208261984\n32083208\n3209020066\n3209211984\n3209241987\n32093209\n32100000\n32100000tt\n32100123\n32106640\n32109991\n3210abcd\n3210mnbv\n3211020439\n32110891\n3.21123E+12\n321123321\n3.21123E+11\n32112333\n32112345\n321123lw\n321123qqq\n32113211\n3211321515\n32113234\n32115691\n32115891\n32116891\n32118891\n321217636\n32123123\n32129676\n321321123\n3.21321E+11\n321321321a\n321321456\n321321520\n321321654\n3213217411\n321321aa\n321321cz\n321321qq\n32133213\n321342110\n321346784\n32143214\n321432543\n32145600\n321456abc\n32147896\n321478963\n32153215\n32163216\n32165400\n321654250\n321654321\n3.21654E+11\n32165478\n321654789\n32165487\n32165498\n32165498700\n321654987a\n321654abc\n321654kk\n32166B87\n32167000\n32167890\n32167911\n3.21679E+11\n32167man\n321698`1\n32175251\n3.21779E+12\n3.21815E+11\n32183218\n32190085\n321987654\n321a789456\n321abc321\n321abcde\n321b4d75\n321D5c12\n321ewqdsa\n321libing\n321mnbvcxz\n321zhihou\n32203220\n32204041\n32211219\n32213221\n32216891\n32220424\n3222325cb\n322322322\n3223223322\n32233223\n32243258\n32262100\n322631414\n3.22677E+12\n32273227\n32275473639gdx\n3.22806E+11\n32283228\n32283381\n32303230\n32303565\n32313131\n32313231\n3231401zn\n32318265\n323214121\n32321565\n323237216\n3232520y\n32325232\n3232680630\n323323323\n3233279918\n32333233\n32342234\n32345178\n3235235321\n3235365/\n32356516535\n32370034\n32384626\n323846264\n32384fdf\n32390440\n32393239\n32394613\n323tdq514\n32410111\n32410189\n32412453\n32413241\n324144520\n32420426\n32420629\n32423242\n32427c0c\n32429044\n324324324\n32434258\n32443357\n3.24465E+13\n3245132451\n32461053\n32471212\n32471388\n324892516\n32503250\n32510liuyan32510\n325118hhQ\n32513251\n32519553\n32523252\n325408626\n32541637\n32541959\n32553210\n32553255\n32557020\n32563256\n3256697gtgn\n3256853123\n32573257\n32576801\n325789401\n32583258\n32588478\n32593259\n3259791127\n32600326\n326054960\n3261032x\n3261784qq\n326200796\n3262010B\n3262211225\n3263241230\n32632600\n32633263\n326406215\n32641333\n326414114\n32659872\n326598741\n32663266\n32683268\n3269101969\n326c0948\n3270093abc\n32711888\n327160257\n32718409\n327226638\n327244654\n327327327\n32734bb1\n32752jlTF\n32753275\n327658177\n327714488\n327725344\n32781710\n32781783\n32781808\n32781809\n32781912\n32781944\n32782104\n32782453\n32782566\n32782603\n32782710\n32782759\n32782850\n32783101\n32783278\n32783587\n32783640\n32783694\n32783784\n32783931\n32784446\n32784616\n32784775\n32784881\n32784909\n32784950\n32784962\n32784969\n32784978\n32784983\n32784984\n32785067\n32785210\n32785430\n32785612\n32787189\n32788646\n327888311\n327894732\n327950288\n32803280\n328102833\n328115080\n3281532815\n328215145\n328231134\n328316025\n328328328\n328360498\n328486515\n32852112\n32867034\n32873287\n3287929he\n3.288E+11\n32883288\n328924927\n328968340\n328992436\n32899419\n328E15f9\n32913f0b\n329271d8\n329329169\n329329329\n329346805\n32951846\n329607186\n32975454\n32980566\n329886649\n32991682\n32993299\n329933295\n329958520\n32996299\n329996852\n329a7f9d\n32ba1ffb\n32BF6cca\n32CF48d0\n3300103688\n33002008\n33002277\n33002754\n33003300\n3301001C\n330102061\n330106xxzx\n33010769\n33011033\n3301234567\n3301271977\n33013301\n33013302\n3.30212E+14\n33021980\n33023302\n33025430\n3302821985\n3302821986\n33031034\n33031553\n33032378\n33032615\n330327155\n33032779\n330330330\n330330tt\n33033303\n33033501\n33038042\n33038283\n33041981\n33041982\n33043304\n33050602\n3305279687\n330533568\n33060276\n330619353\n33063306\n330663776\n33071981\n33071982\n33073307\n3307371298\n3308241986\n33083308\n330860503\n33092500\n33093309\n330974330\n33100000\n3310031985\n33101414\n331024842\n33102692\n33103310\n33106131\n331083762\n33111133\n33112233\n33112378\n33112800\n33112913\n33113311\n33119556\n331214367\n33121941\n33123214\n33123312\n33123313\n33127855\n331303319\n331331331\n33133313\n331415926\n33143314\n33144820\n33145205\n33145844\n3.31518E+11\n33153315\n331601404\n3316052luo\n33163316\n331658901\n33170808a\n331769638\n3317838d\n331788256\n33183318\n331881123\n33191870221\n33192769\n33193319\n331947416\n33199093\n331B502d\n33201314\n33203320\n33211145\n332111665\n3321217666\n3321235323\n33213321\n332144845\n332211000\n33221111\n332211123\n33221144\n33221166\n332211aa\n332211qq\n33222233\n33223322\n332233ay\n33225566\n33228038\n33231140\n3323141a\n33232629\n3323263sun\n332332332\n33233323\n3.32335E+11\n33234624\n332391384\n332430516\n33243324\n33243947\n3324408aA\n3324860113\n3325025076\n33251314\n3325154324\n33252530\n33253325\n33255233\n33256666\n33258550\n332598438\n33261789\n33263326\n33268332\n3327133755\n33273327\n3328207440\n33283328\n33287372\n33292b7a\n33293329\n33300333\n33302149\n33303330\n3330759822\n33312227\n33312345678\n33313331\n333222999\n333308345\n33331817\n3333183999\n33331971\n333321176\n333323321\n33333331\n3333333331\n3.33333E+11\n3.33333E+12\n3.33333E+15\n3.33333E+19\n333333ccaa\n333333eee\n3333344444\n3333355555\n3333366666\n33334009\n3.33367E+11\n3.334E+15\n3333aaaa\n33341041\n333424024\n33343334\n33344455\n3.33445E+11\n33345678\n33351471\n3335201314\n333520333\n333555666\n333555777\n3336073803\n33363336\n33363339\n333666000\n333666333\n333666666\n33366699\n3336669990\n33369949\n33375560\n3337571zw\n3337777777\n333777999\n33378558\n33382475\n33388888888\n333888999\n333888asd\n33393339\n333952333\n333caoyiyi\n333gm123\n3.34008E+11\n33401522\n33414051\n33420808\n33420866\n33421F37\n33423342\n33425266\n33435401\n33437895\n334386600\n33441115\n33441122\n33441314\n3344179///lrt\n3.3442E+11\n334421584\n334425kk\n33443344\n334433aa\n33444433\n3344520***\n33445201\n3344520123\n3344520611\n334452088\n3344520a\n33445210\n334452100\n33445211\n3344521a\n3344521ggw\n33445250\n33445257\n33445321\n33445511\n33445577\n334455aa\n33445678\n33445861\n33445920\n33445921\n33446688\n33447755\n33447788\n3344801104\n33448187\n33448899\n3344love\n3344woaini\n334554321\n3345543211\n3.34554E+14\n33455433\n334558612\n33456789\n334567890\n3345733457\n33459151\n33463346\n33463736\n33473347\n334880952\n33494385g07\n334944524\n33495558\n334a3cc7\n33503350\n33505901\n33510bb1\n33513351\n33519YANrong\n3352033520\n33520520\n3352052033\n335211314\n3352133521\n33521521\n33523352\n3353212li\n33533353\n3.35401E+11\n33543354\n33547618\n33550336\n3355179ayaya\n33553355\n335534636\n33554432\n33555533\n335566123\n33556688\n3355678k\n33557799\n335577xx\n33583358\n335B7b1f\n33602336\n3360526\n33623362\n33630090\n33633127\n33633363\n336336336\n3363703kky\n33643073\n33643364\n3364chen75\n33651937\n33653365\n33663366\n3.36644E+12\n33664488\n33665522\n33667788\n33667799\n3366885519\n33669911\n336699123\n33669933\n336699369\n33669999\n336699aa\n336699aaa\n336699abc\n33669wyx\n33676767\n33683198\n33683368\n33691524\n33693369\n3369774410\n336a1b10\n336apple\n33709394\n3371333mm\n33714866\n33725238\n3374605104\n337474393\n337532885\n33753375\n33771111\n33772211\n33773377\n33774277\n33778217\n33778770\n3379576abcd\n33811333\n33823382\n3382416520\n33826569\n33832795\n33833383\n33834179\n33842421\n33843384ll\n33848191\n33851657\n33851783\n33851789\n33851808\n33851809\n33851909\n33851912\n33852104\n33852134\n33852341\n33852369\n33852453\n33852603\n33852752\n33852849\n33852960\n33853113\n33853258\n33853333\n33853353\n33853385\n33853584\n33853587\n33853694\n33853784\n33853931\n33854307\n33854312\n33854446\n33854450\n33854594\n33854616\n33854794\n33854843\n33854881\n33854950\n33854983\n33855002\n33855132\n33855134\n33855178\n3385544bb\n33855954\n33858646\n33863386\n33873177\n33881234\n33883388\n33884466\n33884531\n33886699\n33888833\n33889900\n3389086aa\n33893389\n33895293\n33896168\n33903390\n33906588\n33915664\n339209613\n33933393\n339339339\n33962147\n339736469\n33974250\n339784496\n33983398\n33985223\n3.39876E+13\n33990011\n33993399\n3.39981E+11\n339988okok\n339F2e3c\n33ca6A53\n33DD5fa1\n33dd8331\n33ef1C23\n33F24a8a\n33f75FEF\n33fb7de3\n33FC7554\n33jj2036837\n34003400\n340086125\n34013401\n34016593\n3402135a\n340220179\n3402687000\n34027713\n3403006ys\n3403227839\n34036350\n3406668125\n34071103\n34073407\n34074889\n34080101\n340813742\n3.40821E+11\n3408241987\n34103410\n3410590324\n3.41059E+12\n34108159\n3411211977\n34112578\n34113411\n34123193\n34123412\n34123515\n34128646\n34150600\n34153415\n34159096\n34160025\n34183418\n3421026830\n3421170679\n34213377\n34213421\n34223422\n3423044069\n34232323\n34241559\n3424231987\n3424251983\n342465535\n342505715\n342516789\n342522002\n34253425\n3425360214\n34256305\n3.42601E+11\n34260415\n3426221984\n34262519\n34263090\n342696818\n34275012\n34286048\n34294369\n34296640\n34297336\n342E3093\n34300017\n34301197\n3.43022E+12\n343091271\n343179553\n343233494\n34342124\n34353637\n343637841\n34364355\n3436744209\n343793712\n34394179\n343E777a\n34403354\n34403909\n344327562\n344345866\n34434684\n34438102\n34459607\n34466905\n344720472\n34473447\n345044519\n34507241\n345117711\n345121539\n345201314\n345278abc\n345304690\n345345345\n345364553\n3453734537\n3455534rt\n345609698\n345617945\n34563456\n34566543\n345678123\n34567890001\n3456789012\n345678912\n345678ss\n34569877\n345751335\n345775148\n34579805\n345821891\n34583458\n345899640wxd\n34590624\n345913yuyu\n345996212\n345b336A\n345xuanfeng\n346094480\n3461583ab\n3462175809\n34623462\n346327697\n346480oy\n346527840\n346599845\n346607820\n34663466\n34666656\n346713851\n34681111\n346827111\n34683468\n34685912\n34687265\n346d2363\n346f1C37\n346f257F\n34741062\n347640f2\n3476520w\n34771912\n34773477\n34783478\n34789622\n34789970\n34808345\n3480jiang\n34819584\n3482534211\n34844231\n3.48499E+11\n3486784401\n348704519\n34870656\n348920043\n34893489\n3490787772\n349086245\n349088475\n349089859\n34921C67\n34929232\n34938767\n34957707\n349653265\n34a34b34c\n34c135BF\n34c568d2\n34c700b7\n34DD78db\n34e42b7a\n34ERY66743\n34ff56B1\n35003500\n35013501\n350197930\n350198408\n35023018\n35023502\n3503211983\n350321tutu\n35043504\n350442902\n35053505\n350583199\n350648986\n350684807\n3507081510\n3507131004\n35073507\n3508023027\n350831440\n35083508\n350mxgds\n35103510\n35113511\n35113969\n35123512\n351252021\n35125600\n351310134\n35131421\n351351351\n35136418\n35137899\n35143514\n351506275\n35153515\n35153721\n35154520\n35173517\n35176113\n35183518\n35185708\n351857761\n35189249\n351946789\n35197863\n351C48a7\n35203520\n35211314\n35213521\n35223522\n35243524\n35248697\n35251314\n352520233\n35256088\n35263526\n35271982\n35273528\n35283528\n352888050\n352E564e\n352liuliu\n35306d8a\n3530@263\n35316916\n35317275\n3531be43\n3532135321\n3.53232E+11\n35323532\n353261984\n35340489\n35349734\n3535353535\n35357045\n35363536\n35363738\n35367C6C\n35371460\n35377001xx\n353879873\n353c572E\n354082198\n3541012pajk\n35411694ok\n35413541\n35420168\n35423542\n35430000\n35455750\n35459731\n35463546\n35465238\n354F6a2b\n354smq0098\n35513551\n355201314\n355275wy\n35532123532\n355443179\n355479261\n35553555\n35556227\n35557486\n35603560\n356100682\n356112836\n35612615\n356176756\n3562951413\n35632178\n35632207\n3563565312\n356475132\n35647983\n35653165\n3.56547E+12\n3565632355\n35660218\n356617238\n35665632\n35667798\n3567849083\n35683568\n35686f15\n35693569\n356e26D4\n357016138\n35712846\n35715900\n357159258\n3.57159E+11\n357159456\n357159852\n357258159\n35733573\n357357357\n3575896442\n35761174\n35775379\n357755326\n35783578\n35785379\n357895123\n35791158\n357911lk\n35793579\n357951456\n35801562\n35803580\n35813581\n358153866\n358182982\n358358358\n35843584\n35846300\n358701956\n35883588\n35884213\n358853475\n35888316\n358888531\n358925025\n35893589\n35896fb8\n35897932\n359068580\n359101290\n35913591\n3591600hn\n359463265\n35955151\n35963596\n35968962\n3597241806\n359750847\n359800936\n35986223\n35993599\n359981168\n359A30d6\n359D1a99\n35a91D50\n35C67e1a\n35EC4a5f\n35jut7i7ikuy12@q\n35yaqun]\n36003596\n36003600\n36007514\n360105501\n36013601\n36030745\n3.60312E+12\n36034454\n3.6036E+11\n36039882\n36053605\n360554254\n36063606\n3606666881\n3607534132\n36080489\n360821265\n360830446\n360846116\n36093609\n360aaron6\n36103610\n36110231\n3611148zjh\n36113611\n361136425\n361187861\n36123333\n36123612\n36126855\n361342ef\n36135268\n36135434\n361361361\n361361xyp\n36143614\n36145278\n361478345\n361483gzlz\n361529818\n361546308\n36158636\n3615yanghan\n36181877\n361833315\n36183618\n36183721\n36193619\n361978438\n3620020a\n362012856\n36203620\n36204806\n36205172\n36206a0c\n362109153\n36211657\n362133hkz2365\n36213621\n36217636\n362191557\n36223622\n36225519\n3623213518\n36234880\n36235880\n362362362\n36236680\n36237351211\n36237758\n36237880\n3623830007\n3624011976\n36242424\n36243624\n36245000\n362514789\n3625231985\n3625260000\n36253520\n36253625\n36257813\n362606169\n36278524\n36283628\n3628978jinzhan\n362951847\n36303630\n36312663\n36313631\n36316186\n36319230\n3632381asd\n363269760\n36335717\n363363363\n36338390\n36350187\n363559450\n363620359\n3636363636\n3.63636E+11\n3.63692E+14\n363729751\n36373839\n363791339\n363801547\n36383638\n363853231\n363858944\n36388490\n36389181\n363925491\n36393639\n36395673\n363969369\n36403640\n36404982\n364109164\n364167255\n36420c85\n364398683\n364520123\n36453645\n364587429\n36469805\n364746260\n364867456\n36491120\n3651118xun\n3651166s\n36513533\n3651741272\n36523652\n365246060\n36524819\n365364319abc\n365365365\n3.65365E+11\n36542850\n36543654\n365448600\n36554846\n36561ae5\n365695878\n365759303\n365769408\n36581921\n36583658\n365F4fa1\n36606862\n36615855\n366184758\n36619396\n36621071\n36623662\n3.6624E+11\n3663038s\n36631650\n36635656\n366366366\n36638533\n3664500000\n366526816\n36663666\n366890399\n36693669\n36710212\n3671021266\n36713120\n3672141021\n36741089\n367626dd\n36793679\n36801387\n3.68048E+15\n36815280\n36815771\n36825258\n368368368\n3684906238\n36853685\n3685968062\n36862577\n36870098\n36873687\n36883688\n3.6884E+11\n36893689\n36897770\n369*258/\n36900000\n369015fe\n36903690\n3690cool\n369121518\n369123456\n36913691\n369147258\n36915369\n369156522\n3691818098\n3691869348\n36924817\n36925800\n36925800000\n36925801\n3692580147\n369258123\n369258147abc\n369258147biyu\n369258741\n369258aa\n369258aaa\n369258abc\n369258as\n369258qq\n369258qw\n36926666\n36926896\n36930629\n369331075ly\n36933693\n36936900\n36936933\n36936987\n36936988\n36936999\n369369abc\n369369jh\n369369ok\n36938860\n36952339\n36953122\n36953695\n36954655\n369548256\n369575541\n36959985\n3696282a\n36963696\n369649201\n369741258\n369788181\n36983698\n36983764\n36984439\n3698520147\n36985210\n369852123\n36985214\n369852369\n369852741\n369854052\n36986321dj\n3698736987\n36987410\n3698741025\n369874123\n3698741250\n36993699\n369963369\n3.69963E+11\n36999999\n369aa258ss\n369cde369\n369D1a18\n369qwe369\n369sqc369\n369XIAOWANGZI\n36A17b4c\n36AC7ead\n36D31388\n36E30aad\n36ed474d\n36F21d63\n36f26DDF\n36pwtf4685\n37003700\n37005102\n3701021985\n37013701\n370194778\n37020583\n37021325\n370271408\n370297652\n370308127\n37035678\n370398603\n3.706E+13\n3.70602E+11\n3706861988\n37073707\n37085838\n370868s8\n37089464\n37102008\n3710339001\n371067943\n37112537\n371141928\n371147342\n371213na\n371224258\n37123712\n371308221\n3713716688\n3714337143\n371546878\n37157323\n37159473\n3719575908\n37205673\n37210000\n372101101\n3.72109E+11\n37211111\n37211237\n37211273\n37211811\n37212714\n37213525\n3.72137E+11\n37213824\n37214451\n37214624\n37214689\n3.72147E+11\n37214832\n3721520618\n37215588\n37216636\n37217086\n37217749\n372179964\n37218848\n37218855\n37218864\n37218888\n3721987610\n37219981\n3721abcd\n3721nopk\n37228233\n3722b7899a\n372325430\n372477155\n37252417\n3725798ly\n3.7262E+11\n37269990hx\n372731984\n372853357\n37287312\n372901662\n372911996\n37292855\n372928550\n3.72929E+11\n372936scor\n37297534\n372a262A\n372c06A6\n37302233\n373042083\n373068170\n373082904\n37327961\n37353310\n37373737\n3737373737\n37383738\n373841561\n373973233\n37403740\n3740789273\n37428246\n37434616\n374374374\n37449262\n374521120\n3745561734\n374601895\n374725200\n37473747\n3749164a\n3.75002E+13\n375021063\n375074556\n37507504\n3752137521\n37523791\n37533522\n37544fb1\n37553250\n375544298\n37557488\n375781179\n376089806\n37612093\n3761495wq\n376168826\n37619025\n376271316\n37628558\n37631a8b\n37650787\n3.76539E+11\n376569851\n37661378\n376632693\n376744788\n376794770\n37683442\n37687515\n37693769\n376954231\n376B0f3e\n37700287\n377201663\n37742536\n37763776\n3776508a\n377734427\n377785713\n37789500\n3780838x\n37826378\n378378378\n3784371833\n37866628\n37877859646\n37883788\n3789950025\n37915345\n37924d9f\n379251611love\n379410283\n3795488f\n37960001\n379688814\n379724232\n379764527\n379e22de\n379E2ac3\n37a061B9\n37b33BE9\n37B4526b\n37BB5586\n37d5094b\n37D72ba5\n37dengyu21\n37E20c02\n38000000\n38003800\n380214azsxdcfv\n38025897\n380322589\n380431713\n380434607\n380567750\n380571221\n380620050\n380799828\n3810103b\n381051507\n381058598\n381083326\n3810927mao\n38110804\n38110859.c\n3.81138E+12\n38113811\n38114209\n381168752\n38123812\n381385811\n38143814\n38153951\n38163816\n381654729\n3816547290\n3817471917\n381810106\n38184600\n38184993\n381863144\n381885359\n382002359\n382035800\n382065210\n3820699226\n38207197\n382263xie\n382360236\n38237101\n38237600\n38241450\n38243721\n38243824\n382452837\n38253825\n38256902\n38257215\n382618mm\n38268198\n3826819800\n382716FC\n38273827\n3827638276\n3827798_a\n38287575\n38297744\n38306200\n383088460\n383106214\n3831094123\n38311412\n38313532\n38324wss\n383293xia\n383336ly\n38337425679\n38353285\n383557582\n38359351\n3835laure\n38363603\n38378331\n38380438\n38381438\n38383388\n3838383838\n38385438\n38389438\n3838ns38.\n38403579\n38423842\n38444919919\n384626433\n38465242\n38470238\n384775409\n38485868\n38492090\n385028yjun\n385141259\n38514129\n3851471119\n3851657sg\n385201314\n38520143\n38538701n\n385392BB\n3854rtuvbp\n38555292\n38556288\n385614119\n38569641\n38572419\n38583362\n385b1635\n385F0214\n3860157abc\n3.862E+11\n38634907\n38640128\n386486586\n386555957\n38657f21\n38671078\n38683868\n38693267\n38693869\n38697182\n38711324\n3872309duan\n38735380\n387420489\n3874_dhn_e\n38752686\n38773877\n38777c54\n38783113\n38799153\n38804518\n38805309\n38812538\n38815845\n38821770\n38833883\n388488588\n38851957\n38853511\n3885656hs\n38856789\n38869993\n38870770\n38883888\n38898838\n388abcde\n38913891\n38923892\n389424256\n38944b47\n38952345566\n3899738997\n389992021\n389a2E98\n38a524be\n38a74two\n38cd7874\n38ec33BA\n38f376CD\n38fc7811\n38FF69ba\n38qtiouNFz\n39019219\n39021257\n390229398\n39027968\n3903071458\n39032180\n39045087\n39050870\n39060427\n3906403xxy\n390800123\n39100154\n39106zryz\n39111605\n39113911\n39120856\n3912209243825jbr\n39123912\n39131b1d\n39147a36\n39153915\n39163916\n39175418\n391814573\n3919339193\n39196710\n391A3be6\n3.92275E+13\n39243924\n3924768510\n39247900suli\n39251c43\n3925371520\n3925979lj\n39262370\n39273927\n39274936\n392781243\n3927zzlBIRD\n3.93E+10\n392B3c53\n392F1af8\n393029740\n39303930\n393041123\n393184520\n393214149\n39323817\n39326650\n39330112\n393474512\n393518723\n393534827\n39355190\n39357811\n39390595\n39393939\n393f2912\n3.94E+43\n394394394\n39457173\n39467232\n394679269\n394756091\n39477673\n39482534\n39507788\n39512512\n395472212\n39560014\n39561648\n39564502\n395685530\n395896983\n3959003sina\n39595919\n395e480D\n39605FF2\n39611315\n396151804\n39625430\n39627309\n396336770\n396340reason\n396344044\n39653965\n39669831\n39670745\n3.96781E+14\n39683968\n39693969\n396945541\n3969482186\n39698999\n396b5C9A\n397110834\n39713971\n397245701\n397254263\n39731442\n397353426\n39741121\n39756790\n39771212_fxb\n397864095\n397901023\n39806599\n39811885\n39812404\n3981717lhg.\n398186448\n39823982\n398270291\n398293613\n39836468\n39843200\n39844922\n39871BC3\n398781527\n3987839878\n39880575\n39886201\n39917830\n39932709\n39933993\n39937020\n399391669s\n3994168h\n3995169o\n39963807\n39968661\n39973725\n39983998\n39984006\n39998844\n399b0DD8\n399f6f0d\n39D662b4\n39E091109\n39E541f4\n39p0gpvOGA\n39p0hpvOGA\n39q0houNFA\n39q0hpvOFA\n39qthouNFA\n39qtiouNFA\n39qtiouNFz\n39wxnrwQHC\n39wxnrxQHC\n39xxnrwQHC\n39xxpqwPGB\n39xxpqwPHB\n39xxpqwQHB\n39xxprwQHB\n39xxprwQHC\n39yxpqwPGB\n39yxqqvPGB\n39yxqqwPGB\n3a131e8e\n3a1415926\n3A141ff1\n3A1A0c89\n3A245664\n3A27075b\n3A3951c1\n3a3b46856e\n3A561a32\n3A563fc5\n3a5a552a\n3A674816\n3a75sd17\n3a7f581f\n3aa72e65\n3ab612fa\n3ab87768\n3ACD4340\n3ad97e0a\n3AE47c15\n3ae73f9c\n3AEE0a94\n3awxnrxQHC\n3B097fc4\n3B2627c1\n3B3239be\n3b5034FD\n3B667061\n3B7B1a99\n3B813c0b\n3b8b0876\n3B8D02ad\n3BB81930\n3BCB62ed\n3bd264a5\n3bd55BA2\n3BEB43fc\n3bf13717\n3C02040c\n3C1F2587\n3c25707F\n3c2b53D0\n3C30141d\n3C3318ff\n3c587179\n3c697751\n3C707679\n3c7a61f4\n3C7B6c9f\n3c7c56d6\n3c7f0d22\n3c8c1691\n3cbe375B\n3ce1378B\n3ce3609d\n3cf92B48\n3CFB4da2\n3cluoyin29\n3cpifawang\n3d0f4cf1\n3d1415926\n3d1f571a\n3d2c3af5\n3d4e5FFF\n3d5b353D\n3D6471de\n3d716E12\n3D951e80\n3d9b75f9\n3db25128\n3dian1415926\n3E1F1b3c\n3e3d6a65\n3E703019\n3E80043a\n3E8956a3\n3e9055CC\n3e97308E\n3e99774E\n3ea0288a\n3ecf316F\n3ed2ws1qa\n3edc$RFV\n3edc2wsx\n3edc2wsx1qaz\n3edc3edc\n3edc6yhn\n3edc7UJM\n3EF95311\n3eoa9to4\n3er4t55u\n3f1c6517\n3f371d88\n3f525BF8\n3f5947e7\n3f9562CA\n3F9D0cda\n3faf00C6\n3fdf4e4f\n3FF04d59\n3ffa421C\n3j8ffi5xg\n3LX8A2BM\n3pow462y\n3qilmissu\n3qloveme\n3qxiexie\n3r98xJ3xDY\n3r98xK3xDY\n3r98xK4xDY\n3remark6\n3s6c8844\n3s98xK4xDY\n3s98xK4xDZ\n3sa8xK42CZ\n3sa8xK4xCZ\n3sa8xK4xDZ\n3sa8xL42CJ\n3sa8xL42CZ\n3t7ppucsdw\n3ta8xL42BJ\n3ta8xL42CJ\n3tb8xL42BJ\n3tb8xL42xJ\n3tb8xM42xI\n3tb8xM42xJ\n3tb9xM42xI\n3tccqnv5a5\n3ub9xM42xI\n3ub9xM52xI\n3ub9xM53xH\n3ub9xM53xI\n3uc9xM53xH\n3uc9xN53xH\n3ud90O542y\n3vc9xN532G\n3vc9xN53xG\n3vc9xN53xH\n3vc9xP532G\n3ve90O542x\n3ve90O542y\n3vea0O542x\n3vea0P542x\n3vea0P642w\n3w4e5r6t\n3wea0P642w\n3wfa0P642w\n3wfa0P652w\n3wfa0P653w\n3wfa0Q653v\n3wfa0Q653w\n3xfa0Q653v\n3xga0Q653v\n3xgb0Q653u\n3xgb0Q653v\n3xgb0R653u\n3xgb0R663u\n3zlzlzl7\n40008127\n40013791\n40017358\n40030954\n4.00351E+11\n40040163\n4006068158\n4006128806\n400637794\n4006780805\n4006999999\n4007105899\n4007105998\n4007166222\n40074007\n4007878758\n4008100100\n4008111111\n4008111666\n4008123123\n40082789\n4008309530\n4008808828\n4008823823\n4008899379\n4008980188\n400b467b\n40112123\n4011273C\n40114011\n40124012\n4012lynn\n401302479\n401328138\n40135020\n40152a11\n40154015\n401768ec\n40184018\n401997732\n40209028\n40215029\n40224022\n402340bb\n4023512e\n402353213\n4023625z\n402396267\n40241597\n40244024\n40253538\n40254025\n40262043\n40264026\n402671656\n40278858\n40284028\n40287073\n40294029\n40302010\n403056296\n40309851\n403123ai\n40324032\n403298887\n40330642\n403403328\n40364634\n403772535\n4039196698\n40399349\n40400aaa\n404098962\n404114303\n404288048\n404511819xjhjql\n40463546\n40516611\n40521100\n4052614207\n405292881\n405598282\n40564056\n405672210\n40570308\n40601831212\n4.06072E+13\n40612345\n4061236z\n4061458aji\n406175am\n40619608\n406491595\n406571860\n406682251\n4066893141\n40678619ying\n40689366\n406919797\n406F1e92\n40720517\n40745123\n40746757\n40746967\n40778104\n4.07789E+11\n407918706\n40798438\n40818040\n40832079\n40873487\n40884088\n40884F91\n408F705a\n40903891\n40924985\n409409409\n409455784\n40961001\n4096255l\n409686997\n409723435\n409942526\n409965128\n40A873e2\n40b167eb\n40ca774a\n40d249b4\n40E80518\n40E841d7\n40F668f4\n410015420\n41004100\n4101021986\n410102820\n410103043\n410103148\n41012891\n41014101\n41015891\n410201624\n410276353\n410291609\n410314518\n4104021980\n4.10404E+14\n4104234978\n41044104\n410520630\n410528790\n41055720kw\n410561320\n410623qq\n4.10651E+11\n410721295\n41074107\n41082319\n41087BF0\n41104110\n41109537\n41115891\n41124112\n4113231982\n4113811985\n411411411\n4114251xyz\n41144114\n41152263\n41154115\n41157623\n41174157\n41174sunny\n411814192\n41184118\n411868966\n411872726\n4118739mjy\n4120166e\n41204120\n41204891\n41206891\n41207326\n412113100\n412154389\n4122087911\n41224122\n41231012\n41234123\n412356789\n41236987\n4.12412E+11\n412428267\n41243818\n41244124\n4124501abc\n412484060\n4125024d\n412512550\n41251314\n412520520\n41254125\n41254578\n412594049\n412750F2\n41281784\n412824qwer\n41284128\n412968D7\n412C2afb\n4.1303E+14\n4.13064E+11\n41311283\n41312432\n41324132\n41326000\n413413413\n413413888\n41344134\n41347078\n4135527c\n413579670\n413841362\n413907327\n41391210q\n413B6c8d\n41407346\n41414141\n41414144\n41415926\n414180615\n41424344\n41432414\n41436411\n41436533\n414414414\n41450960\n41454145\n41456789\n414579764\n41462033\n41474147\n414758232\n41484148\n414869749\n414D0ffd\n415201314\n41524152\n41526300\n415263789\n41543534\n4154361b\n415486404\n415491830\n415600086\n415803112\n41580906\n41584158\n415845325\n41594631\n41594821\n415b4c39\n41604160\n41605791\n416089459\n41612381\n416143479\n41624162\n416368478\n41650824\n41650868\n41671039\n41675437\n416769049\n416812112\n41684168\n41685293\n41694169\n4170899A\n4170932865\n41712431\n4.1734E+11\n41741560\n417417417\n417451876\n417528639\n417775365\n41781DF2\n4178252323\n41794179\n417999892\n417zhu716\n418000ll\n41804180\n41811724\n418210847\n418245828\n418289200\n418418418\n418422550\n4184564ym\n418456531\n41853444\n4186191015\n41882412\n418920520\n41922686\n419315xsp\n419383798\n419419419\n41958021\n419626xx\n41968532\n4197169399\n4198217c\n419821923\n4198246540\n41984422\n41994199\n419jingyuanyuan\n41a86b7b\n41AB6278\n41B47823\n41BE409b\n41D3048e\n41d650A3\n41DF36c9\n41F56656\n420007@@\n420049466\n4201162030wlyx\n420122810\n42013891\n42014201\n4201727lm\n420230538\n4.20252E+11\n420322198\n42034203\n420420420\n420426205\n42044204\n420503ty\n4205058923\n42054205\n42056402\n420574398\n420664005\n4207068d\n4207112154\n42071891\n420729393\n420789379\n42086280\n42093214\n420942579\n420946587\n4209841983\n4210230446\n42104210\n42106891\n4211212013\n4211271314\n42114211\n421145521\n42114891\n42116891\n421176042\n42118791\n42118891\n421209238\n421210504\n421251cb\n42128426\n42134213\n42135660\n421421421\n42144214\n421522346\n421528386\n421548104\n421558453\n42164216\n42178836\n42184218\n4218542185\n42192021\n421982ab\n4220355987\n422112233\n42215891\n42218891\n42221399989\n4222148712\n4.22227E+14\n422343099\n422422422\n42242722\n4224281971\n42244224\n4225466f\n42269236\n42270540\n4227199g\n42274227\n422832826\n42294229\n422asd421\n42300891\n423009lkaka\n42304230\n4231127ta\n42314231\n42324232\n4233005599\n42334233\n423423423\n4236213342\n42371959\n42404240\n4241030h\n42411525\n4241619410\n42421574\n42424242\n424424424\n4245001982\n424520chenlilin\n42452663\n4245656a\n42457892\n42463875\n42471600\n424777097\n42482232\n4248538117\n42490016\n424C39aa\n42505954\n42512835\n42514251\n425292glh\n4253078191\n425425425\n4255085qqq\n42584258\n42617d9d\n426426426\n42652042\n42661072\n42668740\n42684268\n42690911\n42692355\n426D2fd9\n427117278\n42721452\n42726494\n427427427\n427591826dibest\n42770584\n4278807278\n427983lili\n42798608\n42825945\n42830332\n42833440\n4284122502\n428428428\n428428520\n428520zxc\n42857216\n42864286\n42865A56\n4286795zsm\n42884288\n42886128\n42897408\n4290011986\n429001888\n4290061987\n429429429\n42952674\n429608841\n42980292626\n429812529\n429d796F\n42A0311e\n42ab31B9\n42C10c2e\n42d60F70\n43004300\n43012419\n430136917\n43014301\n4.30204E+11\n43042682\n430430aa\n43046721\n4304811983\n43048968\n4.30543E+13\n43058635\n4.30803E+15\n430824311\n4309111982\n4310031621syx\n431007700\n43104310\n4310629ren\n4311875zhwl\n43122214414\n43124312\n43147100\n43147855\n43164316\n43165124\n4317001111\n43180104\n43184318\n4318837137\n431945c7\n432-xiaohang\n43210000\n432156789\n4321rewq\n4321zaq1\n43231323\n432432432\n4325031977\n4325221982\n43252276\n43254325\n43258920\n43261825\n43264326\n4326639c\n43281421\n4329241982\n43294679\n432a6936\n432g89i0o0\n433225xt\n43325688\n43332897\n4334055aa\n43353398\n43383279\n433832795\n43398266\n433bessey\n433C7ec2\n433E08c4\n43402843\n43402sun\n43420024420\n4342043420\n4.34386E+13\n43450297\n43453080\n43456309\n43490603\n43526741\n4352680971\n43527224\n43530976\n43568123\n43596405\n435c0172\n4360274b\n436413wuxue\n43662d9f\n43674200\n43674201\n43674202\n43674215\n43674218\n43674229\n43674233\n43674235\n43674236\n43674237\n43674238\n43712633\n43720814\n43724372\n4375269a\n43762800\n437839wb\n437877hdp\n43791912\n43793333\n43794616\n438009234\n43827bd9\n4383734a\n438438438\n43865138\n4388223061\n438951276\n4392767166\n43941855\n43964288\n439940hannasuxi\n43994399\n43AF531d\n43c4565f\n43C72275\n43DD12b3\n43eb68ab\n43EF5327\n43jane56\n44004400\n44016067\n44024402\n44034403\n4403oppel\n44042769\n440440102\n4.40508E+11\n44064713\n44068219\n440E4b2c\n4410130921\n44102494\n44110219\n44113832\n44114411\n441222501\n441235969\n44126285\n44134413\n441353LK\n44136766\n44142279\n44144414\n44146080\n44164416\n44165525\n441933Ab\n442010854\n44214421\n44216770\n44224422\n4423499ec\n44244424\n44244811\n442450654\n44253432\n442596852\n442616276\n442668387\n44289860\n44303291\n44305252\n4431217666\n44315455\n44321243\n443244888\n44328281\n4433221100\n44334433\n44335566\n44352820913\n443784595\n4.43848E+11\n443863163\n44410323\n44410765\n444222333\n44434241\n444372877\n44440000\n44441111\n44442222\n4444333221\n44444444444\n4.44444E+13\n4.44444E+15\n44447777\n44449999\n4444aaaa\n4444dddd\n444536171\n44455566\n44462484\n44462557\n44473748\n445023cd\n445100123\n44514451\n445201314\n44520226\n445284299\n44531986\n4.45381E+11\n445432241\n44544875\n44552187\n44552217\n44554455\n44555544\n44556600\n44556611\n445566123\n44556622\n445566456\n4.45567E+11\n445566789\n44556688\n44556699\n44562820\n44563645\n44564456\n44569471\n445759213\n44586892\n44588017\n44595461\n4.46052E+13\n446087910\n446164199\n44620943\n446217B8\n4463532123\n44642171\n4464322D\n44663465\n44667788\n44669173\n446707070\n44676962\n44684468\n446848840\n446915770\n447019628\n447031989\n44719484\n4473200AiR1118\n447451021\n447499287\n447592411\n447661464\n447722df\n44774477\n44774774\n44776600\n44778899\n447826698\n447885532\n44794743\n44795016\n44799211\n44801986\n44804480\n448225811\n44825026\n4.48E+05\n448359260\n448430831linhe\n448448448\n44872549\n44879151\n44884488\n448910870\n448f61C3\n44908019\n44912838\n449177889\n44918111\n44918979\n44924B86\n4493064097\n44935630\n44941650\n44944110\n4494444944\n449607210\n449755711\n449944zx\n44997052\n449e56cb\n44a2278c\n44A93498\n44ab4F0D\n44C6268f\n44ce3F73\n44D20ed1\n44D25767\n44D764e7\n44da0B69\n44F61d9e\n44f73420\n44FC5769\n45000137\n45004500\n4501031984\n4501079ymp\n45011321\n45011881\n45014501\n45021664\n450321520\n4504041980\n450513354\n450551327\n450736378\n45083823\n450A6caf\n450e0AA3\n45102380\n45104510\n45114511\n451155409\n4511957001\n45120000\n4512181212\n45122258\n45124512\n451245482\n451544745\n45164516\n451666576\n4517029f\n4517571868\n45184518\n451915159\n451B54c3\n45201314\n45204520\n45211314\n452121522\n452125878\n45214521\n452280145\n452300123\n45234523\n452400992\n4.52428E+11\n452436486\n452482769\n4524janet\n45250179\n45252647\n45256700\n452680192\n45274527\n45279588\n45291132\n452966070\n452d3F67\n45314352\n45321357\n453237572\n45324532\n4533502575\n453399941\n453420GFZ\n45351511\n45362718\n453647598\n4.53654E+12\n45377965\n45394539\n453982771\n45398484\n45399651\n45406462\n45408182\n454089021\n45425203\n454306807\n45434826ccym\n4545145a\n454527277\n45457878\n454600966\n45464546\n45464748\n45494052\n454E1292\n455076352\n45510820\n455201190\n455387426\n455455455\n45556205\n45564556\n45568552t\n455696504\n455703163\n455A4e15\n456*-+.0\n456+8520\n45602964\n4560361300\n45604560\n45610018\n456110110\n456123000\n456123321\n45612345\n4.56123E+11\n45612378\n456123aa\n456123as\n456123asd\n456123QAZ\n456123ZXC\n45614561\n45614787\n456169869\n45625800\n456258123\n45625813a\n4.56258E+11\n456258753\n45632100\n456321789\n456321987\n456321abc\n456321vv\n45634563\n45635126\n45645600\n456456123\n45645645\n4.56456E+11\n456456456pc\n45645678\n456456789\n456456aa\n456456aaa\n456456abc\n456456bv\n456456qq\n45649336\n4565201314\n45655606\n45664566\n456646822\n456654123\n456654456\n4.56654E+11\n45666666\n45671631\n45671637\n45673283\n45677654\n45678123\n4567887654\n456789000\n45678901\n456789321\n456789456\n456789789\n456789987\n4.5679E+11\n456789aa\n456789Ab\n456789qq\n456789qwe\n456789zz\n45680456\n456827319\n456827913\n456838tina\n45684568\n45685153\n456852..\n456852000\n45685213\n456852159\n4568521973\n4.56852E+11\n4568525153\n45685255\n456852753\n456852789\n4568527913\n456852963\n456852aa\n456852abc\n456852asd\n456852qq\n456852zxc\n45694569\n456963741\n456987123\n456987321\n456abc123\n456fghjnicky\n456pan789\n456qwa789\n456qwe123\n456qwe789\n456wsx456\n45702099\n45716625\n45721257\n457285193\n457316415\n4574451B\n45762507\n45764483\n45784578\n45784799\n45785214\n457971ac\n45806865\n45814581\n45820368\n45851783\n45851789\n45851808\n45851809\n45851912\n45851941\n45852008\n45852104\n45852147\n45852211\n45852243\n45852341\n45852365\n45852369\n45852453\n45852603\n45852638\n4.58528E+11\n45852849\n45852901\n45852908\n45853007\n45853018\n45853092\n45853113\n45853204\n45853257\n45853258\n45853302\n45853333\n45853353\n45853390\n4.58535E+11\n45853584\n45853640\n45853694\n45853784\n45853829\n45853931\n45854307\n45854312\n45854322\n45854341\n45854446\n45854476\n45854585\n45854616\n45854636\n45854834\n45854881\n45854909\n45855132\n45855134\n45855178\n45855360\n45855381\n45855430\n4585543039\n45855439\n45856236\n45856525\n45857166\n45857189\n45857220\n45857310\n45857427\n458575143\n4585821\n45858646\n45870000\n45870711\n4.58746E+11\n45874587a\n458769311\n4588201847\n45884588\n45894589\n458A0fc7\n459062a4\n459064824\n4590770a\n459185115\n459210340\n459239484\n45934954\n45942501\n4594385bb\n45946184\n45974597\n4598152684\n4598787331\n45988648\n459886726\n459891503\n459919894\n45993cf2\n45a54837\n45CD270c\n45DB5771\n45fe320d\n45NOPENNY\n460025aa\n46003119\n460044104\n4602001985\n460205dnw\n460205dnw#\n4603638660\n46047913\n46050101\n46051283\n46065351\n46065889\n460832092\n460900609\n460F3117\n46103330\n46104610\n461094693\n46110206\n46124612\n4615595lx\n461612366\n461690224\n461713f4\n4.61915E+13\n46212437\n4621905\n462282501\n46231599\n462537@@\n46254625\n46275202\n46284628\n46297875\n4631173qwz\n46313797\n4632194520\n46325246\n463395727\n463404828\n4634615123\n463624732\n4.63698E+11\n46384646\n46427ee6\n464359wiqq\n4645117107\n46464646\n46484648\n46495139\n46496479\n46497677\n46501614\n4.65016E+11\n46507745\n46519918\n465308259\n465321law\n465480503\n465505087\n4656382e\n4.65648E+11\n46573vdgs\n465747176\n46584658\n466068942\n4662245yy\n4.66269E+11\n466293003\n46632C7E\n46642321\n466451295\n466466466\n46663258\n46663737\n46663783\n466753612\n466912412\n467160d5\n467310cyx\n4674634887\n4675320722\n46779077\n46782460\n46794679\n46824682\n468257913\n468273915\n4.69E+50\n4686186556\n46889079\n46895505\n4691112183\n46941570\n46944694\n4694552d\n4696399B\n469785801\n46986414\n46990594\n469a348b\n469B68bc\n46A74a7b\n46AE3278\n46c77FF8\n46CB437f\n46E17ee4\n46F95b75\n46lyj0012\n470002146\n470047870\n47029390\n47054241\n470909962\n470983020\n47101114\n47104710\n47113443\n47114711\n471303936\n471317wzx\n4713691372\n471622ma\n47185167\n47186780\n471d1DB9\n471d7AB6\n472245419\n472261601\n47231048\n472399660\n47245386\n47251881\n472528615\n472566360\n47259149\n4726357lyh\n47284728\n47285735\n472895395\n472986983\n472a7add\n472b0032\n472C3462\n47315015\n47327385\n473329ar\n473411428\n47364202\n47390794\n473f7F81\n474413512\n4744907wqrdb\n474538436\n47474747\n47478888\n47484748\n474905002\n475211314\n47521614\n47525459\n47537988\n4753955069\n47555415\n47571265\n475869123\n47604760\n47609508\n4763098520\n476445724\n47653208\n47658990\n476698093\n4767449a\n47676f83\n47694219\n47694769\n476B6fc8\n47705077\n47746561\n47746561yls\n47763ef8\n47798194\n47814227\n47836129\n47837641\n47842235\n478478478\n47851993\n47856912\n47858102\n478829816\n478852093\n47890341\n4.78926E+14\n47896321\n479011114\n47915278\n479240613\n479531379\n479701B0\n47986715123\n479e7b83\n47A81290\n47ae031b\n47b319e3\n47B516aa\n47c649E4\n47D33cd0\n47d5213e\n47DC0f3a\n47ec635b\n47lou207\n47lyw412\n48004800\n48015111\n48041808\n4.80438E+11\n48044804\n480486487\n48057c02\n48105317\n4.812E+11\n481207500\n48121248\n48124812\n48141799\n48164816\n48176300\n4819027d\n481B0de1\n4820504891\n48215104\n48257D4F\n48271016\n48271060\n48273142\n48298086\n482d1a25\n482F375f\n48315316\n48324832\n48325910\n48331664\n483348d2\n48342550\n48364836\n48396287\n483C1876\n48432603\n4844072a\n48474847\n48484848\n4848484848\n4848748iou\n4849270a\n4850237yy\n485280wyp\n48531823\n48554411\n48572403\n48576263\n48580287\n48584640\n48621793\n48624862\n4862548625\n486257913\n486279135\n486279513\n48628320320\n486486486\n486529662\n48662868\n48684868\n48687375\n48691412\n48691988612+\n48694869\n48700264\n48734660\n4873s5016\n48747550\n48761809\n48761912\n48762901\n4.87737E+11\n48773784\n48774881\n48783b3d\n487880hq\n487963011\n48802136\n48810424\n48814881\n4882a001\n48841190\n48913403\n48921100\n4894015621\n489552146\n48956123\n48981105\n48b16C5D\n48E761db\n48f55581\n48fa46B5\n48qazxcv\n490017180\n4904442005\n490590630\n490715oujunli\n49075243\n490768874\n490852480\n4.90912E+13\n4.91001E+11\n49104191\n49105005\n491188642\n49125452\n49128287\n49162536\n49168525\n49182736\n491A187e\n491D2544\n492035510\n492052110\n49258950\n492846963\n492856420\n493323452\n49352285\n493671000\n49367749\n49369327\n49379457\n493928434\n4939471000\n493949083\n493E1a10\n49402507\n494326802\n494421563\n49446532\n49451153\n494520ghss\n49494949\n49504950\n4950672510\n49520039\n4953130474\n49542950\n495495495\n49557080\n495641234\n495879wqvb\n495966233\n495979540\n49626537\n496338664\n496369592\n49638541\n49652916\n496852235\n49717271\n497290a11\n49748592\n497586822\n497645285\n49782311\n49782566\n49783258\n49783354\n49783587\n49785132\n49785134\n49810zxl\n49813677\n4982544021\n49832170\n49833875\n4984397760\n49856624\n4.99E+101\n4.98632E+11\n49867307\n498894004\n498C4e71\n498c643a\n499181025\n49AD5676\n49B34701\n49bd732e\n49c550b6\n49cf55ec\n49D071c4\n49d41b8f\n49da6524\n49ea0286\n49f05d48\n49fd71d5\n49o0gpvOGB\n49o0gpvPGB\n49p0gpvOGA\n49p0gpvOGB\n4a382903\n4a3b0AE1\n4A415dbe\n4a487932\n4a55659C\n4A571923\n4a591F32\n4A802998\n4a975097\n4A9A2883\n4ab51079\n4ac960ED\n4adb7a6c\n4ae838B4\n4aff06A9\n4AFF0d2b\n4amedwina\n4an0fqwPHB\n4an0fqwQHC\n4ao0fqwPHB\n4ao0gpwPHB\n4Atc1T875r\n4Atc1U875r\n4auxksySJD\n4avxksySID\n4avxksySJD\n4avxmrxRIC\n4avxmrxRID\n4avxmsxRID\n4avxmsyRID\n4avxmsySID\n4awxmrxRIC\n4awxnrxQHC\n4awxnrxQIC\n4awxnrxRIC\n4B047518\n4b0b552F\n4b1d2388\n4b214ac3\n4b324DBF\n4B4647b9\n4B483c9b\n4b5145C4\n4B625fec\n4B6D229b\n4b7548B9\n4b840659\n4b8b7ad6\n4B8D7e55\n4B931d02\n4BA17c42\n4bad4053\n4bc5139d\n4BC57f37\n4BC93d68\n4bdd2B8A\n4BF4758c\n4C061853\n4c1328ED\n4c1a2978\n4C2F4e5b\n4C426ff4\n4C5C5131\n4C607318\n4c742C60\n4C827a73\n4CBB1e58\n4cdf6dd6\n4CE2406e\n4cf65031\n4cff229a\n4d090E15\n4d117a3a\n4D240b2a\n4D272c57\n4d3c2b1a\n4D3D286d\n4D4A2894\n4d5104b9\n4d631653\n4d666FA2\n4d892349\n4d9f6010\n4DA6FL82\n4da943a6\n4dc777b1\n4de6193C\n4DEF738a\n4E07501c\n4E0D2f7a\n4e1673FF\n4e213B4A\n4E516b25\n4E5936d7\n4e765da7\n4e7a4C16\n4eaf2675\n4EB04d6b\n4EB27a70\n4eb32aae\n4EC66c85\n4ed368b9\n4ed52631\n4ED611cb\n4ed74B51\n4EDF2ccb\n4ee97543\n4eed1729\n4ef5277e\n4EFB692e\n4everlove\n4f002ADF\n4F065f54\n4f066c8f\n4f1456ED\n4f1d2956\n4F251d60\n4f2a7606\n4F2B59bb\n4f343409\n4f3b54d2\n4f3d2s1a\n4f3n9b1n\n4F43173c\n4F44691a\n4F5774ea\n4F6074cc\n4F71640b\n4f823101\n4F9C4b0b\n4F9D5452\n4fasdfasf\n4fb44D2F\n4FB50de1\n4fcb6856\n4fd80f73\n4FE32b2c\n4kgrubby\n4nz8j138\n4q18ihjpzw\n4rfv5tgb6yhn\n4rfv7ujm\n4vc9xP532G\n4vd9xP532G\n4vdaxP532G\n4vdaxP542F\n4vdaxP542G\n4vfxtvip\n4wdaxP542F\n4wdaxP642F\n4wdaxQ642F\n4weaxQ642E\n4weaxQ642F\n4xeaxQ642E\n4xeaxQ643E\n4xeaxR643E\n4xeaxR653D\n4xeaxR653E\n4xebxR653D\n4xfbxR653D\n4xgb0R763u\n4yfb2S753C\n4yfb2S753D\n4yfb2S763C\n4yfb2S764C\n4yfbxR753D\n4yfbxS753D\n4ygb0R763u\n4ytb0R764t\n4ytb0R764u\n4ytb0S764t\n4ztb0S764s\n4ztb0S764t\n4ztc0S774s\n4ztc0T774s\n4ztc1T774s\n4ztc1T874s\n4ztc1T875r\n50000000\n50002193791qmwn\n50005000\n500107yjz\n5001103130\n500120sws\n50012891\n50015001\n5002271984\n50023507\n5002650024\n5003214786\n50045381\n500500500\n50052582\n50055005\n5005747liu\n50061b91\n50063587\n500711055\n50075007\n500827mm\n50085008\n500b30F6\n501015600\n50101743\n501021123\n50104186\n50105010\n50115011\n50115599\n50115891\n501177215\n50125012\n50135013\n501502503\n50165016\n50182516\n50185018\n501885076s\n50193673\n50195019\n50205020\n5.02067E+13\n50213779\n50215021\n502175662\n5022004018lxl\n50225022\n5022574969\n50232566\n50235023\n50242805\n50245024\n5025201314\n50255025\n50255958\n5025631000\n502604123\n50265026\n50275501\n502822323\n50288419\n5028841971\n50295029\n502C0584\n503082503\n50321314\n503241709\n50324838\n50324991\n50325032\n503260633\n5032elgin\n50335033\n50356263\n503660784\n50388435\n50393224\n50400120\n50402f03\n5040302010\n50408724\n5041404045\n504220551\n504421756\n504501001\n50451193\n5.04823E+14\n50503891\n50505050\n5050505050\n50516018\n50517780\n50518450\n505388wxkbabo\n505505505\n50554546\n50554546a\n505546570\n50555055\n50565200\n505698199\n50575057\n50585058\n5060320480\n50605060\n506125860\n50614025\n50615456\n50617058\n50618276\n50628523\n506310624\n50640721\n50640725\n506506506\n50665066\n5.07E+19\n50685068\n50732966\n5.08E+10\n507559547\n50768090\n507725000\n50773891\n50774033\n50780692\n50782967\n50784135\n5078431234\n507888888\n50796188\n50796205\n507c2246\n507e3CBB\n50800560\n5080118668\n50816286\n50840468\n508508wz\n50856543\n50857884\n5086119HFF\n50865523\n50869871\n508715846\n50875629\n50878910\n50884075\n50885088\n50895089\n5089950509\n5090412mmm\n50917164\n50942CF9\n509509509\n5095201314\n50965096\n50A16c6f\n50be26fc\n50C04c1b\n50d8138D\n50e703FA\n50F21279\n51000000\n51001486\n51004965\n51005100\n510056456\n510066272\n51007829\n5101251984\n510131425\n51013147926\n51013891\n51015101\n51016891\n5102031987\n5102102293\n51021256\n51025102\n510251314\n51025184\n51028182\n51028tqd\n510313509\n5103161603\n51035103\n510375996\n51045104\n5105201314\n510520530\n51057630\n51058531\n51058955ab\n51060305\n5106231982\n510678999\n5106821988\n51069487\n510718818\n51071999a\n5107811982\n510825159\n51085108\n510907025\n51091250\n5.10919E+11\n510922830\n51095580\n5109749818\n51097699\n510984367\n5110231984\n511023wm\n51102891\n51105110\n51106219\n5111156711\n51113200\n51113212\n51115111\n5111611309\n51116891\n51121212\n511215949\n51122425\n51125112\n51131420\n51131421\n51131466\n511346153\n51135113\n5113693726\n5.11397E+12\n511398wq\n51145114\n5.11462E+11\n511511511\n5115211314\n511521531\n51152411\n51155115\n51165116\n5116553312\n51168168\n51168888\n51175117\n511752605\n51185118\n51189999\n5119221201\n51195119\n511a98a99\n51200125\n512014h13\n51203344\n51205120\n512059487\n512094552\n51212252\n51212891\n5121314512\n51213344\n5121390c\n51215121\n51215891\n512170280\n512201118\n512201978\n512201jl\n51221314\n5122222222\n5122324xcxmznan\n51225122\n5.12288E+11\n5123417782\n51234312161\n51234511\n5123455652\n51235123\n5.12353E+11\n51235623\n512369874\n5123g0223\n51242575\n51245124\n512472189\n5.12504E+11\n51251314\n512513518\n51254100\n51255125\n5125862a\n51260022\n51261314\n51263317\n51271314\n51274001\n51275127\n512760762\n512770526\n512787719\n5127960000\n51280865\n512841284\n51285128\n512864297\n51292761\n51296355\n51298900\n512sf888\n51302268\n5.13031E+11\n51305130\n51314200\n51314210\n51314211\n51314233\n51314241\n51314251\n51314475\n5131451314\n51314520\n51314521\n51314620\n51314888\n51314920\n51314921\n5132051320\n51323969\n51325132\n5133332321\n51334420\n51334421\n51335133\n513367138\n513403125\n513422772\n513435415\n51345134\n51346258\n51349251\n51350149\n51351735\n5135278zzx\n51355135\n5.13623E+11\n51363424\n51365136\n513655709\n513714681\n51375137\n51385138\n51389561\n51392010\n51396226\n513a988b\n513c4694\n51405140\n51411122\n51412790\n5141314520\n51415141\n514162499\n5142055hyb\n5142059487\n51421056480\n51422962\n51423851\n51425142\n51425618\n51442118\n51448888\n51450497\n514514514\n5145285453\n5.14625E+13\n51465146\n51465219\n51465648\n51471239\n51475147\n51477420\n514789632\n51485148\n514869120\n5149131207\n51492105\n514lanling\n51502396\n51505150\n51510011\n5.15114E+11\n51514124\n51515111\n5151515151\n51515509\n5151659987\n515166227\n515190528\n515201314\n5152151521\n51521740\n51525152\n51525282\n51525354\n5152535455\n5153147nj\n51535759\n51537826\n51537883\n51538186\n51542262\n51551101\n515515515\n51551818\n51552800\n51555155\n51561314\n515644226\n51565156\n51565818\n51565859gxgy\n51566396\n515711114\n51573268\n51575157\n51583042\n51584983\n51585000\n515850925\n51585158\n51586783\n51587721\n51597776\n515ao823\n516020407\n51603186\n51604591029\n5160498a\n51605160\n51607023\n51615161\n5161535235\n51617181\n5161718191\n51618161\n51625162\n516272bl\n51627384\n5164183135\n516419887\n51648537\n516509ccw\n516517518\n5.16519E+11\n51655165\n51661991\n51665166\n51665188\n51666888\n51667043\n51668899\n51675167\n5168000111\n51681467\n51685168\n51686578\n5168751687\n5.16889E+11\n51688888\n516888999\n51695169\n51699169\n516gddsxr\n51701415\n51702190\n51702971\n51705170\n51709394\n517126234\n51712665\n51712ed8\n51718431\n517215364\n51722b9f\n51725172\n51731036\n5173269358\n51733510116\n51735008\n51735173\n51736790\n5173753790\n51742306\n517423328\n51745174\n51746566\n517517onlitecha\n517518519\n51762667\n51762fd7\n51763123\n51763586\n51765176\n51770520\n51770880\n51771158yh\n517727930\n51775177\n51785178\n5178518GUO\n51785912\n51787000\n5179130851\n51793601\n51795179\n517nmg66\n517sumer\n51800000\n51800047\n51805180\n51807472\n51808888\n518114haideng\n51815181\n51816888\n518168888\n51825182\n518313601\n51834216\n51835183\n5.18426E+11\n51842920\n51845184\n5.18519E+11\n5185185918\n51851859418\n518518rich\n5185201314\n51854328\n51855185\n51859418\n5.18599E+11\n51865186\n51866139\n518666888\n5.18682E+11\n51870410\n518704457\n5187221595\n51874611\n51875187\n5187536yzl\n51876129\n51877018\n51879321\n51879956\n51881688\n51885166\n51885988\n51886827\n518878da\n5188851888\n5188888888\n51888999\n51889188\n51895188\n51895189\n5189851898\n51899518\n51900891\n51901028\n519026zhu\n51905190\n51905882\n5.19062E+11\n51912603\n519157320\n51917510\n51917530\n51918711\n51920218\n519218lt\n51922562a\n519519519\n519526006\n51963784\n51975197\n51985198\n51995199\n519958476\n519a17AD\n519a2591\n519a4b24\n51a67D60\n51chenggong\n51damimi\n51ee4528\n51eimbzuo308\n51f02707\n51F81458\n51fendou\n51hezhou\n51jbtm123\n51jiayou\n51kuaile\n51laogong\n51lo86ve\n51tianya\n51w06s65w\n51xingfu\n51zpfqmm\n520+1314!\n520.520.\n52000025\n520000jack\n520001314\n5200057wyl\n52001112\n5200189a\n52002500\n5.20026E+11\n520025cc\n52002636\n52002825\n52003344\n52003796\n52004551\n52005201\n52005300\n520071799\n52007735\n520100200\n52010081115\n520101314\n520110110\n520110119\n520111111\n5201114dd\n52011314\n52011333\n520113abcd\n52011520\n52011720\n520121314\n5201231314\n5.20123E+11\n520123520\n5.20124E+11\n520124411\n5201301314\n52013044\n52013088\n5201314!\n5201314*\n5201314**\n5201314***\n5201314++\n5201314001\n5201314007\n520131401\n52013140127\n5201314025\n52013140258\n520131410\n5201314111\n5201314119\n52013141213\n5.20131E+15\n5201314124\n520131413\n52013141413\n5201314147\n520131417\n5201314179\n520131418\n5201314184\n520131419\n52013141986\n52013141987\n52013142005\n52013142008\n52013142009\n52013142099\n520131421\n5201314222\n5201314240\n5201314241\n520131427\n520131428\n52013143\n520131433\n5201314333\n5201314369\n5201314512\n5201314518\n52013145188\n5201314520cpx\n5201314530\n5201314555\n5201314567\n520131457\n5201314587\n5201314588\n520131459\n52013146\n520131460\n520131461\n5201314666\n520131468\n5201314748\n520131476\n5201314770\n5201314775\n5201314777\n52013147788\n5201314786\n520131487\n5201314880\n5201314926\n5201314987\n5201314998\n5201314?\n5201314@\n5201314`\n5201314abcdefg\n5201314ac\n5201314AI\n5201314az\n5201314bb\n5201314bm\n5201314bobo\n5201314C\n5201314cc\n5201314chen\n5201314cj\n5201314cl\n5201314cq\n5201314cx\n5201314cy\n5201314dandan\n5201314dd\n5201314f\n5201314ff\n5201314gg\n5201314h\n5201314haha\n5201314han\n5201314hao\n5201314hf\n5201314hh\n5201314hj\n5201314hu\n5201314hua\n5201314hui\n5201314iloveyou\n5201314ily\n5201314j\n5201314jay\n5201314jia\n5201314jian\n5201314jiao\n5201314jie\n5201314jin\n5201314jing\n5201314jj\n5201314jun\n5201314k\n5201314kk\n5201314kyle\n5201314lan\n5201314lei\n5201314lg\n5201314lh\n5201314lin\n5201314liu\n5201314lj\n5201314lm\n5201314lp\n5201314lq\n5201314lu\n5201314lx\n5201314ly\n5201314lyj\n5201314lyy\n5201314m\n5201314mei\n5201314min\n5201314min15\n5201314nn\n5201314o\n5201314owen\n5201314p\n5201314pl\n5201314pp\n5201314qaz\n5201314qqq\n5201314qw\n5201314s\n5201314sj\n5201314SKY\n5201314ss\n5201314sy\n5201314t\n5201314tt\n5201314ty\n5201314vv\n5201314wen\n5201314WL\n5201314wq\n5201314wsz\n5201314ww\n5201314www\n5201314wy\n5201314x\n5201314xc\n5201314xi\n5201314xia\n5201314xiao\n5201314xin\n5201314xu\n5201314xx\n5201314xy\n5201314xyz\n5201314yes\n5201314ying\n5201314yl\n5201314ym\n5201314you\n5201314yuan\n5201314YXB\n5201314zc\n5201314zd\n5201314ZH\n5201314zhu\n5201314zj\n5201314zl\n5201314zw\n5201314zx\n5201314zxc\n5201314zxl\n5201314zy\n5201314zz\n52013154\n52013344\n5201413520\n52014174\n5201478963\n52015201\n52015205\n520168168\n5.20169E+11\n52016891\n520171314\n5201718195\n52017668\n52018183\n52019821121\n52019821128\n52019840106\n52019840310\n520198552\n5201986712\n5201986qcl..\n520198839\n52020150\n52020240\n52020330\n52020520\n52021314\n520216999\n520220728\n5202211982\n5202401314\n520251314\n52025202\n5202597758\n52030303\n520311314\n52031314\n5203141023\n52031800\n520331314\n52033333\n52033441314\n5.20334E+13\n520334499\n5203352033\n52035203\n52035413\n520365365\n520384756\n520412212\n52041314\n5204216117\n52042852\n520441314\n520446688\n5204505010\n52045204\n520456123\n52046385\n5204ever\n520500504\n520510530\n52051240\n52051314\n520515501\n52051770\n520520..\n5205200101\n520520025\n52052010\n520520106\n52052011\n52052013\n5.2052E+12\n52052020\n5205205200\n5.20521E+11\n520520520h\n520520521\n52052077\n52052088\n520520888\n52052099\n520520aa\n520520abc\n520520bb\n520520cc\n520520dd\n520520ll\n520520mm\n520520ok\n520520Qq\n520520qrl\n520520sy\n520520xm\n520520xx\n520520yxm520520\n5205211314\n520521520\n520521522\n5205221216\n5205221808\n52052252497\n52053000\n520530000\n52053011\n520530123\n520530510\n520530520\n5.20531E+11\n520530540\n520530550\n520530570\n52053088\n520530songjuan\n520530zq\n52053770\n52053880\n52054632\n52055205\n5205841314\n52059420\n52059487\n520599jy\n5206001314\n52060911\n520611314\n52061314\n520619624\n5206205620\n520625023\n520630520\n52063109\n52065206\n520709394\n52071314\n520718718\n520733032\n520740dl\n52075207\n520771314\n5207718864\n52077520\n52078664\n520790625\n52081314\n52081652\n52081831\n520820asd\n520821101\n520831116\n52085208\n52085721\n520881314\n520888888\n52089913\n52091314\n520920hg\n520925614\n520941314\n52094520\n52095209\n52095684\n520991314\n52099520\n5209991314\n5.21E+11\n52099999\n520AI1130\n520angel\n520apple\n520babamama\n520baobao\n520baobei\n520bb1314\n520benben\n520beyond\n520cc1314\n520chen88a\n520china\n520dandan\n520doudou\n520eason\n520feifei\n520forever\n520gibasama\n520guang\n520guilong\n520haoge\n520happy\n520hiyan\n520huang\n520iloveyou\n520jiajia\n520jiang\n520jingjing\n520jj1314\n520kangta\n520kitty\n520laogong\n520laopo\n520leilei\n520lemon\n520LIANG\n520lijuan\n520liujuan\n520ll1314\n520longlong\n520lss366\n520lyt1314\n520maomao\n520meimei\n520Mm1314\n520money\n520music\n520mylove\n520niuniu\n520PANDA\n520prince\n520qq1314\n520ronger520520\n520shmily\n520sijia\n520sunny\n520tianya\n520twins\n520weiwei\n520wenwen\n520wfwxtasox\n520xiang\n520xmyan\n520xx1314\n520yangyang\n520YANYAN\n520yanzi\n520yaoyao\n520yeyun\n520yikeai747\n520yingying\n520yinyongmin\n520yy1314\n520zhang\n520ZHANGting0331\n520ZHUZHU\n520zhyyy\n521+365=886\n521000000\n52100125\n521001314\n5210052100\n5210101314\n52101025\n521027000\n52103344\n5.21052E+11\n52110000\n5211003696\n52110055\n5211045001\n52110811\n52111111\n52111125\n52111312\n5211181314\n521123123\n52112500\n521125000\n521125123\n5.21126E+15\n52112566\n52112588\n52112599\n521125ok\n521125qewweq\n5211314.q\n52113141014\n521131411\n5211314110\n5211314125\n521131415\n5211314179\n5211314184\n52113142\n521131425\n5211314316\n52113144\n52113145\n521131456\n5211314584\n521131459\n52113146\n521131466\n52113147\n521131477\n52113148\n5211314886\n5211314888\n52113149\n521131499\n5211314999\n5211314aa\n5211314abc\n5211314ai\n5211314asd\n5211314fei\n5211314iou\n5211314l\n5211314li\n5211314ll\n5211314long\n5211314love\n5211314mm\n5211314nina\n5211314q\n5211314qq\n5211314s\n5211314w\n5211314x\n5211314y\n5211314yang\n5211314yy\n5211314z\n52113344\n52115211\n521191314\n52120b5f\n52120yeah\n521211314\n5212121241\n52121241\n52121314\n521214A7\n52121921\n521221314\n52123093\n521231314\n52123456\n52123490\n52125212\n52125786\n52126531106\n52131314\n52131400\n52131411\n52131425\n521314520\n5.21315E+11\n52131488\n52131499\n5213251980\n52133440\n52133441314\n5213344521\n5.21334E+13\n5213344587\n5213352133\n52135213\n521365886\n521369852\n521373255\n52138988\n5214125le\n52141314\n52141581\n52143657\n52144593\n52145214\n5214551834\n5214752147\n5214ydly\n52151314\n5215171956\n5215190000\n521521..\n52152100\n521521000\n52152111\n521521119\n521521125\n52152121\n521521241\n52152152\n521521520\n5215215210\n5.21522E+14\n5215215241\n5215217758\n52152188\n52152199\n521521999\n521521aa\n521521abc\n521521bb\n521521li\n521521nn\n521521qq\n521521tt\n521522523\n5215338821\n52154032\n52154188\n52155215\n52155441\n5215841314\n52158540\n52159421\n52159487\n52161314\n52161395\n52165216\n52165496\n52166632\n5216678614\n52168168\n5216852168\n521704343\n52171314\n52171725\n52173310\n521741748\n52175217\n521771314\n5217752177\n5217758258\n5217758991\n5217788521\n521780228\n5217864059\n52181307\n52181314\n521815122\n52185218\n52185645\n5218633123\n521881314\n5218852188\n52189913\n52191314\n52192332\n52193730\n5219381qw\n52195219\n52196141\n5219840706\n521984626\n521991314\n5219952199\n5219966a\n52199999\n52199yaoming00\n521babamama\n521baobao\n521baobei\n521benben\n521by1714\n521china\n521forever\n521iloveyou\n521jiajia\n521jingjing\n521jjlcjjlc\n521laogong\n521liang\n521love521\n521loveu\n521philips\n521qq521\n521shshdlh\n521shuang\n521tianya\n521w521w\n521weiwei\n521WOAIni\n521wohenhao\n521yanzi\n521zhang\n52201314\n52202244\n52205220\n522085052\n52211314\n522123456\n522131456\n52215221\n52215790\n52216891\n52218470\n52221314\n52222222\n522275982\n5222846460\n52231314\n52233587\n52235223\n52237602\n52245224\n5224578r\n5.22464E+13\n52251314\n522520we\n522522036\n522522522\n52255225\n5225562814\n52260299\n52261314\n52262266\n52265226\n52271314\n52275227\n52277278\n5228046547\n52281314\n52282199\n522832555\n52285228\n5228elva\n52290503\n52291314\n52292802\n52293336\n52295229\n522991600\n522e1711\n522E717e\n52300358\n52301314\n52304b41\n52305230\n52306Laojing\n52307081\n5230fever\n5231011sj\n523101314\n52311314\n523119520\n52315231\n52316342\n52321314\n52325232\n52331147\n52331229\n523324602\n52333325\n52333333\n52333975\n52335233\n5233854328\n52338943\n52341314\n52345234\n523523swjswj\n5235361225\n52354235\n52354612\n52355067\n52355235\n5235820539\n52358888\n52361314\n52365236\n52367575\n5236782135\n523690116\n5236987410\n523701314\n52371314\n52371519\n52375237\n52380826\n52381314\n52385238\n52386686\n523904957\n52391314\n523E3c57\n523yy1296\n52401314\n52405240\n52408834\n524101314\n52411314\n52415241\n52420552\n52424808\n52425242\n52429739\n52431314\n52433901\n52435243\n52441314\n5244469e\n52445244\n524473514\n524499369\n52451314\n524521326\n524524524\n52454525\n524611378\n52461314\n52461616a\n52465246\n52467222\n52471314\n52473344\n52475247\n52481388\n5248x117\n52495249\n524954358\n524A2de1\n524F1f16\n524liuyimin\n52501314\n52505250\n52510022\n52511314\n52511532\n5251452514\n52515125\n52515251\n5.25189E+11\n525200kk\n52520623\n52521313\n52521314\n52522199\n52524567\n525247123\n52525200\n525252137\n5252525~~\n52531314\n52532485\n525331314\n525333060\n52533902\n52534677\n52535253\n52538776\n52541113\n52541314\n5254152541\n52544518\n52545254\n52545658\n52545856\n5254752547\n52551314\n52551401\n525525525\n52555255\n52555525\n52555683\n52557984\n525582475\n52560603\n52561314\n52562800\n52564588\n52565256\n52565854\n52567792\n52573344\n52575257\n52575258\n52575725\n52575859\n52576418\n5257fish\n52581314\n52583344\n52585257\n52585258\n52585665wx\n52585FA9\n525881314\n5258852588\n52591314\n52595259\n52599999\n525baobao\n526000246\n52601314\n52605260\n52607657\n526077561\n52610000\n526101314\n52611314\n52613344\n52615261\n526153256\n526160836\n52621314\n52625262\n52630255\n52631314\n526331314\n52634926\n52635263\n52636325\n5.26385E+13\n52639983\n52641314\n52645264\n52645905\n5.26601E+11\n52660110\n52661314\n52664248\n52665166\n52665266\n52666625\n52671314\n52675267\n52678865byy\n52681314\n526814000\n52682916\n52685268\n526901314\n52691314\n52695269\n52695344\n5269565339\n527011xm\n52701314\n527052444\n52705270\n52706666\n52708791\n52709394\n52711314\n5271250766\n52713364\n52715271\n52720606\n52721314\n52725272\n52731314\n5273152731\n52735273\n52740346\n5274299151\n52744223\n52745375\n52746431awz\n5274810490\n5.27577E+13\n52758109473\n52761314\n52765276\n527668ytr\n52773344\n52775277\n5277752777\n52777725\n52777777\n527778367\n527811124\n52781314\n52785278\n52788725\n52791314\n52795279\n52795360\n527qazxcv\n527zl622\n52800195\n52800917\n52801314\n52804594ljw\n52805280\n528101649\n52815281\n52821314\n52823492\n528359AB\n52852852\n52858BSB\n52861314\n5.2871E+11\n52871314\n52872557\n52875287\n52881314\n52885233\n52885288\n52888735\n52888825\n5288a5299\n52893919\n52895289\n528loveyou\n528niaiwo\n52900csq\n52901314\n52905290\n52909013579\n52911314\n5291152911\n529150762\n52915291\n52919966\n52920403\n52921234\n52921314\n52930839\n52931314\n52939193\n529436332\n529491314\n52951314\n529529529\n52953667\n52955332\n52959902\n52961314\n52965296\n52971314\n52971987\n52975297\n52981118\n529821218\n529832517\n52985298\n52991314\n52995299\n52997854limy\n52997900\n529990098\n52999925\n52999999\n529A402e\n52A1389e\n52ae30e0\n52anjiacui0429\n52babamama\n52baby1314\n52banana\n52baobao\n52baobei\n52BB1314\n52c55941\n52C761e0\n52c901AA\n52cc1314\n52crystal\n52dandan\n52DC116d\n52dc29c5\n52dd1314\n52duoduo\n52dw1314\n52E03353\n52e56273\n52EA1586\n52english\n52f43dc0\n52f9153a\n52fanbing\n52feifei\n52ff1314\n52gg1314\n52hh1314\n52huangjianying\n52jessica1314\n52jiajia\n52jingjing\n52jinjin\n52jj1314\n52jtl35748\n52junjun\n52kou3344\n52lf1314\n52lhz1314\n52linfeng\n52ling1314\n52ling320\n52lingling\n52linlin\n52ll1314\n52llyyll25\n52lp1314\n52maomao\n52miaomiao\n52mjingj\n52ml1314\n52mm1314\n52muland\n52myself\n52nannan\n52ni1314\n52qq1314\n52rukawa\n52selina\n52shanshan\n52shiwen\n52sj1314\n52sophia\n52sp1314\n52ss1314\n52ta1314\n52tianya\n52tt1314\n52tythsn\n52tyxbly77\n52vooshow\n52weiwei\n52wenjun\n52wenwen\n52woziji\n52ww1314\n52xiaobao\n52xiaobenjing\n52xiaojing\n52xiaoxiao\n52xiaoyan\n52xiaoyu\n52xingji\n52xinxin\n52xw3344\n52XX1314\n52xzf123\n52yanfei520\n52yangyang\n52yanyan\n52yuanyuan\n52yusiyuan\n52yy1314\n52yy52yy\n52zhoujielun\n52zhuzhu\n52zj1314\n53000110\n530012009\n5300782213\n5301103026\n53014248\n5301433d\n53015301\n5301671862\n53019841120\n53025184\n530315222\n5303520520\n53035303\n5303658752\n530493223\n5305201314\n530520510\n53052051088\n5.30521E+11\n530520ZH\n530530520\n530530530\n53055787\n53071413\n53072882\n5.30731E+11\n53080707\n53085308\n53098614\n5309910asd\n530bbcom\n530c126d\n53105310\n531090kk\n53115311\n53118776\n53120000\n53122588\n53123425\n53135313\n531414586\n53152000\n5.31521E+11\n531531531\n53165316\n5316731810\n53173053\n53175317\n53180960\n53185318\n531913f7\n53195319\n531bb111\n531bb123\n531s521w\n53201314\n53205320\n53207778\n53208966\n53211899\n53212765\n5.32147E+11\n53222142\n53222357\n53224272\n532248109\n53225322\n5322ABCD\n53230802\n5323261986\n53235323\n532368010\n532410985\n532412026\n532425779\n53245324\n532489pbj\n5.32503E+11\n532532532\n53265326\n53275327\n53285328\n532864910\n53307994\n53321901\n53325332\n5332898995\n533298645\n5334029101\n5.33422E+12\n53344521\n533500aaa\n533500abc\n533500bbb\n5335201314\n5335211314\n533533533\n53355335\n533637172\n53371783\n53371808\n53371809\n53371912\n53372341\n53372667\n53372752\n53372849\n53372908\n53372960\n53372964\n53373101\n53373255\n53373258\n53373286\n53373333\n53373584\n53373784\n53374312\n53374446\n53374616\n53374794\n53374881\n53374889\n53375134\n53375178\n5.33752E+11\n53375337\n53375381\n53377220\n53378646\n53391466\n534131421\n53415758\n53425dbb\n534287124\n53438710\n53438885\n534476153\n534476153wan\n5345201314\n5345211314\n5345381213\n53478792\n53505F45\n53506235\n5351221115\n53516165\n53517230\n535172306\n53517231\n53517615\n535176165\n535201314\n5352053520\n53521783\n53521809\n53522341\n53523018\n53523258\n53523333\n53523492\n53523587\n535236578\n53523694\n53523784\n53524057\n53524616\n53524983\n53524984\n53525134\n53525178\n53525235\n53525352\n53526884\n53529699\n5.35353E+11\n53535353\n5353535353\n5353565365\n53535976\n53541234\n53541314\n53542306\n53542313\n53542316\n53543388\n53545354\n53545556\n535456789\n53546054\n5.35461E+11\n5354709394\n5354769394\n53547788\n53547981\n5354798183\n53548089\n53549394\n53549714\n53563490\n53567981\n53568195\n535782406\n53580529\n53585358\n535897932\n5358979323\n5.35898E+12\n5.35898E+14\n53591092\n53593534\n53605360\n53607573\n53608579\n536182947\n5361889jay\n53620436\n53625362\n53635363\n53647110\n536536536\n53665366\n53682470\n536trapezium557\n5371920100\n53719520\n5371953719\n53720246\n5372570609\n5375129993\n537612911\n53765247\n53768040\n53770520\n5377053770\n5377053880\n53770880\n53770cvff\n5377498a\n53785378\n53785878\n537951456\n53798694\n537f2779\n53801314\n538100767\n538275800\n53828291\n53835383\n53845382\n5384765xps\n53855237\n5386391014\n53878664\n53883588!@#\n53885388\n5391027jl\n5391161888\n539259500\n53933018\n53935393\n53974286\n539898468\n53998478\n539F4fbc\n53c308B8\n53cf42D8\n53D24bac\n53d64E82\n53dc73e6\n53E13826\n53eb0201\n54000045\n54001224\n54005200\n540053569\n54005400\n540065033\n54007007\n54007008\n540072009\n54007521\n5400754007\n54010263\n5401161437\n54015401\n54021809\n54031050\n540314wyy\n540324linyu\n54035181\n54035403\n54037110\n540540540\n540560530\n5.4063E+11\n54075407\n540765808\n5407690681\n54080452\n54085408\n5408804512\n540880452\n54088088\n5408854088\n54091500\n541015qf\n54102013\n54102632\n54105410\n54110120\n54110378\n5411054110\n54114500\n5411536888\n54115411\n54115412\n5.41205E+11\n54123456\n54125412\n54130jpe\n54131420\n54131421\n54135413\n541430752\n54145939\n54148991\n5.41508E+11\n5415192h\n54152100\n541541541\n54155415\n541634d0\n54165416\n541666liu\n5416yans\n54171745\n54175417\n54178800\n5.41789E+11\n54178888\n541788abc\n54181452a\n54187419\n5418792190\n54188000\n54188123\n5418814512\n5418814521\n5418814522\n5418814524\n5418818452\n54188188\n5418818845\n54188188452\n54188202\n54188452\n54188520\n54188521\n5418854188wang\n5418854199\n5418858s\n5.41889E+11\n54188888\n541888888\n5418894188\n54188tan\n5418954189\n54190508\n54192796\n54195419\n5419710725\n5419731108\n54198201\n54199181\n5419954199\n54199999\n54201314\n5420281983\n54203tim\n54205420\n54209350\n54210424\n5421113love\n54211314\n54212555\n54215027\n54215421\n542211f4\n542228125\n54223862\n54225422\n54227684\n54231106\n54235423\n5423619241\n54242006\n54246867\n54255425\n54256042\n54262517\n542638aa\n54275427\n54278885\n54283098\n54285428\n5428824533\n5428854288\n542912724\n54300310\n5430137e\n54305430\n54315431\n543176709\n54318790\n543189939\n5432000621\n54321000\n5432109876\n54321123\n54321521\n54321678\n543216789\n54321789\n54321968\n543219876\n54321abc\n54321abcde\n54321coco\n54321shshdlh\n54321trewq\n5432821379\n54331077\n543318520\n54335210\n54335233\n54335433\n5433sad520\n54354241\n543543543\n54360236\n54365436\n54372152\n54383845\n54385438\n543859438\n54387514\n54387514mn\n5.43894E+15\n54389438\n543940251\n543986908\n54412579\n54415441\n544257999\n54455445\n5.44593E+11\n54473806\n544820384\n54483792\n544843569\n544849080\n54490265\n54498224\n544A547d\n5450119zhao\n54505450\n545102325\n54513365\n5.45E+54\n54515451\n545155207\n54520628\n5452154521\n54525452\n54525658\n5452690869\n54533041\n545349229\n545352123\n54535251\n54535453\n545388124\n5453dlong\n54543168\n545511854\n54551360\n545524706\n545545999\n545546549\n54555455\n54560204\n54565852\n54568183\n54575457\n54578326\n545791240\n54585458\n54585652\n54595459\n54597026\n545dhro0\n54600421wo\n54601314\n54603092\n54603101\n54603258\n54603333\n54605460\n5460864652\n54611218\n54615461\n54624741\n54629166\n54631111\n5463354633\n54635463\n546372819\n5463850zxc\n54645464\n54646432\n54653508\n54654454\n54654678\n546579lws\n54665466\n54675467\n54679821\n54685468\n546B703f\n546tertwer\n54705470\n54705680\n54710305\n547132549\n54715471\n54724833\n54726999\n54735473\n547395081\n54741789\n54742639\n5475219826\n547547547\n547548847\n547622319\n54765476\n547730356\n547750251\n54775477\n547766118\n54777745\n5477887tang\n54780206\n54781225789\n54781460\n547851212\n54785478\n5478963210\n54795479\n547c6B56\n547f6A39\n54805139\n548111300\n54814490\n54815481\n54815792\n54820912\n54824800\n54838392\n5483o3596\n548548548\n5.49E+10\n5486254862\n54864788\n548721457\n54874959\n54875487\n54885488\n54888820\n54890256\n549149662\n5492173htf\n549313b7\n5494962464\n54952877\n54955495\n549601ip\n54980126\n54985498\n549861973\n54993921\n54995499\n54A24d64\n54A32497\n54a3lg1230\n54A50905\n54A633ee\n54aiak47\n54F153a3\n54f32c3a\n54f553E9\n54guihua\n54hacker\n54lighte\n54minlei\n54ni88mm\n54sOphia\n54tiancai\n54vrvnet\n54wangrh\n54yhz1980\n54zhangli\n5500140047\n55005500\n5501220.ywj\n55025502\n55035503\n55040113\n550550550\n55055505\n55055537\n55059525\n55059857\n55060761\n55065506\n550658abc\n55070829\n55070918\n5.5074E+13\n55076593\n55082360\n55084289\n55103842\n55105510\n55115511\n55116688\n551228727\n5512288a\n55123456\n55125512\n5513198753\n55133441\n55135513\n551378921\n55138758\n55145514\n55152!@#\n5515456123\n5515456321\n5515456987\n55155515\n5516316hbx\n55165516\n551677899\n55175517\n55185518\n55192062\n5519518881\n551980fantasy\n551D7f46\n55205520\n552100ef\n55215521\n552168ss\n55220088\n55221100\n55225522\n55228800\n55228866\n5523153hjh\n55231990\n55235523\n5523808hat\n55238848\n55244202\n5525530569\n55255525\n55255630\n55256636\n55257226588\n55257714\n55259317\n55262828\n55274290\n55285528\n5529765a\n55300328\n55305530\n5530802830\n55310418\n55312036\n5531363hrr\n55315531\n553205187\n55320595\n553242420\n55325532\n55327383\n55329548\n55335533\n55351292\n553521451\n553553553\n553589486\n553634540haik\n5537226935\n55382927\n55392020\n553a7a85\n5540739e\n5542015a\n55425618\n55435592\n55441177\n55443322\n55445544\n5544ool9l3l\n55451972\n554528096\n55453155\n55455545\n55465546\n55500127\n55500222\n55500694\n555111666\n555111888\n555123123\n55512345\n555123456\n55512633\n55513427\n555156651\n55518741\n555201314\n555222000\n555222111\n555333111\n55539713\n555472ee\n55553333\n55553352\n555548080\n55555123\n55555168\n5.55552E+12\n55555221\n5555522222\n555554444\n55555551\n555555552\n5555555551\n5.55556E+11\n5.55556E+12\n5.55556E+15\n5.55556E+19\n55555556\n55555558\n55555566\n555555just\n55555666\n55555678\n5555577777\n55555888\n5555599999\n55555WOaiNI\n555611ltj\n55565556\n55565655\n55565758\n555666000\n55566678\n555666ok\n55568283\n55570010\n55570643\n55571085\n555777888\n555777999\n55581241\n55585558\n555888666\n555888999\n5558ji111\n55595559\n555C3557\n555ii882\n5560254zcl\n5.56084E+11\n556089cici\n55621162\n55625562\n55627685\n55633030\n55637172\n55644532532\n5.56518E+11\n55657677\n55660000\n55661220\n55661234\n55661314\n556613abc\n5566183m2m\n55661929\n55661977\n55662233\n55663322\n55663344\n55665656\n55666655\n55667799\n556688997\n556689757\n55669139\n55669363\n55669988\n5566tony\n55675527\n55677852\n55685568\n55709394\n55710309\n55710349\n5572829916\n55732508\n55757592\n55775577\n55794225\n557D741c\n558015839\n55815062000\n55823855\n55835583\n55847000\n55852283\n55862488\n55865622\n55880126\n55880817\n55882519\n55884289\n55885588\n55886699\n5588687987\n55887799\n5588922119\n55889966\n5588hnhn\n55897903\n558e2bf2\n55923969\n5592462501\n55925592\n55930482\n55940086\n55940086mellisa\n559412anan\n55953694\n55961487\n55982100\n55985598\n55986678\n5599433ysz\n55995599\n55AA4c0a\n55C93838\n55cb439c\n55cc2f35\n55d608da\n55F47841\n55f90da6\n55xiaoxiao\n56003337\n5.60102E+11\n5.60113E+11\n5602253227\n5.60306E+11\n56035603\n56036447\n56036495\n56055415\n56055689\n560560560\n560586349\n56059786\n56061663\n5606339zxc\n56077133\n5608421273\n56085608\n560922ll\n56092a5e\n560b2ddd\n56105610\n56106826\n561103lxs\n56111111\n56115382\n56115454\n56115611\n5612131420\n56122988\n5612607890\n56127795\n561314520\n56132320\n56135613\n561401huhan\n561561561\n56164489\n56165353\n56175821\n56185618\n56193481\n5619489xlt\n56195619\n561969048\n56197538\n56201314\n56205487\n56205620\n56205948700\n562061434\n56211533\n56215621\n562159487\n5622059487\n56224966\n56225622\n5623331liu\n56234226\n56235623\n5.62365E+13\n56242762\n562508662\n56251136\n56262020\n56264393\n56265626\n56267174\n562755356\n5627568OOO\n5627657zzz\n56283586\n56285628\n56293460\n562B0441\n56300085\n563001602\n56300782\n56301881\n56301906\n56304688\n56305630\n563084412\n56312705\n56318464\n563206515\n5632156321\n5632240qq\n56325632\n56327084\n56327121\n56330337\n563349yy\n56335633\n56344244\n56348331\n56351022\n563563563\n5.63588E+11\n56371973\n56373995\n56375799\n56381071\n563818945\n56388151\n563889751\n564000070\n564019949\n56404817\n56405164\n56405731\n56412162\n56415977\n5642059487\n564219667\n5642282330\n56423018\n564335520\n5.64336E+11\n56443861\n56455645\n564564564\n564566413\n564586194\n56461b11\n564636472\n56465646\n56473829\n5647382910\n56475492\n564862766\n5649335111\n56504218\n56509680117\n565109212\n56514531\n56520053\n5652056520\n565331241\n565348363\n56535653\n56545852\n56551233\n56551410\n5.65536E+13\n56555170\n56555655\n56559225\n56561234\n56561976\n56562323\n56562905\n56563326ne\n56565566\n56565666\n565656abc\n565656zmh\n56567401\n56567800\n56568989\n565755177\n56575859\n56575859yu\n565774977\n56578284\n56585658\n56586156a\n56588362351\n56595659\n56597189\n56598710\n56604110\n56612260\n56612270\n56612305\n56618285\n5662338899\n56623897\n56628584\n566330613\n56635989\n56638617\n5.66505E+13\n5665211314\n56652154536\n56655665\n566566566\n56657123\n566d123F\n566e3E8A\n56711272\n56715671\n56720905\n56725392\n56730428\n56730670\n56736853\n56738002\n56740205\n56756610\n567567567\n56757715\n56761049\n56762923\n56769744\n56777f1d\n56780000\n56784321\n5678493021\n56785678000\n567856789\n56786789\n56788765\n56788@56788@\n56789000\n56789012\n5.67891E+11\n56789123\n5678912345\n567894321\n5678998765\n56789999\n5678abcd\n56798183\n567C08aa\n567F6dd1\n567jurong\n56805311\n56805680\n56811732712\n56812b49\n56817431743\n568183hs\n56818488\n568187329\n56819187\n5682059487\n56824760\n56824e4d\n56825682\n56829517\n568303814\n56835683\n5.68357E+11\n568367415\n56845311\n56846857\n56862998\n56865481\n56871982\n56874520\n56875687\n56882533\n56885121\n56885688\n56886107\n568864737\n56888888\n568888aaa\n56889214\n5688tcom\n568923147\n56892fc7\n56895689\n568a3041982\n568a56bd\n568E66cd\n56910939\n56913480\n56925692\n569309479\n56932918\n56952776\n56953407\n56954178\n569569569\n5696124843\n56965678\n56972364\n56973351\n56974470\n56978095\n56981887\n56985271\n56985698\n5698646123\n56987727\n56990250\n56995888\n56B174e0\n56b46296\n56b55ccd\n56C87f93\n56D2496e\n56DA546e\n56E401fd\n56rewtwe\n56yang##@@\n57000792\n5701062152\n5702070121\n57028493\n57036725\n57041521\n5704cike251\n57076908\n57087545\n571111galaxy\n5711377012\n57115615\n571156222\n57115668\n57123002\n57124ADB\n57129036\n57135713\n57154331\n57156951\n571571571\n57163873\n57165716\n57170893\n57173781\n57181347\n571836571836mmnn\n57185718\n5718666666\n57188616\n57195719\n571960117\n57196013\n57199692\n571d6D16\n572060777\n572133jxl\n57215504\n572220300\n57223668\n57224954\n57230778\n57251314\n57251979\n57254120\n57255257\n57260706\n57275727\n57285728\n5.72929E+12\n57314125\n57320839\n57332600\n573415674\n57355735\n5735764alice\n57372822\n57373673\n5737621858\n57381155\n57391946\n57402A05\n57405740\n574110abc\n5741164358\n574139574\n57415547\n57415741\n5742521yang\n57425962\n57435343\n5744983ban\n57452597\n5746936688\n57470342\n57482548\n574863975\n574875b6\n57490561\n574922988\n57510325\n57511701\n57516202\n57516671\n575201314\n57521125\n5754432303\n57545754\n575675123\n5757124520\n57575617\n57575757\n5757575757\n57575777\n575794124\n5758456031\n57585758\n575859123\n57588286\n57589462\n57590225\n57590367\n57592780\n57595153\n57595350\n57596965\n575b6711\n57605760\n57608385\n57625762\n57630718\n57634530\n57645910\n576545551\n57674551\n57684066\n57684233\n57688225\n57690726\n57698742\n57730301\n57730712\n5773821982\n57747141\n57751179\n57754888\n57755775\n57755801\n5775740yy\n577577577\n5775777758\n57768843wr15153\n57775777\n578111578\n57825179\n57826671\n57832761\n57845784\n57845866\n57849616q\n578578578\n57865786\n5786831024\n57877506\n578814d1\n57885788\n57885924\n578884139\n578906300\n578910zj\n57891530\n57895789\n578b578b\n579180001\n57921920\n579252d4\n5.7935E+11\n579395571\n57955631\n579579579\n57957964\n57995203\n57A04e5f\n57b073a5\n57BB7af8\n57C2639e\n57c305f8\n57c40CB0\n57cb4342\n57cc20f8\n57cd4d43\n57F07f87\n57F2581d\n57F26165\n57FC0c2f\n58005800\n58009877\n58012022\n58015801\n580179601\n58020503\n5802301314\n580231lan\n58024533\n58032337\n58046799\n580580580\n58059108\n58061AAD\n5.80764E+11\n58076857\n580b45DB\n581007tianya\n58102177\n58105810\n5.81058E+11\n58106204\n58115619\n58117574\n58121122\n58123149\n58123456\n58125812\n5.81264E+11\n58132134\n58150489\n58151278\n581545900\n58161573\n58165816\n58166666\n5816967203\n58172076\n58185818\n58192523\n58195819\n58196227\n581e773f\n582004662\n58201314\n58202020\n58205820\n5820611321\n582061314\n58211314\n58212002\n58214383\n58215821\n58216263\n5821972jany\n58224910\n58225822\n58232149\n582352abc\n58235333\n58235823\n582467913\n582471693\n58249621\n58257859\n58260235\n5827165270\n58287899\n58288888\n582910734\n58292341\n58294801\n58296420fa\n582a4336\n5830801228hq\n58310432\n58315831\n58325442\n58326066\n583262332\n58332120\n58335833\n58335cd3\n58338904\n583528123\n5835946148123#\n58365836\n58373639\n5837861w\n58389388\n58393451\n58395139\n58397324\n58398605\n584026898\n58404551\n58405817\n58405840\n584102389\n58411zdt0\n5841211314\n584121314\n5841314121\n5841314179\n58413142\n5841314200\n5841314210\n58413142121\n5841314240\n5841314241\n584131425\n58413142659\n584131427\n584131430\n5841314320\n5841314321\n584131452\n58413145200\n5841314526\n5841314527\n5841314620\n5841314621\n5841314720\n5841314921\n58413520\n5841392010\n58413921\n5841568rj\n5841714521\n58420184\n584203344\n584210Xy\n58421184\n58421314\n584213344\n58423105\n58424657\n584250988\n584261314\n584271314\n58431629\n58432552\n5843331314\n584334420\n58437012\n58443242\n58445315\n58451211314\n5845121314\n58451271314\n58451314520\n58451320\n5845132QQ\n584520..\n58452000\n5845200927\n58452011\n584520123\n58452013\n5.8452E+12\n584520184\n58452033\n58452034\n584520520\n584520530\n58452099\n584520aaa\n584520qq\n58452100\n58452113\n5.84521E+13\n5845211714\n584521184\n58452122\n584521314\n584521521\n5.84522E+11\n58452199\n584521abc\n5845221314\n5845231314\n5845241314\n5845261314\n5845271314\n584528668\n5845334420\n5845334421\n584561488\n58461001\n58462418\n58464522\n58465846\n584702yuzhe\n584737420\n5847374520\n5847374521\n58475961\n5847758521\n58477904\n5848158481\n5849201314\n58498401\n584anyyy\n584w521x\n58502002\n58505689\n58506221\n5851622900\n58517262\n58519700\n58525456\n58525852\n58531816\n58535853\n58541240\n58545256\n58545652\n5855120628\n58555855\n58565254\n58565856\n58566396\n585719c1\n58575857\n58579935\n58580015\n58580091m\n58581204\n58581230\n58581283\n58585588\n58585656\n58585888\n58586845\n58587758\n58589191\n58590383\n58591510\n58595859\n585E0baf\n58604413\n58605860\n5860o110\n58618493\n5862255-4234\n58625780\n58639031\n58641314520\n58645001\n5865212123\n58657901\n586586586\n58661970\n58664505\n58665866\n58665894\n58677322\n5868025myt\n58685868\n58687888\n5868788898\n58687898\n5869109319\n58694348\n58695869\n58696126\n58698802\n58699996\n58700794\n58703369\n58704799w\n5871005683\n5871258712\n58715871\n58729368\n5872kk8l\n58732245\n58732475s\n587412369\n58745905\n58748177\n587622610\n58765876\n58766299\n58769864321\n58770978\n587865533\n58788362_\n58789441\n58795879\n5880533fsx\n5.88115E+11\n58812000\n58813199\n58815881\n58817082\n588174zxc\n588183wxl\n58818858\n588271325\n588288m8\n58829862\n58833931\n58838080\n58846120\n58855885\n58858435\n588620898\n58862889lhl\n588688988\n5887415157\n58874952\n58875389\n58878828\n58879576\n58885888\n5888888888\n58899552\n588c6064\n588e50aa\n58901204\n58902723\n58906395\n58909595\n58915891\n589589589\n589631785\n58965896\n589700md\n58973448\n58974090\n5898383608\n58985898\n58986900\n58989898\n58990990\n58995588\n58995899\n58996218\n58AF2538\n58E42737\n58ED79a0\n58f11a23\n58g56kwok\n58n68mkc\n59001172\n59003567\n590313800\n59044569\n59083872\n590907li\n590F61eb\n59105910\n59112911\n59115911\n59116357\n591168330\n59118434\n5911902ymt\n59119965\n59120042\n59121026\n59121159854\n5912242002\n591387016\n59163931\n59166276\n591687441\n59174209\n59182128\n59185918\n5.91859E+11\n59188035\n59188888\n59189850\n59190093\n59190633\n59201314\n59205920\n59211314\n592130924\n5921334495\n59215921\n5921mmmm\n59221699\n5922699645\n5923078164\n59245657\n59263834\n59285928\n59287668\n592997li\n593156075\n5.933E+11\n59338971\n593419875\n593878383\n59389690\n59392465\n593c54f7\n5941201314\n59412529\n594131420\n59413288\n59415941\n5941859418\n5.94189E+11\n59419415\n59419863\n59420520\n5942059420\n59420chihu\n594211314\n5942159421\n59423020\n59436898\n59445079\n59451314\n59451941\n59452088\n59455945\n59456300\n59459376\n594824138\n59483422ly\n59484711\n59485948\n59495896\n59496215\n594E48e2\n594F6f2f\n594lyq617\n594yanbaby\n594yangyu\n5951171820\n595189100\n595201314\n595207641\n595337909\n59541fb2\n595520024\n595592968\n59565956\n59565964\n59567308\n5956999999\n59579167\n59585756\n5958575654\n59595599\n595955999\n59602.17843.\n59615961\n5962072904\n59624531\n59630603\n596388wang\n59642538\n59648988\n596596596\n59666173\n59671386\n5968122\n59685968\n5968780c\n59693869\n59695969\n59697989\n596a5b17\n59704008\n59705970\n59716602\n597461b0\n59746308\n59753098\n5.97743E+11\n59775977\n597824657\n597927856\n59796229\n59803900\n59819714\n598240zy\n5984136720\n59848401FF\n59848570\n5984tama\n59854602\n598598598\n59865986\n5986915abc\n59875987\n59885988\n5989109jsc\n59895989\n5990419109\n5992514k\n59928126\n59955995\n5999309a\n59995953\n59995999\n599wj9599\n59A45e14\n59b4440c\n59B82d26\n59bb0283\n59BE66f1\n59C8244b\n59CD575e\n59CF788b\n59clhydb\n59E65ed8\n59e80005\n59F77e55\n5A014830\n5A0B15fd\n5A1207eb\n5A2A4ac1\n5a3f44BB\n5a54456d\n5a55asd4r2\n5a7251D8\n5A810b85\n5aa71096\n5aa900DC\n5AAE6766\n5AB076bc\n5ab96EB9\n5abc2112\n5AC250ec\n5AC84221\n5ad74856\n5ade5fd7\n5AE17713\n5afd5d32\n5Agc2U864A\n5Ahc2U864A\n5Ahc2U874A\n5Ahc2U875A\n5Ahc2V875A\n5Ahc2V875z\n5am0eqxQIC\n5an0eqwQHC\n5an0eqwQIC\n5an0eqxQIC\n5Atc1U885q\n5auxksySJD\n5b135163\n5b1c2A4E\n5b202e86\n5B2813f3\n5b32f3a7\n5B49671e\n5b6561A3\n5b735157\n5b78681E\n5b793f52\n5b8f72D1\n5BD922fb\n5bdc1896\n5BDE7d04\n5bfd4B83\n5Bhc2V875z\n5Bic2V875z\n5Bid2V875y\n5Bid2V875z\n5Bid2W875y\n5Bid2W885y\n5Bid2W985y\n5bl0dryRJD\n5bm0drxRIC\n5bm0drxRID\n5bm0drxRJD\n5bm0erxQIC\n5bt2itzTKE\n5bt2jtzTJE\n5bt2jtzTKE\n5Btd1U885q\n5Btd1V885q\n5Btd1V986p\n5bu2jsySJE\n5bu2jsyTJE\n5bu2jtyTJE\n5bu2jtzTJE\n5bu2zsdGCW\n5buxjsySJE\n5buxksySJD\n5buxksySJE\n5buzhidao\n5c1329eb\n5C420292\n5C457d83\n5C55485c\n5c570B2A\n5C5D3481\n5C617fed\n5C6572f8\n5C9127e3\n5c912FC8\n5C991535\n5c9a2BB7\n5c9b6dcb\n5CB75517\n5ccd46B8\n5CCE3a37\n5CE20949\n5ce33D79\n5cf71711dg5\n5Ctd1W986p\n5Ctd1W996o\n5Ctd1W996p\n5D07215d\n5D475435\n5d4a1472\n5D5D4866\n5D713a7a\n5d776a54\n5D7E179e\n5D7E315a\n5D7E3aa2\n5d830770\n5d83364B\n5d8e462c\n5D931ed3\n5D97612c\n5DA96ed3\n5DC375a4\n5dc87f31\n5dcd6282\n5DD36cc8\n5DD63cd0\n5DDC35ea\n5DEB00c3\n5dexufeng\n5DFC407e\n5dff57ba\n5e025F2B\n5e36612A\n5E624829\n5e7d62ec\n5e7d7ca8\n5e9131fe\n5EBD493b\n5ECB2d16\n5ed76344\n5EEF582e\n5ef408B2\n5efb0285\n5EFD6ae5\n5EFF5fc7\n5f0757C3\n5F146db3\n5F197dc3\n5F223fb9\n5F2B7866\n5F45505c\n5F464930\n5f543654\n5f5f6fbb\n5f8a2a6f\n5f9708F5\n5f9b679A\n5f9emcv7\n5fab7B0A\n5fd77336\n5FE95cad\n5FEF3ffe\n5h82rb679\n5hendaqi\n5i5j5i5j\n5ib55hig\n5ISS1314\n5itianya\n5jay2pp-\n5l1o7v0e\n5lovebabamama\n5loveyou\n5loveyou0\n5lwg5lone\n5qazxcv7\n5rdx6tfc\n5rfvbhu7ty\n5tgb5TGB\n5tgb7ujm\n5tgb^YHN\n5ttd1W996o\n5tte1W996o\n5tte1X996o\n5tte1X997n\n5tte1Xa97n\n5wu4si7qi3san3@@\n5yfb2S764C\n5yfb2T764C\n5youling\n5yrthrcg\n5yue30hao\n5zfb2T764C\n5zgb2T764B\n5zgb2T764C\n5zgc2T764B\n5zgc2U764A\n5zgc2U764B\n5zgc2U864A\n5zhenshibai\n6.042963902\n60000000\n600000000\n60000006\n60000725\n600036he\n60006000\n60007019\n600100qhtf\n600116000\n60014891\n60016001\n60026002\n6003180877\n60045000\n60054006\n60056005\n600600600\n60066006\n6.0069E+11\n6.00771E+11\n60083911asa\n600902426\n600y146y118l\n60102825\n601067720\n601097183\n60113718666\n601157125\n60115988\n60116011\n60118791\n6.01222E+11\n60126012\n601330950\n60136013\n601410102\n601435475\n601602603\n6017877123\n60180800\n60202613\n60206020\n602136189\n60216021\n6.02199E+12\n60226022\n60232500\n60236023\n60246024\n60256025\n6.02603E+11\n602635001\n602801wawy\n60282323\n60291147\n6029407580\n603159JXD\n6032196y\n60326032\n603603603\n603645b2\n60386736\n603a1f02\n603a4ddd\n6042560425\n6042963902\n604457234\n604560334\n604604604\n604860<+>zjl\n604886912\n6048891372\n60504720\n60512203\n605201314\n60524488\n60544A38\n60556055\n605605605\n60588608\n60595988\n60596059\n60600606\n6060160601\n60606060\n60609997\n60618858\n60624703sd\n606606606\n60666066\n606c4085\n60704ca2\n60708090\n60712721aa\n607230131\n60736635\n6075poiqwe119\n60761258\n60766476\n60786078\n60803Tonyhao\n60808997\n6081098m\n60816651893\n60826082\n60827176\n608608608\n60890449\n6089572lin\n60896089\n60904761\n60912188\n609332633\n60950855\n609763212\n609902AA\n609d4A24\n60A44004\n60B06668\n60BF2d4f\n60C2740f\n60c442B4\n60c95034\n60ec32b5\n60fe010e\n61006100\n610082ab\n61018891\n61026102\n61031343\n6.10328E+14\n61035000\n6105026459\n610517woai\n61051x.721300\n610520xy\n610608ls\n610610610\n610649934\n61077578\n61080845\n610815wang\n61086108\n61096109\n610988178\n61101206\n61106110\n611131520\n611157bq\n61116891\n61122359\n611314513\n61136113\n61141259\n61146036\n61148880\n6115124hui\n61153014\n61153340\n6115648136\n611611611\n61166116\n61186118\n61196119\n6.1207E+13\n6120abcd\n61211119\n612128494\n61214025\n61215891\n612159279\n61216121\n612179hi\n61218891\n61220000\n61226122\n61229975\n61230798\n612316536\n61233216\n612353126\n61236123\n61239663\n612417906\n6124603016\n61246879\n61249055\n61252719\n61256125\n61257515\n612612612\n612822512\n61286128\n61307194\n61307411\n61311915\n6131217326\n6.13155E+11\n61316664\n61325185\n61327547\n61336133\n61349823\n613613613\n61362052\n61369115\n61403961\n614107wang\n61421833\n61444338\n61447418\n61477299\n61480124\n61486736\n61492370578hu\n61501458\n61506150\n6151413121\n61516151\n615201314\n615211314\n6152461524\n61536969\n615420131\n61543334\n61556155\n6156123456\n615615615\n61566156\n61569130\n615724zq\n61573629\n6157738wj\n61579577\n61585129\n61591295\n61602044\n616060776\n61611437\n616132yuji\n61626120\n61626364\n6162636465\n61626366\n61626388\n61629433\n61632426\n61644362\n61646164\n6.16525E+11\n61656165\n616602738\n616616616\n616670306\n6168022331\n61681011\n61681011!\n6.16856E+11\n616904867\n61696169\n616i5ipop\n61718191\n61721027\n6.17237E+11\n61727c5e\n61733536\n61741234\n61745608ZYT\n61746174\n617617617\n61768803\n61793309\n618033988\n61806180\n61807880\n6181031330\n61816181\n61816690lx\n6182020lee\n61841849\n6184685352\n6184685521\n618497vvv\n61858018\n61870812gao\n6187191974\n618753294\n61886188\n618893210\n6.18903E+11\n61896189\n618yK034\n61902185\n61906190\n61908802\n619123815\n61925025\n6192781724\n61930c48\n619619619\n619770778\n619928414\n619s619s\n61A17417\n61a4149a\n61AB0295\n61bc4b98\n61D11771\n61DD3dd4\n61E2397e\n61f35798\n62006200\n620126898\n62013891\n62015848\n62015891\n62016027762\n62017891\n62021744\n6202come\n62031306\n620456506\n62048888\n62048895\n62051382578\n62057215\n62061752\n620620620\n620627229\n620713422\n62071581\n62084620w\n62086208\n62088407\n62088500\n6209051562\n621002166\n62100518\n62100891\n62106210\n62108833\n6.21107E+11\n6211110782\n62112524\n62113891\n62114413\n62114891\n62115776\n62116211\n62116891\n621305jxl\n62138842793\n62143775\n62156215\n62158948\n621589jasmine\n62160356\n621621621\n62163810\n62166216\n62171643\n62173990\n62174593\n6217463a\n6217743349\n62181058\n62184696\n62185154\n621861900\n62192970\n62198085\n62198092\n621982630\n621985zc\n62199175\n6219937ls\n621d49B6\n621E70ac\n62200122\n62201154\n62202886\n62205675\n62208908\n62211063\n62211891\n62213303\n62215759\n62216221\n62216891\n62220369\n62221007\n62221718\n62222707\n62223787\n62224568\n62225582\n62225804\n62226445\n62228460\n62231111\n62231261\n62232068\n62233599\n62235220\n62239169\n62239382\n62241720\n62250351\n6225234b\n622622622\n62268038\n62270a49\n62275122\n62275814\n62280320\n62286153\n62286228\n6.22865E+13\n62286644\n6229231222tl\n62293189\n62306230\n62306978\n62307801\n62308740\n62309008\n6231024dh\n62311586\n6231162311\n623145zx\n62323860\n623347302\n62336627\n62337433\n62339586\n6233love\n62341165\n62348696\n6.23506E+11\n62351887\n62351988\n62353576\n62355201\n62355762\n62356235\n62358967\n62361478\n62361609\n6237141963\n62378618\n62378708\n62379372\n62381295\n62381684\n62383334\n62386238\n62392681\n62392685\n62394640\n62396239\n62396308\n62396915\n62399109\n623a482e\n62406240\n624122426\n62413025\n6241314520\n624153123\n62425863\n6242713cc\n62436810\n62441468\n6.24469E+11\n6245201314\n624550946\n624575871\n6246503025\n624652915\n62486013\n62486248\n6249242591\n624937123\n624B6f90\n62503530\n62504791\n62506250\n62507825\n62508729\n6.25101E+13\n62511070\n62513054\n62516251\n62518103\n625203203\n62521767\n62523563\n62524130\n6252414321\n62526263\n62527241\n62529329\n6252957love\n62531350\n62532128\n62532690\n625340960\n62534146\n6.25E+49\n62537686\n62549988\n625506436\n62559221\n62559648\n62559882\n62561372\n62561903\n625625625\n625630DC\n62563809\n62565899\n62568148\n6256873558\n62568800\n625692310\n625704913\n625708708\n62571421\n62573320\n62577919\n62580000\n62581066\n62581570\n625815907\n6258423568\n62586258\n62588954\n625904d6\n62591851\n62592220\n62596336\n6259711a\n625boy625\n625E0fc7\n62600762\n62603022\n62606260\n62606932\n62608786\n626218battle.\n62623189\n62625016\n62625877\n62626262\n6262626262\n62628800\n62635387\n62636085\n626364abc\n62638055\n62638416\n62641508\n62648688\n62649487\n62651320\n62651652\n62655134\n6265526123\n62655329\n62655577\n62656292\n62657380\n62657631\n62657788\n62660618\n62661226\n626626626\n62664213\n62665734\n6266cathy\n6.26718E+13\n62675003\n626778248\n62684632\n62686268\n62686999\n62703977\n62706270\n627111028\n62711605\n627119214\n62712700\n62715820\n62718980\n62725991\n62733579\n62737570\n62738935\n62739874\n627439571\n62746788sun\n62751599\n62754869\n62758682\n62761620\n627627627\n62766059\n62773257w\n62776277\n62778888\n62779071\n627793455\n62780792\n62786262\n6.27863E+11\n62788529\n62790983\n62798487\n62798711\n628000520\n62801998\n62806280\n62811222\n62812890\n62814503\n62814981\n62819292\n62819475\n62822339\n62822628\n62823677\n62828776\n62833745\n62835543\n62837727\n6284968128\n628519#*\n62856825\n628578123\n62859958\n628628628\n6.29E+31\n62866472\n62866908\n62866998\n628719qaz\n62876860\n62877663\n6288206\n62882511\n628869622\n62889629\n62893229\n62897563\n62897575\n62901491\n62902594\n62906290\n62910194\n629151syw\n62918917\n62921362\n62933560\n62934063\n62942441\n62945920\n6295141.3\n62951413\n629629629\n62971385\n629741963\n62975049\n62980801\n62986298\n62988888\n62989747\n62991083\n62995610\n62996299\n629B046d\n62ea51e0\n62F17745\n62l02y18hbbw\n62l02y18hlyh\n63000000\n6300470047\n63006300\n63010203\n630108349\n6301150208\n6301356aa\n63013833\n63016001jd\n63017456\n63023221\n63028016\n63029598\n6.30313E+11\n63032323\n63036303\n63045058\n630513qwd\n63056191\n630630630\n63072080\n63073361\n63073530\n630929qq\n630E5372\n63105990\n63106310\n63109108\n63110zlj\n63112624\n63112656\n63116311\n63122077\n63126312\n63138514\n631452shu\n63145db9\n63152403\n631580146\n63166169\n631678lilylily\n63169272\n63178433\n63182265\n63183710\n63185260\n63185558\n63186044\n63186318\n63190000\n631E3578\n63201985\n63202731\n63205836\n63216321\n63221935\n63223678\n63225643\n63228967\n63231323\n632321603\n63233496\n63236323\n63241290\n63246324\n63246850\n63249102\n63256325\n63256632\n63257282\n63259523\n632632632\n63265509\n63265665\n63266326\n63271549\n63289772\n63293465\n632b1fd6\n63303205\n63308286\n6332163321\n63322001\n63324787\n63327380\n63329539\n63336333\n6335201314\n63354997\n6.33622E+12\n633633633\n63366336\n63367386\n6337125yy\n63376737\n63378396\n6.33895E+13\n63402561\n63406201\n63407214\n63408980\n634142554\n6342363423\n634267115\n63431948\n63441578\n63441941\n63449065\n63449603\n63454077\n63458994\n63460777\n634634634\n63480590\n63482618ab\n63489988\n63506635\n63509344\n63510668\n63511686789\n63511824\n63515032\n63516351\n63516805\n63517703\n635201314\n6.35239E+13\n63524100\n63524141\n6.35242E+11\n635241789\n63526352\n63529801\n63529993\n63530147\n63532485\n63533955\n63534695\n63535496\n63536353\n63552289\n63556751\n635613yw\n63564996\n63567516\n6356799a\n63569319\n63572833\n63573357\n635749125\n63576357\n63578251\n63578342\n63578888\n63579192\n63583356\n63583437\n63583952\n63584581987\n63586238\n63587fa9\n63596b43\n635E684f\n63600013\n63604921\n63605448\n63606360\n63607279\n63613069\n63620143\n636225ha\n63626160\n63627799\n63630593\n63631095\n63634883\n63635611\n6363636363\n63637971\n63642621\n63646364\n63646566\n63647736\n63651211\n63651727\n63653b2c\n63658187\n6365879999\n63660641\n63661933\n6366296q\n63667249\n63692542\n63696369\n63697069\n63698147\n63701192\n63701219\n63703318\n6370954202\n63712250\n63714025\n63718833\n63720310\n63722337\n63724312\n63726808\n63727728\n63733825\n63740942\n63741498\n63742653\n63753056\n63761485\n63769016\n63773065\n63776377\n63777777\n63779539\n63781345\n63782590\n63782736\n63784648\n63786378\n6.37923E+13\n63800277\n638017023\n63802268\n63803433\n63810000\n63811537\n63811591\n63815752\n63823426\n63825197\n63829432\n63829956\n63834627\n63834812\n63840960\n63850640\n63856385\n63856924\n63858553\n63867020\n638690096\n63891787\n63891787a\n63892243\n63893680\n63898384\n63900162\n63951130\n639528417\n639581818\n63959463\n63960797\n63963336\n63964625\n63972306\n63980388\n6399006c\n63991314\n63997c7a\n63A11d42\n63C568ce\n63e83e15\n63f062D1\n63fd42BA\n63g24yyzyq\n640**.625\n64007887\n64015112\n6402250000\n6.40227E+11\n64032157\n640323czx\n64051165\n64051165wushu\n64063550\n640640640\n64072099\n640829051\n6409095b\n640e64c7\n64102203\n64110909\n64112157\n641125031\n641139527\n64114044\n6411630659\n64116411\n64118403\n64124977\n64126412\n6413253@@@\n64134899\n64142238\n6415003B\n64157020\n6416739zx\n64169733\n64187786\n64191577\n64195969\n641c2103\n641e7C2A\n642002847\n64200881\n64201205\n64202001\n64206420\n64207918874\n64209607\n64213648ma\n64218763\n64219517\n64222065\n64234346\n6.42353E+11\n6423665710\n64239765\n64242809\n64247414\n64254439\n64254c77\n64277239\n64281936\n64286428\n64288372\n64292135\n64297756\n642f37F2\n64316431\n6432792qi\n643350691\n64337065\n643383279\n64348871\n64352106\n64354773\n64354992\n64355869\n643639colinecho\n64379433\n64393631\n64396439\n644018863\n64410448\n64412379\n64418800\n644272747weibin\n64438202\n64444726\n64452430\n64466446\n64491075\n64500366\n64508888\n64510825\n64530520\n6453085111\n64533862\n64546454\n64550896lyh\n645603150\n64561181\n64566456\n64569833\n64579274\n64580286\n64586458\n64591529\n645f057b\n645F6d23\n64601853\n646181539\n64624185\n6462556fdj1\n64626569\n64627575\n64635316\n64637880\n64641100\n64643141\n64646464\n64649669\n646509602\n6465220d\n64653466ma\n64657348\n64659200\n64666872\n64668989\n6466A8745\n64671824\n64686468\n64688888\n6468long\n64691822\n646990db\n646e6a10\n64703779\n64705533\n64712775\n64716471\n64717824\n64719373\n64742779\n647470416\n64750ad9\n64750ECC\n6475210lc\n64758976\n64772390\n64775941\n64779798\n64796256\n647A1859\n648025+-\n64826482\n64829404\n64847442\n64851499\n64858310\n64870908\n64874839\n6487718a\n64880266\n64882807\n64885731\n64896489\n64900713\n6490175824\n64903497\n64906490\n64920154\n649244798\n64926390\n64926492\n64928419\n64935855\n64943386\n649459643\n64950500\n64952563\n64953618\n64958742\n649664890\n64976115\n64983147\n64987342\n64988666\n64A520f9\n64b193f5\n64BD0f61\n64BD2bac\n64C20efd\n64D07eb0\n64e179C7\n64F934b8\n64FB6a4b\n64FB7f6b\n64FC226e\n64fe06dc\n64yinchun\n65006500\n65014433\n65019745\n6502065wqt\n6.50229E+11\n65026502\n65030820\n65038006\n65042085\n650511737\n65052352\n65055123\n6505918wf\n65060323\n65079098\n650829yjm\n65085550\n65090301\n650C0c58\n650E7c9e\n65101004\n651012521\n65102366\n65105510\n65106510\n65107875\n65108102\n65109642\n65110125\n65110433\n65110965\n65112500\n65113929\n65115867\n65116511\n65121590\n65124343\n65124877\n65125021\n65125028\n65125848\n65126512\n65127395\n65128658\n65130884\n65131420\n65134511\n65135838\n65139105\n65148811\n6515245530\n651534511\n65153853\n651539983\n65154601\n65155796\n65156357\n65156859\n65157135\n65159098twy\n65166516\n65177295\n6.51828E+13\n65190571\n65194950\n65201229\n65202458\n65204283lq\n65206520\n65209211\n6520albb\n65210827\n65210880\n65211314\n652125165\n65212543\n6521350069\n65216177\n65216521\n6521718pearl\n65220682\n65221447\n65223000\n65226522\n65227415\n65235939\n65236523\n65250398\n65250698\n65251291\n65253933\n65256525\n65261946\n6.53E+06\n65262616\n65263109\n65265125\n65265760\n65274029\n6.52802E+11\n652811551\n65281490\n65286528\n65289190\n65291411\n65296561\n65300133\n65301163\n65303950\n65305647\n65306531\n65306869\n65307148\n65308245\n65308550\n65310771\n65311606\n6.53123E+13\n6531365313\n65315056931\n65316420\n65319297\n65319951\n6532118772\n6532132165\n65322505\n65326532\n65326992\n65328528\n65329015\n65331411\n65333298\n65335346\n65340822\n65343340\n65343785\n65345687\n65347520\n65347921\n65351656\n65352288\n65352863420\n65353743\n65355181\n65356447\n6535688653\n65358656\n65360203\n65361000\n65366357\n65369476\n65371688\n65374119\n65376537\n65378216\n65379020\n6538331aa\n65390445\n65390527\n65393274\n6539365393\n6539529358\n65397217\n6.54E+11\n653E1420\n654007147\n65406540\n65408720\n65410546\n65412300\n654123123\n6541232009\n6.54124E+11\n654123789\n65412389\n654123987\n65413683\n65415541\n654183157\n65420728\n65421106\n65421891\n65421962\n65426542\n654321..\n654321000\n6543210000\n65432101\n6543210a\n65432112\n654321123\n6.54321E+11\n654321321\n654321654\n6.54322E+11\n65432166\n65432178\n654321789\n6543217890\n65432187\n65432188\n65432198\n654321987\n654321A=\n654321aaa\n654321ab\n654321abcd\n654321abcde\n654321abcdef\n654321as\n654321asd\n654321bb\n654321cba\n654321fuyuan\n654321gggg\n654321hh\n654321hz\n654321jj\n654321kk\n654321lb\n654321LIU\n654321ll\n654321love\n654321ok\n654321poi\n654321pp\n654321rc\n654321ss\n654321www\n654321yy\n654321zhj\n654321zz\n65432210\n6543271025\n65436543\n6543828@\n65440652\n65440886\n65441852\n6.5446E+13\n65449681\n65450559\n65450692\n65453751*\n65460229\n65469550\n65476304\n65476547\n654789123\n654789321\n65478985\n65479573\n65482371\n65483543\n65488753\n65492667\n65492692\n65496F28\n654987321\n654987poi\n654e5322\n65501496\n65501504\n65506877\n65507253\n65510842\n65512938\n65527613\n65532810\n65541103\n65550087\n65557123\n65558x95\n655651280\n655655scmayu\n65569568\n6556ppss\n65571020601\n65571987\n65572017\n65573916\n65577186\n65578445\n65582700\n65586431\n65587094\n65587977\n65597084\n65601544\n65602590z\n65603063\n65603702\n65606730\n6.56083E+11\n65608979\n65612124\n65622335\n65623088\n65636873\n65638843\n65641305\n65642123\n65643223\n65644423\n6564636261\n65650277\n65651201\n65660261\n656656656\n65666223\n65666566\n65668237\n6567252984\n65674009\n65674194\n65680030\n65683689\n65686568\n65689811a\n65693120\n6569839199\n656c0291\n65700124\n65705845\n65709883\n65711296\n6571314267\n65717103\n65729625\n6574062zbsl\n657471yy\n65748915\n65753333\n65758595\n65762374\n65764056\n65766427130\n65771156\n65776577\n657836759\n65794579\n65798304\n657b1a9d\n657D3cf7\n65800347\n65801035\n65802310\n65807656\n65809186\n65810551\n65819347\n65821C55\n65823480\n65826040\n65826833\n65827913\n6583055233\n65832590\n65843001\n65846121\n65851515\n65852139\n65854958\n65855502\n65856585\n65860733-\n65862324\n65865508\n65865574\n65865644\n658658658\n65866440\n6586993065\n65872119\n6587808808\n65885222\n65885857\n65885995\n65886588\n65887125\n65887438\n65889991\n65892983\n65896589\n65896619\n65898226\n65899593\n65899898\n65899916\n65900389\n6.59004E+11\n65900855\n65902955\n65904567\n65906726\n65907967402\n65909002\n65910095\n65916591\n65928726\n65964991\n6596659618\n65973329\n65976458\n65977120\n65981953\n65982199\n659834310\n65985921\n65986598\n65988456\n6598o1o2\n65991208\n65993880\n65adg0207\n65d560c6\n65F46aa1\n66005299\n66006600\n66011571\n66013377\n66017209\n66019156\n660208yj\n660218218\n66028152\n66036759\n660561398\n66056605\n66063303\n66066606\n66068008\n66070809\n6607312011\n66080742\n66083413\n66086230\n66086608\n66091519qq\n66095620\n66096609\n66103106\n66106610\n66110744\n66112233\n66112575\n66112646\n66115526\n6611616WO\n66116467\n66116531\n66116611\n661166721\n66118689\n6611991980\n661203ad2007\n66121288\n661223hbsufuyan@\n66123456\n66126612\n66130221\n66131817\n66132001\n66132667\n66133002\n66134811\n66136321\n66136613\n66141566\n66143227\n66155182\n66155604\n66158659\n66160811\n6616283110\n66166616\n6617101271\n66176617\n6617666323\n6617763zw\n6618122qa\n66181766\n661818ec\n66181959\n66182125\n66183440\n66183518\n66183560lijun\n6618362D\n66184906\n66185181\n66186236\n66186278\n66186484\n66186530\n66186536\n66186605\n66186618\n66186865\n66186907\n66186930\n66187238\n661894112\n66191688\n66193423\n66197042\n66197072\n66197408\n66197457\n66197995\n66198127\n66201F8C\n662109258hby\n66211912\n66212218\n66212663\n66213977\n66214183\n66216742\n66217007\n66218325\n66220098\n6622030405\n66220442\n66223231\n66223312\n6622567www\n66226622\n66226677\n66228400\n66228466\n66232895\n66236623\n66241219\n66241515\n66242146\n66242229kwm\n662427123\n66246818\n66252586\n6.62527E+13\n66254301\n66254815\n66256625\n66257950\n66259088\n66259329\n66261391\n66263351\n66265298\n66265548\n66266626\n66266835\n66266912\n66268379\n66268702\n66268735\n66268880\n66269793\n66270677\n66276770\n66277200\n66280359\n66282188\n66286628\n66291860\n66296629\n66300320\n66306630\n66315131\n6632510325\n66325370\n66328736\n66331498\n66332211\n66336633\n66340172\n66354323\n66360281\n66363471\n66365525\n6636566365\n66366636\n66367321\n66367749\n6.6369E+11\n66369948\n66369981\n66392053\n66399536\n6.64E+05\n664183621\n6642078ab8\n66442211\n66446644\n66456645\n6645672169\n664A6c17\n664d7B6D\n66500217\n66500241abc\n66500566\n66503894\n66504282\n66513399\n66514183\n66516122\n66516152\n66519751\n665201314\n66520530\n66520613\n6652066520\n66522718\n66525603\n66526195\n6653061107\n66534874\n66537956\n66541516\n66543211\n665432112\n66551122\n6655298ll\n6655429720\n665544321\n66554433\n6655443322\n6.65544E+11\n66555566\n66556655\n66559638\n66563014luwei\n66564978\n66566588\n66568521\n66569688\n66571721\n66573927\n66584088\n66586658\n66593821\n66593839\n66598189\n665c1F51\n66600666\n666029605\n66605703\n66608888\n66611200\n666123456\n66612458\n6661402922\n66620156\n66620966\n666222333\n66623792\n66626336\n66630999\n666333666\n666333999\n66641071\n66643255\n666481983\n66651888\n666534FB\n66654321\n666555444\n66659823\n66661234\n66662129\n66662222\n666666123\n666666321\n666666333\n66666636\n66666648\n6.66667E+12\n6.66667E+15\n666666669\n6666666a\n66666677\n66666678\n666666789\n666666888\n6.66667E+13\n66666699\n666666999\n666666AA\n666666aaa\n666666aaaaaa\n666666abc\n666666as\n666666ll\n666666MM\n666666ok\n666666QQ\n66668689\n666740529\n6667412118\n66676869\n666777123\n6.66778E+11\n66677790\n66679046\n66680113\n666822666\n666888000\n666888111\n6.66888E+12\n666888123\n6668881cdy\n666888666\n6.66889E+11\n66688868\n666888aa\n666888aaa\n666888abc\n666888KS\n666888qq\n66689681\n666954921\n666999123\n666999333\n666999666\n666999888\n666a888A\n666aaa777bbb\n666hu666\n666pp00ppp\n66706670\n66707156\n6.67E+13\n66716292\n66722048\n66722539\n66723089\n66725000\n66727890\n66728280\n66734935\n66736191\n6673619111\n66736428\n66738824\n66739681\n66745377\n66745561\n66745g4356\n66755107\n66758955\n66760306\n66762585\n66763146\n66765214\n66766039\n66766832\n66768lpkl\n66769003\n66769639\n6677141516\n66774520\n66774840\n66775099\n66776677\n66777655\n66778156\n66778910\n66779239\n6677qqww\n66781219\n66785251\n66786100\n66786678\n66786679\n66795056\n66795160\n66798125\n66798788\n667F79ed\n66802356\n66803315\n66803549\n66804121\n66806680\n66809483\n66810110\n66810302\n66811168\n66813085\n66816462\n66816607\n66816681\n66817690\n66818621\n668228ok\n66823085\n66824032\n66825250\n6682xj717\n66830180\n66834733\n66836910\n66845378\n66845858\n66845966\n6.68467E+11\n668518li\n66855352\n66861234\n66866686\n66866875\n66876687\n66878215\n66880000\n66881100\n66881314\n66882567\n66886868\n6688866888\n66888866\n66889911\n66889966\n66890101\n66891753\n66896689\n66897176\n66923266\n66954605\n66958885\n66966696\n66968807qinhan\n66969696\n669796979\n66986199\n66986698\n66989133\n66995566\n66996699\n66996927\n66997722\n66999lrh\n66999ysq\n66B224b9\n66d86D0B\n66D931af\n66dashun\n66f0522B\n66f6702E\n66fa4ae1\n66z12c59\n6700120long\n6700515zp\n6702131717\n67025106\n670326carol\n67061182\n670617ZGH\n67063002\n67080980\n67081811\n67086027\n67088460\n6.70919E+11\n67101121\n6.71042E+11\n67106114\n67108864\n671126hj\n671129001\n67114133\n67114259\n67116711\n67118119\n671211777\n6.71212E+11\n67121763\n6712321176\n67123456\n671302160\n671345sw\n67147806\n67150019\n671504635\n67161450\n67165434\n67167586\n67171828\n67176764\n67195074\n671c16E0\n67210832\n67211554AA\n672159834\n67220010\n67222972gh\n67236723\n67240548\n67253012\n672575fei\n672576148\n67262083hzl\n67265535\n67268408\n67269544\n67313162\n67313794\n67322893\n67325888\n67336733\n67350919\n67355620\n67365031\n67381782\n673899272zyy\n673926967\n6739515ll\n67397267\n67410361\n6.74166E+11\n67417080\n67419086\n6.7426E+11\n67458334wj\n67460286\n67468309\n67471282\n67473057\n674735645\n67481233\n67488969\n67498226\n67505004\n67507285\n67512691\n6751761enter\n675177361\n675201314\n67520520\n675211314\n67521492long\n67523531\n675249003\n67526061886\n67536039\n67536250\n675454438\n67550218\n6.75502E+12\n67576220\n67578930\n67582682\n675886895\n675949316\n67599014\n67600702\n67601311\n67601885\n67607085\n67608970\n67611276\n67611282\n67611739\n67617735\n6762081333\n67622947\n67625579\n67626947\n67627852\n67633927\n676400293\n67640193\n67640391\n67651255\n67655070\n6765634321\n676570702\n67660013dj\n67660189332\n67662099\n67662726\n67663813\n6767222ws\n67684533\n67686935\n67687321\n67699484\n67701619\n67706770\n6771403cxx\n67721098\n67721654\n67724866\n67734461\n67735618\n67743593\n67746234\n67753051\n67756666\n67758322\n67759621\n67766059wc\n67766282\n67766776\n67770029\n67775228\n67781234\n67790339\n67796093\n67809975\n67812376\n67813090\n67813943\n67815430\n67816781\n67818205\n67818645\n67833362\n67836464\n678487518\n67850890\n67853733\n67854644\n6.78547E+13\n67856087\n67856165\n678678qq\n67868673\n67869174\n67870098\n67874201\n67886788\n678891ly\n6788965894\n6789009876\n67890123\n67890201\n6789054321\n6789067890\n67891011\n678912345\n678954321\n6.78968E+11\n6789abcd\n678qazwsx\n678qq876\n678yuihjknm\n67900zheng\n67907224\n67914751\n67915121\n67916791\n67920909\n679209D8\n6792802382\n6793639b\n679500648\n67984196\n67985589\n67996799\n67997012\n67a337BD\n67a7301d\n67b0328F\n67b65a83\n67BB2752\n67CC46cf\n67D20c72\n67e0665c\n67er2vwdq\n67f215A4\n67f55145\n67ff34dc\n67j56u5j\n68000218\n68000676\n68003542\n68003557\n68005307\n68006191\n68006380\n68006828\n68014062\n68018264\n6.80219E+11\n68026678\n68026802\n68027517\n68030618518\n68031303\n68032463\n68034399\n68036803\n68038328\n68048650\n68064645\n68078048\n68082269\n68086808\n68089188\n68090044\n68091703\n68092389\n68100471\n68100512\n681030yhm\n6810318075\n68103590\n681051535\n68106810\n6810820559\n6810906Bb\n68110005\n68110688\n68113038\n68115321\n68115521\n68120665\n68123113\n68139148\n68142213\n68143039\n68143567\n68146086\n68148239\n681509111\n68150920\n68154420\n68160063\n68166337\n68166733\n68167700\n681681asd\n681681dxw\n681681wzj\n68169988\n68181501\n681823057\n68183367\n68185848\n68187329\n6818950059\n68190068\n68191573\n68192496\n6819710202\n68197901\n681F5539\n6820368203\n6820456506\n68205125\n68213273\n68213388\n68215055\n68221791\n68226822\n6822725a\n68231500\n68232747\n6824333070\n68251916\n68252200\n68255449\n68262639\n68264haohaode\n68268820\n68271188\n68273710\n68276311\n68280061\n68280150\n68282464h\n68284050\n6.82893E+13\n68289623\n68291460\n68291869\n68292045\n68292092\n68292661\n68293402\n68293638\n68300972\n68304718\n68305118\n68307999\n68308734\n68309322\n68313165\n6831468314\n68316636\n68321132\n68321696\n68321806\n68322494\n68324126\n68325351\n68326088\n68327962\n68329785\n68330061\n68330088\n68331445\n68334125\n6.83351E+11\n68340lei\n68348508\n68348899\n68350862\n6836150/\n68361760\n68368800\n68371736\n68383465\n68384177\n68391215\n68396848\n68413370\n68422288\n68423523\n68424102\n68425124\n68426842\n684268426\n68431684\n68431905\n68437411\n68439202\n68456845\n68468105\n68478800\n68481317\n68486597\n684b227d\n68500159\n68502280\n68504107\n68506850\n68508640\n68515247\n68516015\n685201314\n68521742\n68530293\n68531726\n68531888\n68532001\n685359c8\n68537643\n68542299\n68542947\n68548888\n68551083\n68553300\n68555053\n68555435\n68564233\n68579889\n68581923\n68582304\n68582309\n68582633\n68582661\n68582663\n68582671\n68585351\n68587114\n68587114520\n68590102\n68590825\n68593152\n68598197\n685q4z83\n68602271\n6860627e\n68610260\n68619872\n68621475\n68627896\n68629315\n68633424\n68633fc0\n68634711\n68635570\n68636863\n68640972\n68641281\n68642186\n68645508\n68649338\n68650230\n68650709\n68651120\n68651184\n68656806\n68657217\n68658670\n68658911\n68660340\n68660841\n68664482\n68664583\n68666240\n68670021\n68670398\n68670965\n68679871\n68683928\n68686688\n686868123\n6.86869E+12\n68693061\n68696869\n6.86974E+11\n68701913\n68706090\n68710055\n68710510\n68724143\n68725546\n68725818\n68736873\n6875040b\n68754465\n68758776\n687643279\n68767011\n68768775\n68775223\n6877penis\n68781127\n68786878\n68788898\n687955832\n68796879\n68800051\n68801028\n68801598\n68814108\n68823616\n68830762\n68832170\n68832546\n68832836\n68836410\n68841003\n68843587\n68843955\n68844314\n68856885\n68859597\n68864191\n68865757\n68865939\n68866694\n68866886\n688688688\n68869184\n68875900\n68880436\n688888888\n68900573\n68902300\n68906890\n68909915\n68910428\n68911110\n68912580\n689125wh\n68912888\n6891435211\n68916891\n68918899\n68919325\n68920457\n68922171\n68922359\n68925005\n68925226\n68926194\n68927265\n68928412\n6893001xyz\n68937802\n68938161\n68951002\n6895284y\n68956895\n68960812\n68961318\n68963955\n68966896\n689689689\n689709fq\n689750d0\n6.89863E+11\n68986898\n689880303\n68996899\n68a821B8\n68a94a10\n68C929bd\n68e76d91\n68F01905\n68F95d8a\n68fd3EBF\n690056707\n6901281211\n69016788\n69018870\n69020390\n690218723\n690307zgb\n690422JIAO\n69042otis\n69046904\n69050132\n690525xx\n69065613\n6.90707E+11\n690712123\n69086463ddl\n69093991\n690abcabc825\n691014031\n69101600\n6910161620\n69104799\n69106910\n69106946\n6.91077E+11\n691107ti\n691203888\n69120478\n69122413\n6913586536\n69148909\n69151252\n69156915\n69164386\n69165664\n69166193\n69166916\n69191217\n6919152143\n69200200\n6921402213\n69231158\n69247176\n6925296a\n69254064\n69259236\n69264985\n6927969790\n692B10e4\n692F7df0\n69312133\n69326932\n693582471\n69366167\n69366666\n6939937510\n69438071\n69441916\n694451980\n69455737\n6947166aa\n694c4a54\n69502049\n695242284\n69525629\n695293963\n695359864\n69541120\n6954143684\n69556885\n69561378\n6.95771E+11\n69578149\n695841423\n69586958\n69587976\n69593474\n695c5dc4\n69605633\n69611539\n69646964\n69647300\n69649911\n69650160\n69664514\n69664747\n696939lrh\n69696699\n6969696969\n69704933\n69706970\n69718061\n69719898\n69724899\n69739999\n69745577\n69760678\n6977296964\n69775649\n69776977\n6978853123\n69823746\n69840828\n698456923\n69856985\n698698698\n69874123\n69879999\n69886988\n698898098\n69896383\n69896989\n698976978\n6990058349\n69903901\n69906414\n69925487\n69928803\n6993212D\n69963331\n69965668\n69966996\n69967528\n69967734\n69972530\n6998102102\n6998731982\n69999699\n69A95610\n69CB5d6b\n69d07C18\n69D548e6\n69e73E35\n69E7691d\n69FF3c67\n6a01392d\n6a11461b\n6a114f63\n6a1c08ca\n6a2a7C70\n6A4633b4\n6a497e66\n6a4e2106\n6a595E5F\n6a5fws6g5\n6A690cee\n6a6a1238906a6a\n6A731b6c\n6a90041b\n6ab82b86\n6abd4640\n6AC602e1\n6AE54c0b\n6B0E2516\n6b117D03\n6b215909\n6b226B99\n6B2D1144\n6b3a1950\n6b537145\n6b583F76\n6B7031d1\n6b9145ad\n6b9f7df7\n6BA55d55\n6bb806dhwl\n6BB80964\n6BC61043\n6bc94d11\n6bd17492\n6bd26C04\n6BD40286\n6BD91ea3\n6bec17e4\n6bfa502e\n6bff47E4\n6Bid2W985y\n6bk0csySJD\n6bl0cryRJD\n6bl0crySJD\n6bl0csySJD\n6bl0dryRJD\n6bs2itzTKF\n6bs2itzUKF\n6bt2itzTKE\n6bt2itzTKF\n6c0a7574\n6c5151A3\n6C6119ed\n6c8b6A6A\n6c95440E\n6cba352d\n6cd10092\n6CDB2377\n6ce751BF\n6CE778b5\n6cf17607\n6cfc3b46\n6cfd78be\n6Cid2W985y\n6ck0csySKE\n6ck1bszSKE\n6cr2huAULF\n6cr2huAVLF\n6cr2huAVLG\n6cs2huAULF\n6cs2itAUKF\n6cs2itAULF\n6cs2itzUKF\n6cs2iuAULF\n6Cxd2W985y\n6Cxd2W986x\n6Cxd2W986y\n6Cxd2X986x\n6d035037\n6d0f64C4\n6D2A763f\n6D311f97\n6d4326d241\n6D620794\n6D88378e\n6d98470C\n6DD625e9\n6DEB674c\n6Dxd2X986w\n6Dxd2X986x\n6Dxe2X986w\n6Dxe2X996w\n6Dxe2Y996w\n6Dxe3Y996w\n6Dxe3Ya96w\n6Dxe3Ya97v\n6Dxe3Ya97w\n6e4e26d4\n6e581250\n6e587de9\n6e677062\n6e6e4b24\n6EA83467\n6EA95b5d\n6ecb641B\n6ED236f8\n6EDD56a3\n6ee40D35\n6EF43bc4\n6Exe3Ya97v\n6Exe3Za97v\n6Exe3Zaa7v\n6f083068\n6F19074f\n6f192CE2\n6F254562\n6f27247b\n6f2d3417\n6f2i172p\n6F375309\n6F3779ff\n6f444f3d\n6f634742\n6F6B72b6\n6F85076a\n6F870edc\n6F8E0ca1\n6f9529q1\n6F9560e1\n6F9E7136\n6fb431F0\n6FBD02f7\n6fd40f0d\n6fd55906\n6FE87fbf\n6FE92ffc\n6gf6578hj\n6mkFS^#8\n6s6s6s680415\n6suibano\n6t0e2Yaa7m\n6t0f2Abb8k\n6t0f2Yaa7m\n6t0f2Zaa8l\n6t0f2Zbb8l\n6t7y8u9i0o\n6tte1Xa97n\n6tte1Xaa7n\n6tte2Yaa7m\n6yhn6yhn\n6yyth7bb\n7.21.1234\n70007000\n700101ccbb\n700120855\n70017001\n700209283\n700302152\n70031800\n700402wlp\n700411001\n700613041\n700700700\n70077007\n700800900\n700805ca\n70087008\n700A2238\n700f2Abb8k\n700g2Abb8k\n700g2Abb9k\n700g2Abc9j\n700g2ycc9i\n700g2zbc9j\n700g2zcc9i\n700g2zcc9j\n700g3ycc9i\n700h3xcdah\n700h3ycdah\n700h3ycdai\n7010208628\n70102399\n70102400\n70111891\n701122315\n70117011\n7012120000\n70121799\n70122456\n701271262\n70168783\n701701701\n701840865\n7018435891\n70201277\n7021527F\n70215891\n70221981\n7022442700\n70247189\n70251314\n70271568\n702888999\n7032270322\n70327032\n7033613ok\n7033798abc\n7.03452E+11\n70345426\n7034551020\n70345520\n70357035\n703703703\n70387036\n70391892\n70397947\n7041136472\n70459898\n70462467\n704678860\n705201314\n705335126\n705347B7\n70545262\n705605473\n70562870\n70564335\n705705705\n70575537\n7059517499\n706100225\n70625061\n70637071\n706519184\n70656355\n70682001\n70707070\n7070707070\n707070qzp\n707070xl\n7.07104E+11\n70717273\n707269296\n70757075\n707707707\n707c6D4C\n70807080\n7.08326E+11\n70842d25\n70849092\n70860033\n70867086\n70868384\n708708708\n70888633\n70897080\n70905226\n709090706\n70931647\n70939400\n709394110\n709394123\n7093941314\n709394333\n709394520\n7093945354\n7.09395E+11\n70939495\n709515087\n709571286\n709709709\n709840db\n709e3166\n70b90c21\n70BB410a\n70f75408\n70FA2e85\n70ob6ljd\n71000000\n71006581\n71008433\n710089+-*/\n71015503\n7104001232\n7104150806LJ\n7105216666\n71057105\n710710710\n710712888\n710718189\n710719362\n71077107\n71081800\n710827hot\n71084366\n71087108\n710924wxl\n71094780\n710ZXY802hy\n71101515\n7110249lpf\n71103991\n71107110\n71107116\n71109674\n711104058\n71111111\n71111117\n711125372\n71112938\n71120305\n711213136\n711213136li\n711218888\n71122600\n71127112\n7113138181\n71133112\n7113571135\n71137113\n7117097213\n711711711\n71171771\n71177117\n71178951\n711811911\n711811gbb\n711811gmx\n711811xxx\n711826baby\n71187118\n711b5c1d\n711s9d31\n71203233\n71205002\n7120688004\n71207120\n71212121\n7121221012\n712161216\n71217121\n712200110\n712345lj\n7123687910\n71238912\n712407qqq\n71247437\n71257125\n71265521\n712712712\n71277127\n712812133\n71281600\n71285da6\n712`huang\n712li728shi\n71300F9C\n71310615\n71312368\n7132209s\n713429genie\n71353178\n71359246\n7135sxws\n713713713\n71395555\n713984265\n714213fb\n714514688\n71455160\n7146553613\n714714714\n7.14715E+12\n71477147\n71481788\n714825936\n71503083\n71512688520\n715150352\n715169549\n71517151\n7151823000\n71541120135\n7154112f\n715498944\n71567156\n715715715\n71607160\n7160abcd\n71611889\n71617161\n71625344\n7.16567E+11\n716716716\n71687168\n71697069\n71717171\n71725274\n71727172\n71727374\n7172737475\n7173622wt\n71737087173\n71745071\n71747174\n717622185\n71763308\n717717717\n717797369\n71793083\n71811890394\n71817181\n718386452\n718716mc\n718718718\n71884061\n718908834\n7190049024a\n71926164\n7195211984\n719581120\n719719719\n719858b2\n7.20E+11\n719qiuqiu\n71B55c7f\n71C05e7c\n71C12dcb\n71d13171\n71D54573\n71df3251\n71doudou\n71E558e3\n71e853d3\n71FA43cc\n71qwer71\n72003815\n72006627\n72011535\n72013891\n72014891\n72017201\n720197044\n720220301\n72023215\n72037203\n720517zxcv\n7205201314\n720520520\n7205211314\n720530520\n72058926\n720720720\n72080685\n72083202\n72090201\n7.20903E+11\n720904_+_+\n720913sjs\n72097209\n721003jf\n721004wn\n721019001\n721021djl\n721023lwei\n72107210\n7211091109\n7.21121E+11\n72115891\n7211699000\n72117211\n721197lee\n7.21203E+11\n72120282\n721217qq2000\n7212267428\n721256zl\n72127212\n72127967\n7213096ll\n72131618\n72137213\n72140000\n7215201314\n72152100\n721521000\n7.21521E+12\n721521521\n7.21522E+11\n72152177\n72153056\n72153480\n7215821521\n7.21584E+12\n72168072\n721721721\n72197970\n7220484396\n7.2212E+11\n72213891\n72215891\n72222222\n72223521\n72237171\n72237223\n72246187\n72250manager\n722722722\n7227709521\n7227715hu\n72277227\n72287228\n72301072\n72304891\n72307230\n72315478\n72315731126\n7231648lfp\n723213hu\n723348a0\n72335218\n72337805\n72339156\n723409xiao\n7237156f\n723723723\n72385846\n723921dong\n72395460\n724147425\n724326zk\n72462359reiko\n724724724\n72507250\n725201314\n72528836\n7255201314\n7255908wq\n725725725\n72573562\n7.25801E+11\n72587258\n72587bd3\n72597733\n72601881\n72607260\n7261383w\n7261444b\n7265218D\n72661288\n72671220304\n7.26712E+11\n726726726\n7268537ab\n7269426246\n72707270\n727109123\n72711263\n72716991\n727222104\n72727272\n7272727272\n72732000\n7273446829\n7.27525E+12\n727602921\n727727727\n72773489\n727A66e3\n72807280\n7.28073E+11\n728114416\n7283898HUAXIA\n728728728\n72873c22\n72886611\n72887288\n72897289\n72902891\n7290609tracy\n7292086a\n72920aa8\n7295310102\n729686164\n72971828\n729729803\n7298540849\n72ba5124\n72d57705\n72E07e58\n72e64dec\n72FF613e\n730065dany\n73007300\n730079012\n7.30124E+11\n730128211\n730180lan\n730181818\n7302190401_13\n730518623\n7305292019\n7305639f\n73067306\n730691012\n730714563\n73072388\n730730730\n73077307\n7308102lqq\n730929wxw\n73100607\n73101264\n73102154\n731028lf\n73104031\n73107310\n731102641\n7.31109E+11\n7311131981\n731202gzjj\n73127312\n73127910\n73137313\n73177317\n73187318\n7319641455\n73197319\n731sdabgg\n7321291003\n73216217\n73217321\n732253900\n7.32282E+13\n73243a04\n73252d83\n73257325\n73287226\n732881074\n73332546\n733733733\n73377337\n73395217\n733A6102\n734077039\n734232609\n734300014\n7345lkjh\n734916bc\n7352535d\n735254609\n73560315\n73572973\n735e56BD\n736004722\n736825678\n736929116\n73702558\n7.37187E+11\n7372s5d4cd\n737312598\n73737373\n7373773m\n73745210\n73745211\n73747576\n73748096\n73802954210\n7380839a\n73816202\n73820000\n73821419..\n738215444\n738353b3\n73847288\n73856041\n738ljemma7946\n739119375\n73914682\n739146825\n73915932\n739182465\n73949080\n73992644\n739961779\n73a62BC0\n73b6183a\n73B9210e\n73D83ea6\n73ED6cd1\n73EE51e8\n73ff35d4\n73meigui\n74004186\n7400839bl\n740212zx\n74032411\n740329814\n74033B6E\n74037403\n740405357\n740409ycm\n7404695969\n74048522\n7.40511E+11\n7405261968\n74066c65\n740696557\n740740740\n740903116\n740926gay\n74100147\n7.41011E+11\n7410115438\n7.41074E+11\n7.41085E+11\n7410963\n74109630\n7411057575\n7411074110\n741122007\n741155ww\n74117311\n74117411\n7.41174E+11\n741202061\n74121234\n74122882\n74123123\n741236589\n7412369850\n7412369852\n7412374123\n7412375952\n7412378952\n741237952\n74123963\n74123zhou\n74125800\n741258369\n74125896\n7412589630\n741258963a\n74127412\n74137413\n741456963\n74147414\n741570745\n74157415\n74159753\n74167416\n74167416k\n74172703\n7.41742E+12\n7.41742E+11\n74185200\n741852123\n741852369\n7.41853E+11\n7418529635\n741852963abc\n741852963q\n741852963qaz\n741852963s\n741852aa\n741852abc\n741852hf\n741852poi\n741852qaz\n741852qq\n741852qw\n741852qwe\n741871168\n741895623\n74189632\n74193418\n741951321\n741963456\n741963852\n74196385211\n74197419\n741a852c\n741B169d\n741qazxsw\n74218888\n742287068\n74237423\n74254516\n74257425\n742677600\n74272727\n74287428\n742C0141\n742e61BC\n74318341\n74327432\n743334603\n7433510874\n743607da\n74387438\n74391731\n74411a4c\n744329a2\n744429086\n744500891\n74458450\n74468213\n74511941\n74511942\n74513203\n74517451\n74517593\n74518156\n7.45192E+12\n7451bxzy\n7451cq3565\n74520123\n74520520\n7452074520\n745211314\n74521521\n7452174521\n74521940\n745227f2\n74527452\n74531940\n7453974536\n74541852\n74548441\n745606775\n745632100\n7456398521\n74564561\n74567456\n7457457456\n74587458\n746096087\n746105810\n746190118\n746215317\n74627462\n74646324\n74651175\n7468047123\n74686988\n74695656\n746997643\n7472dsfs\n747322884\n74757475\n7476028f\n747747747\n74777477\n74783105\n74787478\n747982833\n7480WXWY\n7481592630\n74817481\n74820403\n74821350\n748253258\n7483974536\n74841yunji\n74859612\n748748bs\n74897446\n74904781\n74927123\n7494459230\n7496455000\n74967496\n74988856\n74991118\n749c4AE1\n74AA18f4\n74ab780D\n74B466c1\n74BA25e2\n74BC4d91\n74CC0012\n74EE076d\n74F769a1\n74F8592d\n74m10d10\n74m8w1997\n7501130428\n750115000\n750115fyj\n750129788\n75017501\n75021400\n7502160770\n750218121\n750322400\n7.50327E+11\n750330467\n7504220116\n75043352\n7505060506\n75057505\n750714223\n75081003\n750811007\n75087508\n7509012502\n75090721\n75091600\n75100612\n75107510\n75108351\n751104395\n751105369ljf\n7511110225\n7511110225fjf\n75111111\n75112200\n75115287\n75117511\n751211261\n75127512\n7512800824\n7512945huangyi\n75147078\n75157515\n751629374\n75165673\n75167516\n75168796\n75170000\n75181227\n75187181\n75187518\n751953123\n751965636\n75197519\n75201447097\n75207520\n75210812\n75211314\n75214247\n75215257\n75215415\n75217521\n752188zxc\n752499658\n75253208\n75253450\n75257525\n75264791\n75267526\n7528230e\n75299580\n7531111111\n75312468\n753126984\n75313372\n75315900\n753159123\n753159456\n7.53159E+11\n7531594682\n7.5316E+11\n75315982\n753159852\n753159zdq\n75315f64\n75317531\n7531875318\n75318866\n753214896\n75321598\n75332302\n753369951\n75337867\n753421869\n7534623880\n75358972\n7536dodo\n753753753\n753852951\n7538660abc\n753869421\n75392258\n753951000\n7539510ppp\n75395112\n75395123\n7539512486\n7.53951E+11\n75395146\n7539514682\n7539514862\n75395155\n753951753\n75395175952\n753951789\n75395182\n7539518246\n7539518426\n7539518462\n7539518624\n753951aa\n753951abc\n753951ppp\n753951qaz\n753951qq\n753951wyl\n75403426\n754074074\n7541010wen\n754403350jzh\n75456385\n75457545\n75463037\n75474477\n75487632\n75488051\n7550767A\n755583611\n75568148\n75572222\n7557452119\n755946112\n75597559\n7561255000\n75617561\n75620000\n7562574623\n75643358\n756474232\n75672575\n75687568\n756891288\n75691003\n756C5743\n757233335\n75728817\n75732711syft\n75747574\n75757575\n75757758\n7575850824\n75760324\n75760807\n75762000\n7576361987\n75767576\n75767778\n75777577\n7577808284\n75779773\n75780216\n75787578\n75795732\n7579tang\n75800421\n75811101\n75815524\n7581803234\n75818191\n7582231C\n75825513\n7.58259E+11\n75827341\n75843689\n7585201314\n7585211314\n75861283\n758615123\n75865877\n758726351\n758758758\n7587587758\n75887588\n758B0e97\n7590454308\n75938327\n75945032\n75948040\n759644ivx\n75964955\n75979539\n75A4312f\n75A94e79\n75ca6256\n75E17d7d\n76007321\n7.601E+11\n760120221\n760207only\n760208107\n76021598\n76025068\n760324lhb\n760325kk\n76037603\n760405tom\n760420pp\n760513171\n76062011\n76065605\n7606853a\n76070655\n760724wy\n7.60813E+11\n76088874\n760922456\n760943F8\n760988love\n7610142037\n761018152\n76102088\n761025ky405\n76107610\n7611031030\n76111206\n761125sha\n761126jq\n76117611\n761210252\n761234567\n76127612\n7612ABCD\n76147614\n76177617\n76187618\n762006xx\n76207620\n762121ji\n76223305\n76225581125\n76227622\n762404yl\n76243363\n76250003\n76254571982\n76257625\n76281020\n76287628\n76291414\n76297629\n7.63093E+11\n76327632\n7635508477\n76376381\n76469028\n76499766\n764e50d7\n76517651\n76522727\n7653441775\n76537653\n76540366\n765432100\n76543211\n7.65432E+13\n76543218\n765432189\n7654321@ok\n7654321a\n7654321abc\n7654321x\n76547654\n76578623\n76589084\n76597659\n76625ssll\n7663190407\n76636157\n766373988\n7666185ll\n76666187\n76667666\n76677667\n76683262\n76687668\n76698008\n767443832\n76750901jk\n76754969\n76757675\n76765252\n7676wyfc\n7677112826\n7677741231\n76777677\n767779jlj\n767785530\n767922B8\n76792603\n76797679\n76814912\n76817681\n7.68289E+12\n76847684\n76856783\n768594111\n76859413\n76867686\n768840176\n76887688\n76897689\n76897986\n76942163\n76985227\n769872kb\n76987698\n769929929\n769b6AC5\n76A61c47\n76A7776d\n76af7FDD\n76B70add\n76c245a7\n76C4031f\n76c77cad\n76e33bd6\n76e944BA\n76EF5ce4\n76f877E4\n76haofjcdc\n76MSYGRQ\n77002433\n7.70E+12\n77007700\n770077789\n770128711\n77017701\n770202452\n770208292\n770209071\n7702124559\n770225yzy\n7.70228E+11\n7.70321E+11\n77033357\n770402627\n77050510\n770505jw\n770513wbp\n77051922\n7.70524E+11\n7705281510\n770535ye\n77060900\n770611021\n770615478\n770627tangfeng\n77071833\n770725151\n77077707\n770805znnznn\n7708241234\n77087708\n7708801002\n770880123\n7.70881E+11\n77088470\n7709090825\n77091623\n7.70917E+11\n7709170411\n7.70918E+11\n77092800q\n7709291224\n771002abc\n77100649\n771006bsk\n7.71018E+11\n7710201220\n771023abc\n771030919\n771030zhuang\n77107710\n771110WUYANZHENG\n77112200\n77112233\n771125gg\n77117711\n771177wang\n7711800216\n77118428\n7.71202E+11\n7.71203E+11\n77121212\n771216771\n7.71221E+11\n771226qbn\n77123456\n7712377123\n77127712\n771314200\n771314520\n77144253\n7.71473E+13\n77147286327412xx\n77148685\n77151345\n77157715\n77158950625\n7715895625\n77160200\n77187718\n7.71881E+12\n77198485123\n77201314\n77213540\n77213db6\n7721677216\n77217721\n77223940\n77224775ty\n7722610121\n77227722\n77238848\n77247724\n77255277\n77272777\n7.72836E+12\n77287728\n772963D4\n77297729\n7729783b\n77310DE5\n77315363\n77317731\n77318339\n77323713\n77325818\n77337733\n77357864\n773636cuizhen\n77371234567\n77374321\n773873176\n7.73905E+11\n77402473\n77415093\n77417741\n77418211\n77419719\n77419743\n77436268\n77441100\n77441188\n77447744\n774517397\n774566ytyt\n77487748\n77493618\n77493721\n77496636\n77497749\n77498864\n77499981\n77501bb3\n7751990909\n77520520\n7752077520\n77520wolf\n775211314\n77521521\n7752152177\n7752177521\n77521888\n77530520\n7753588790\n77543520\n77551314\n77551888\n77553300\n77553311\n7.75534E+11\n77555577\n77557755\n77571175\n77581009\n7758115945\n77581258\n77581314\n77581314258\n77581314520\n77581314521\n77582258\n7758251314\n77582525\n7758258..\n7758258007\n77582581\n7758258171\n7758258456\n77582586\n77582587\n77582589\n775825899\n7758258aa\n7758258AAA\n7758258abc\n7758258asd\n7758258chenbi\n7758258l\n7758258li\n7758258ok\n7758258yy\n7758258z\n775825wlw\n77585188\n775852000\n77585201\n7758520123\n7758520521\n7758520530\n7758520a\n7758520aa\n7758520qq\n7758521*\n7758521**\n77585210000\n7758521001\n7.75852E+11\n775852101\n77585210a\n775852110\n77585212\n775852122\n775852123\n7758521234\n77585213\n7758521314\n775852132\n7758521321\n7758521333\n77585213344\n775852134\n7758521345\n7758521369\n77585214\n77585215\n7758521531\n77585216\n77585217\n775852177\n7758521789\n77585218\n7758521888\n77585219\n775852199\n7758521aaa\n7758521ABC\n7758521abcd\n7758521asd\n7758521c\n7758521delete\n7758521hao\n7758521hy\n7758521jj\n7758521l\n7758521li\n7758521liu\n7758521ll\n7758521love\n7758521lt\n7758521ly\n7758521m\n7758521mm\n7758521ok\n7758521pp\n7758521Q\n7758521qaz\n7758521qw\n7758521qwe\n7758521s\n7758521w\n7758521wan\n7758521ww\n7758521x\n7758521xiao\n7758521xu\n7758521y\n7758521yy\n7758521z\n7758521zrh\n7758521ZZ\n77585240\n77585241\n775852416\n77585261\n77585521\n77585821\n7758591q\n77585920\n77585921\n775875258\n775885520\n775885521\n77588611\n77588858\n77589158\n77589910\n77589911\n7.75899E+13\n7758991521\n77589958\n7758baby\n7758coco\n7758d2wenmei\n7758woaini\n7758zmhmj\n775ftplus\n77601770311\n77623803\n7.76284E+11\n77630wanan\n77639401\n77654321\n77656123\n77665544\n77667766\n77668899\n7767593831\n77687768\n77697083\n777020f2\n777052777\n77707770\n777222111\n777333111\n7774056578\n777444111\n77747774\n777555020\n777555333\n77757775\n77758521\n77764800\n777666555\n77767776\n77771111\n77771117\n77771126\n77772222\n77773333\n77774444\n77775555\n77777771\n7777777272\n77777773\n7.77778E+11\n7.77778E+15\n7.77778E+19\n777777788\n7777777a\n7777777hh\n7777777s\n7777777z\n77777788\n777777abc\n77780710\n7.77811E+11\n777847213\n77787778\n7778791314\n777888222\n77788845\n777888777\n7.77889E+11\n7.78E+11\n777asu777\n7780521aaa\n7780853hnjj\n778146100\n77817781\n77821469\n77824500\n7782577825\n77827782\n778365985\n77839150\n778455328\n77847941\n77857785\n77877787\n7787781982\n778778778\n77877linxi\n77879562\n77880099\n77881122\n77881234\n77881314\n778819881010erin\n77882010\n77882211\n77882500\n77882501\n7788250123\n7788250250\n7788250520\n7788250521\n77882510\n77882521\n7788325free\n77883311\n77883344\n77884144\n77884455\n778845699\n77885200\n77885201\n77885201314\n7788520521\n7788520530\n7.78852E+12\n778852100\n7788521000\n77885211\n7.78852E+13\n7788521a\n77885354\n77885432\n7788552244\n77885544\n77885566\n77886654\n77886655\n77887878\n77888877\n7.78895E+13\n7788945a\n778899000\n77889910\n77889911\n77889922\n77889944\n7788994455\n7.78899E+11\n778899456\n77889949\n778899521\n77889955\n77889966\n7788996c\n7.789E+11\n778899789\n77889999\n778899aa\n778899abc\n778899hhnn\n778899pp\n778899qq\n778899sx\n7788yyuu\n7789077890\n77891889\n77897789\n778A3317\n779001682\n779097008\n779108505\n77917791\n77924826\n7792686sdj\n7795578abc\n77958891\n77960619\n7796992001\n77970515\n77977797\n77978346\n7798381a\n779846321\n77986410\n77987798\n77991133\n77996153\n77997799\n77997979\n77998866\n7799889900\n779996109\n77999977\n779f3FA1\n77af5311\n77cong05na19\n77D221d6\n77D350b0\n77db21b7\n77f525f8\n77family77\n77linxin\n77o88o99o\n77woaini\n78.12.16\n78000000\n78007800\n78007867\n78009415\n7800zser\n780105jerry\n780110123\n7.80126E+11\n780210++\n7.80215E+11\n7802153316\n780218wjj\n780225121\n78027802\n7803251033\n7.80327E+11\n78033188\n7804041123\n780419391\n7804281231\n780428wucai\n780515667\n780524461\n780611319\n780617594\n78062898\n780628sj\n78065587\n78066157\n78068888\n780701ZR\n78070ca9\n7.80711E+11\n780725361\n7807280831\n780787200\n780808..\n7808131010\n780825507\n78087808\n7809073233\n78091215\n78091234\n7809274925\n78097809\n781006lh\n78101815\n78102244\n7810249180\n78102800\n7810291013\n7.8103E+11\n78103946\n7810578105\n78107810\n7811231209\n781123aa\n78112600\n78112907\n78117040\n78117811\n7.81201E+11\n781201aa\n78120400\n78120511\n7.81209E+11\n78121012\n781215bobo\n7812180515\n78122030\n781221641\n781221li\n78122254\n78122500\n781225zb\n781226409\n781229217\n78123456\n78126128\n78127812\n78137813\n781398917\n78156356\n78157815\n78161216\n78167816\n781704707\n78171234\n7817736218\n78177817\n781789901\n78187818\n781909qy\n78197819\n78199018\n78200000\n78217821\n78219703\n78221120\n78237823\n78246590\n78250000\n78257825\n78264646\n78265426\n78267826\n78281631\n783073709\n783118300\n78314wxj\n78316788\n78321496\n7832478324\n78327832\n78329333\n7836178361\n783630ac\n78397839\n783D443b\n784107C1\n78424502\n78428989\n784395231\n78443554\n78447844\n78451200\n784512369\n78453322\n7845410163\n78456123\n78457845\n78470183\n784713024\n78474648\n78477847\n784778621\n7849516230\n784a0906\n7850191650\n785040xxxx\n78510282\n78517851\n7852314569\n785232587\n7852378523\n7852396541\n785412369\n7854229aaz\n78542435\n7854252050\n78547854\n785510fhb\n78557855\n78560124\n78563412\n78564321\n78565678\n78567856\n78569412\n7857487b\n78579964\n78583520\n78587858\n786046144\n78615218\n786174yaomai\n78617861\n7861tycom\n7862951a\n78642615\n78645780\n78645923\n786489978\n78654321\n78657865\n78669295\n78680608\n78687868\n78697869\n786kjp7913bv4\n7872267917\n78727872\n78737808wt\n78777877\n78779920\n78780717\n78780826\n78781113\n7878444@@@\n78785178\n78785478\n78786788\n78787758\n78787788\n787878qq\n787878qqqq\n78788787\n78789090\n7878asdf\n78790221\n78797879\n78798022\n78798081\n787A6266\n7.88059E+13\n788159166\n78817881\n7882451lu#!(\n78827882\n78831034\n78832187\n78835596\n78836481\n78837883\n7884145202\n7885684848\n78869459\n78871234\n78871dea\n7887316123\n788750612\n78877887\n788788788\n7889477a\n78897889\n78898472\n789*789*\n789+456+123\n78900000\n78900789\n78900987\n78901234\n78907899\n78908325\n78909488\n7890uiop\n78910086\n789101112\n78910924\n78910jqk\n78912300\n789123123\n78912345\n789123654\n789123963\n789123qaz\n789123qpalzm\n78917891\n7892281227\n78923821\n789258zx\n789321456\n789369123\n78937893\n789415263\n78943561lhx\n7894513joe\n789453boss\n789456000\n789456122\n789456123..\n7894561230xk\n7894561233\n7894561235\n789456123aa\n789456123abcd\n789456123f#%!@\n789456123l\n789456123qaz\n789456123qq\n789456123qwe\n789456123sll\n789456123z\n789456123zxc\n789456123zxcvbnm\n78945613\n78945632\n789456321\n7894563210\n789456369\n789456456\n789456654\n789456789\n789456852\n789456aa\n789456ab\n789456ask\n789456kk\n789456plok\n789456poi\n789456qaz\n789456qazwsx\n789456qq\n789456qw\n789456qwer\n789456qwerty\n789456zxc\n78946123\n789466123\n78947894\n78948968\n789512300\n78951231\n7895123456\n789512346\n78951235\n789512364\n7.89512E+11\n7.89512E+13\n7895123a\n7895123dssgod\n7895123z\n78951753\n78951807q\n7895201314\n78952100\n78952123\n789524163\n7895278952\n78954321\n78957895\n78963210\n7896321450\n7896321456\n78963215\n789632541\n7896378963\n78965400\n789654123xk\n789654456\n78965504\n78967896\n789683ltt\n789685900\n7896861688\n789741753\n78974b15\n78977897\n78978900\n789789123\n789789456\n7.8979E+11\n7897897899\n789789987\n789789AA\n789789abc\n789789qq\n789789yangyang\n789789yy\n789852456\n78987898\n78989575\n7898vont\n7898xiao\n78990201\n78992688\n7899386qwe\n789951123\n789951753\n789963321\n78996544\n78997899\n78998611964\n789987123\n7.89988E+11\n789a456b\n789d123d\n789D3910\n789E24aa\n789matry1\n789qazwsx\n789qwe456\n789qwe789\n789uiojkl\n789whfxy\n789xue456\n78aa0426\n78ae167a\n78b778AD\n78B94017\n78C7555d\n78d16d24\n78D3502f\n78e155AB\n78E31b08\n78f26352\n78miller08\n79.104*rskl\n79006909xiao\n79010101\n790102fair\n790103254\n790118jay\n7901212121\n7901220428\n7901235ai1\n7.9013E+12\n79013149\n790206zzu\n790220abc\n7902723xzs\n79028468\n790318.7904\n79032968\n7.9036E+11\n790503_ln\n790505111l\n7905231982\n79060112\n790606081\n790621ll\n790712033\n79077907\n79080280928\n79081500\n7.90824E+11\n79087908\n790901083\n79090916\n7.90911E+11\n790912lcz\n790916sp\n790922aa\n790926471\n7909271030\n790928252\n79092900\n790vv318\n791004wyn\n791006000\n7910100923\n79101078\n7.91011E+11\n791012xxx\n791014zyj\n7.91016E+11\n79102600\n7.91028E+11\n791030lulu\n79107910\n79110303\n791106li\n7.91109E+12\n791108wx\n7.91109E+13\n7911128873\n7911165267yan\n79112000\n791120anan\n79112167\n7.91124E+12\n791125061\n7.91128E+11\n791129001\n79113011\n79117911\n79118888\n7.91202E+11\n791202123\n791203104\n79120500\n7912086a\n791211067\n79121300\n79121366\n791214owen\n7.91217E+11\n7.9122E+11\n79122411\n791226007\n79122800\n791231.2\n7912379123\n7.91246E+11\n79126777\n79127912\n791287ls\n79134682\n791346825\n79137913\n79138246\n791382465\n7914639259\n791509988\n791513236\n79154495\n79165f8f\n79167761\n79187918\n791928112\n79201019\n79217921\n792220zx\n79225047\n79225693\n79227922\n79236851\n79241237\n79242b12\n79246484\n792558922\n79281717\n79287928\n792913yyl\n792d0BE3\n79301c9c\n79314862\n793148625\n7.93172E+12\n79317931\n79318356\n793186245\n79319924\n79323846\n7932624a\n79347231\n79352168\n79357935\n79422728\n79426066\n79442183\n794568213\n7945685213\n79457945\n79461300\n79461328\n79461379\n794613825\n7947syli\n79487475\n79494472\n794lla82\n795027743\n79507514\n79513579\n7951379513\n795138462\n79527952\n7953871yu\n7954263885\n79543213579\n79547954\n79556055\n79557955\n7956277qw\n79570182\n79587000\n79587958\n79601111\n7962684235\n796290801\n79637963\n7964323673\n79647964\n79652597\n79653109073\n79687505\n79687968\n796900qh\n7970140085\n7972376801\n7972979729\n79730414wq\n79731387\n797338341\n7974236e\n79757246\n79764616\n79779806\n79787776\n79791546\n79791779\n79795252\n7979612689\n79797799\n7979797979\n7979879798\n797B77ae\n797fulan00\n79807980\n7980811108\n79808182\n7981779817\n79817981\n79819256\n7982079820\n798210762\n79821218\n79821539\n79823152\n79823156\n79827982\n79828483\n79831012\n79837983\n79838112334\n79840620\n798465132\n79847984\n79848120796\n7985082a\n798541348\n798559524\n79860502\n798618bc\n79873279\n798798798\n79887988\n798955024\n79897989\n798A3ff7\n798f37ae\n79917991\n799278777\n79927992\n7994970004\n79970630\n799712345\n79975926\n79977997\n799800zz\n79987998\n79B67b65\n79bv1010\n79cc0009\n79D96bca\n79E0400a\n79love82\n79y60l52\n7A186f0d\n7A2D1945\n7a3016c5\n7A384239\n7A391417\n7A433309\n7A457474\n7a631a9b\n7AB43e14\n7ab62120\n7abc62d0\n7AC26d16\n7b1026CD\n7B2069c1\n7b222gxdx\n7B2E7b15\n7B3340b8\n7b3b5d8e\n7B3B7f2f\n7B4239b3\n7b460682\n7b786FE2\n7B794324\n7B7A5450\n7B8C08ed\n7b8e4665\n7B96176c\n7BC53c9c\n7bf74cf3\n7bfb6ed9\n7c0d62c5\n7c3000A2\n7C435c35\n7c595458\n7C7465z3\n7C7620bc\n7C930acd\n7C9B40b5\n7ca67F72\n7cac4122\n7careyjiji5\n7CB43865\n7CBE745c\n7cd817AE\n7CF138e3\n7CFA2508\n7cj1bszTKE\n7ck1bszTKE\n7cq2guBVMG\n7cr2guAVLG\n7cr2guAVMG\n7cr2guBVMG\n7cr2huAVLG\n7d16373c\n7d1c5B3E\n7D340110\n7D4328e6\n7d491029\n7D4D39f4\n7d75119D\n7D777e9a\n7da50229\n7dbd14C2\n7dcb56fd\n7df511b1\n7dp2fvBWNH\n7dp2fvCWNH\n7dq2fvBWMG\n7dq2fvBWMH\n7dq2fvBWNH\n7dq2gvBVMG\n7dq2gvBWMG\n7e073d06\n7e0a0d0e\n7E1A25d3\n7E217a13\n7e2272e7\n7e5a54B8\n7e814400\n7EA47f8c\n7eb663AD\n7eb76466\n7EC5557c\n7EC61e13\n7ECA5da7\n7ecb1f12\n7ecd77A8\n7ED65486\n7ef52595\n7EF8500a\n7Exe3Zaa7u\n7Exe3Zaa7v\n7Exf3Zaa7u\n7f107532\n7f234f62\n7f4c5B3B\n7F622c69\n7f65787E\n7F6D08d3\n7F703f1f\n7F75270c\n7F962520\n7FB10d15\n7fe32943\n7FF954de\n7Fxf3Iba8t\n7Fxf3Jaa7u\n7Fxf3Jaa8u\n7Fxf3Jba8t\n7Fxf3Jba8u\n7Fxf3Zaa7u\n7g707g07\n7Gxf3Iba8t\n7Gxf3Ibb8s\n7Gxf3Ibb8t\n7h50f2y3\n7h8006ln\n7lixiang\n7q8j9k10\n7shang8xia\n7uj8ik9ol\n7ujm6YHN\n7wwwqqq7\n7x4y84672z\n7xiaoshi\n7xxf3Ibb8s\n7xxg3Hbb8s\n7xxg3Hbb9r\n7xxg3Hbb9s\n7xxg3Hcb9r\n7xxg3Ibb8s\n7ygv7ujm\n7zmmq37a\n8&Pa?H>6\n800000000\n800015587\n80008200226\n800101dw\n8.00107E+11\n8001106201\n8.00125E+11\n800124kuan\n800131961\n80018001\n800200200\n800202yyh\n800216261\n800227yui\n80022900\n80028002\n8002920900\n8003014814\n800301lee\n800315xzq\n80031600\n800325zp\n80036265\n80038003\n800405191\n800415616\n800415pixy330\n8004295305\n80047478\n80048004\n800504062\n8.00511E+12\n80051313\n80052001\n800523qing\n8005250525\n80053118\n80058005\n800612002\n8.00626E+11\n8.0063E+11\n80066443\n80067657\n80068006\n800705hgs\n800715001\n80072580\n80078007\n80079123\n800806081\n800809yang\n8008101992\n8008105858\n8008108088\n800810820\n8008108888\n8008108898\n800811394\n80081288\n8008202255\n8008203158\n8008203870\n8008205555\n8008207827\n800822shm\n800823823\n8.00825E+11\n80082820\n8008289069\n8008301796\n8008302830\n8008309138\n8008601188\n8008768999\n80088008\n80090909\n800912666\n800925251\n80098009\n8009881314\n800h3xcdah\n800h3xddag\n800h3xddah\n8010061113\n801007053\n801011ab\n8.01013E+11\n8.01017E+11\n80101799\n80101818\n8.01024E+11\n801024yy\n80102500\n80107107\n80108010\n80108301\n80108791\n8.01106E+11\n80111800\n801122727\n801122jun\n801124xht\n801125022\n80112711\n801128643\n80118011\n80120000\n80120511\n801207001\n801207551\n8.0121E+11\n80121212\n801215242\n8.01217E+11\n8012180121\n801218gl\n80121980\n80122108\n801224rb\n801226eeee\n80123456\n80124800\n80126801\n801269111\n80128012\n8.01288E+12\n80134567\n80138013\n801401Li\n80148014\n80155108\n80158015\n80168016\n80178017\n801801801\n80188018\n80188717\n801899web\n80198019\n80201108\n80208020\n802114045\n80214000\n80218021\n80221018\n80228022\n80234006\n80235120\n8023love\n80244037\n80248024\n80248184\n80258025\n80263651\n80268026\n80278027\n802802802\n80288028\n80298029\n80301974\n80302222\n80308030\n80310652\n80318031\n80320971\n80328032\n80335050\n80338033\n80368036\n803803803\n80401100\n8041429hj\n80433743\n80438043\n804502075\n80452043\n80458415\n804585518\n8048170501\n80508985\n8051780517\n8052142136\n80530121\n80540230120\n80546867\n80565201\n80568056\n80578136\n8.05808E+11\n80582418\n8.05919E+11\n80598059\n80608040\n80608060\n80611999\n80619487\n806195119\n806205138\n80635772\n80641777\n80644448\n8065180000\n80658065\n80668066\n80678067\n806846515\n80685555\n80688068\n8071880117\n80731168\n80768216\n807845575\n80793136\n80797895\n80798079\n80803323\n8080808080\n80812000\n808137121\n808178295\n80818081\n80818283\n808202202\n8082123!@#\n80827879\n80828082\n8082983103\n80848084\n80858969\n80859700\n80868086\n80868088\n80868088et\n80878087\n80879520\n808808808\n80888088\n808895115\n8089144511\n8089gbed\n80901233\n809055796\n80909799\n80910427\n809235466\n80928yrw\n80932621\n80938093\n8094258083\n80948094\n809530352\n809557017\n80958095\n8095abcd\n809707112\n809728qm\n80974543\n809809809\n80983876\n80988098\n8099116a\n80992236\n80998099\n80g11h24x\n80wshishui\n810.810.\n81008100\n810115-810115\n81012121aaa\n8.10127E+11\n81013147\n81018101\n810202cn\n810210519\n810216viviAINI\n810223447\n810301hhc\n810309001\n81031020\n8103251983\n810328aaa\n81033510\n81033629\n810381423\n8.10402E+11\n8104078080\n81040888\n81040iew\n81042400\n8104321520\n81044915\n81045717\n81048104\n810518031\n810521why\n8.10526E+11\n810528412\n81058105\n8106020501\n8.10619E+11\n81062037\n8106294715\n81068106\n81070058\n8.10704E+11\n810711ljw\n810714lf\n810721zj\n81080700\n810810810\n8108121243\n8.1082E+11\n8.10825E+11\n81083000\n8.10832E+11\n81088108\n810910sj\n810911315\n810913441\n810917911\n8109240240\n810926bbj\n810928201\n81098109\n810h3xddag\n81100300\n811004001\n81101066\n811012520\n811015gz\n8110166877\n811016ab\n81101700\n81101819\n8.11019E+11\n811018hao\n81101900\n81102100\n8.11022E+11\n811026001\n811028ufo\n811028zyb\n81108110\n811109059\n8111091225\n81111111\n81111200\n8.11113E+11\n81111627\n8111170430\n8111171117\n811119tan\n8111286600\n81115222\n81115891\n81118111\n81120000\n8112002l\n8112016555\n811201hxh\n811206504\n81121500\n811218445\n81121910426\n81122400\n811224bai\n8112261208yaw\n8.1123E+11\n81123521\n81124130\n811272as\n81128112\n81138113\n81148114\n811563520\n81158115\n8115865429\n811590di\n81168116\n81168247\n81170859\n81172693\n81176657\n81177810\n81181123\n811811811\n81181903\n811822833\n81185588\n8118596ads\n81188118\n8118lee8295\n81195252\n81198119\n81198326\n81199699\n811h3wdeag\n811h3wdebg\n811i3vdebf\n811i3veebe\n811i3veebf\n811i3vefbe\n811i3wdebf\n811i3wdebg\n81200347\n812057959\n81210300\n812140fj\n812140qj\n81215065\n81215891\n81218121\n8121812zlz\n81221933\n81228122\n81229190\n8123456789\n81234568\n81235888\n81238123\n81248124\n81258125\n81258224\n81258913\n81260161990\n812618516\n8126770123\n81268126\n81275868\n81278127\n812812812\n81282868\n81288128\n812925bin\n81295779\n81298129\n812o832o\n813140yym\n81318131\n8133090qq\n813344888\n81338133\n81342989\n81344062\n81345620\n81357646\n81358135\n81360211\n8136jlin\n8137809cwg\n81378137\n813813813\n813820612cs813\n81392000\n81392412\n81408140\n8141782520\n81418141\n81420228\n814342455\n81438143\n81448144\n814648001\n81478147\n8147948cvb\n814814000\n814814814\n814833147\n81492366\n81507891\n81508150\n81510000\n81510614\n81517650\n81518151\n81520560\n81524491\n815252312\n81525426\n81528152\n81529wjl\n815370296\n815424815\n8154987299\n8155167238\n81558155\n81558528\n81558888\n815607034\n81563339\n81568156\n81571152\n81578157\n815815815\n81581684\n81585746\n81588158\n81589299\n81596746\n81597257\n81598159\n81619484\n81620576\n81621523\n8162187891ben\n81624518\n81630829\n816329918\n816357492\n81636003\n81638163\n81639640\n81644936\n8164493625\n81658911\n81665252\n81668166\n816816816\n81688168\n81688169\n81690301\n81690687\n8169304026\n81698169\n81698702\n81719413\n81726354\n817263544\n8173531747\n81741250\n81745188\n81758175\n81768176\n81771194\n8177186666\n81774117\n81778177\n817817817\n81782922\n81788178\n81797230\n81797954\n81798598\n81803589\n81808180\n8181818181\n81819811025\n81821001\n818233**\n81825007\n81828182\n8182838485\n8.18284E+11\n81828713\n81829727\n81834039xx\n81840077\n81854616\n81857900\n81868186\n81870292\n81871940\n81878100\n81878187\n818799wy\n81880103\n818818818\n8188188188\n81886468\n8.18869E+15\n81888181\n81888188\n8189081890\n81891111\n81898189\n81899909\n81908190\n81909111\n81910383\n81910606\n81911996\n819149746\n81917246\n81918191\n81918726\n81923000\n81923zyyzyy\n81927123\n81928192\n819300abcd\n81931928\n8193967885\n81948194\n81951795\n81953721yxm\n81958195\n81968196\n81969551\n819793568\n8197lisihan\n81981082\n8198123q\n819819819\n81983268\n81995499\n81998165\n81998199\n819982429\n82006989\n82008200\n82010200\n8201053711\n8201080347\n82010988\n8.20111E+11\n82011891\n820118ambit\n820123fjm\n82012800\n820129530\n82013016\n8201304025\n82013633\n82015960\n82018201\n820202132\n820202cu\n8.20207E+11\n8202104477\n82021200\n82021300\n820215200\n82021522\n820219bb\n82022206py\n820222191\n820222mqw\n820234416\n82023lsu\n820281812\n820281813\n82028202\n82028890\n820305bornjiayou\n82031600abcd\n820319lee\n820321233\n8.20402E+11\n820404101\n820409001\n8.20415E+11\n820414mm\n820421\n82042288\n82042500\n8204532000\n82049046\n820505578\n820516ok\n820516swj\n82051781\n820521aaa\n82058205\n8206070608\n8.20608E+11\n82061110\n820617520\n8206191104\n82062091\n82062282\n820622cj\n820626815\n8.20628E+11\n820629444\n82068206\n820701753\n820704514\n8.20707E+11\n820717hb0gag\n820722abc\n82072500\n8.20728E+11\n82074300\n820812017\n82081700\n820820042\n820820820\n8208208820\n820821385\n820830715\n820831bellamy\n82088183\n82088208\n82088888\n820902026\n8209090324\n820920731\n8209274843\n82096405\n82098209\n8210010815\n82100128\n82101123\n821013830514sl\n82101511\n821015wt\n82101911\n82101922\n82102027\n82102201\n82102355\n821024pp\n82102565\n82102599\n8.21026E+11\n82102700\n82102800\n8.21029E+11\n8.2103E+11\n82103133\n82105000\n82105011\n82108210\n82108250\n82108911\n82110000\n8211162a\n821119205\n8211209@\n821121408\n8211241234\n82112500\n8.21128E+11\n821128552\n821128821\n821128yuhui\n82116506\n82118211\n82120082\n821202003\n8.21202E+12\n821205001\n8212121212\n821212tl00\n82121388\n8.21215E+11\n82121500\n82121503\n821215130\n82121600\n821216jg\n821218888\n8.21222E+11\n82122230\n821225ting\n82122992\n82123456\n82125168\n82126502\n82128212\n821283tzf\n82130000\n82138213\n8.21427E+11\n82148214\n8214941cxs\n82151822\n82155289\n82157008\n82158215\n82160339\n82160995\n82160999\n82161098\n821616abc\n82162628\n82168216\n82172159\n82172570\n82178217\n82181881\n821821821\n821829520\n82188218\n821890806\n821911lyy\n821912124\n8219143h\n82192521\n82195820\n82198219\n82199488\n821vicky\n82201767\n82205891\n82211700\n82211745\n82218221\n82219561\n82220137\n82222237\n82229999\n82232434\n82233738\n8223373812\n82240420\n82242861\n82246008\n82250312\n822546drf\n82258225\n82261201lx\n8227185luans\n82278086\n82278227\n82288228\n82290783\n82290975\n82298229\n8229890r\n822h4Eddan\n822yuantan518\n82305511\n82310000\n82310336\n82311025\n82314810\n82315262\n82318231\n82319136\n82320831\n82324549\n8.23272E+13\n82328232\n82332300\n82334488\n82336969\n82338162\n82338233\n82341340\n82341452\n82348234\n82352123\n82352300\n82353188\n82353598\n82354057\n82355731\n82358235\n82358390\n82368236\n82373688\n82374237\n82376461\n82378237\n82378358\n82379721\n8238040888\n823823823\n823859523\n82388238\n82391022\n82393263\n82395852\n823ppppp123\n82402133\n82408240\n82411290\n82414030\n82417706\n82418241\n82421050\n8242377mm\n82424302\n82429335\n82431700\n824451889\n82448244\n82448962\n82456763\n82465555\n824657913\n8246582465\n82467391\n82467913\n824679135\n82469173\n824716105\n82472120\n8247582475\n82476069\n824824824\n8248248248\n82484089\n82488248\n8248self\n82503250\n82506715\n82508250\n8251004711\n8251082510\n82513687\n8251382420\n82514450\n82518251\n825201215\n82524496\n82525464\n82527707\n82528252\n82528666\n825301018\n8.25307E+11\n82541630\n82546445\n82548254\n82553173\n8255692wu\n82558255\n82562865\n82564565\n82565476\n82568256\n82568578\n82578257\n82578635\n82578782\n825825825\n8258733sxd\n82588258\n82591190\n82596876\n82597758\n82598102\n82598259\n826003900\n826010816\n82601565\n8260581445\n82606614\n82610060\n826100aaa\n82610jkl\n82611611\n8261347e\n82614660\n82618261\n82619972\n8262182621\n82621ljh\n82622590\n8262482624\n82626425\n82628262\n82631802\n82648264\n82650323\n82650502\n82651234\n82651357\n8265902345\n826611226\n82661545\n82668088com\n82668266\n8267220200\n82678292\n82679077\n82690311\n826990321\n82708270\n82714456\n82718271\n82719003\n82719005\n827211325\n82722520\n8272382723\n82725608mm\n82727120\n82729916\n82731798a\n82744266\n82746666\n82753011\n82755852\n82758275\n82760274\n82761609\n82768276\n82769909\n82770335\n82771842\n82775937\n827827827\n82782864\n82791577530\n82795600\n82798279\n82808280\n82811924\n828126083\n828128392\n82814331\n82815626\n82815cia\n82818281\n82821107\n828282jy\n82828469\n82828484\n82828510\n82828964\n8.28295E+13\n82830822\n82831888\n82838283\n82838485\n82844952\n82848284\n82848688\n82849860\n82854088\n82864679\n82865419\n82868286\n82868836\n82876369\n82877582\n828775qu\n82878287\n82880064\n82880504a\n828828828\n8.28829E+11\n82887767\n82888288\n82890083\n82891827\n82898289\n82904314\n82908290\n8291412ajg\n82916424596\n82918291\n82918999\n829200oo\n829201czh\n82920mwy\n82925996\n8292782927\n82928119\n8292877feng\n8293082930\n82931292\n82932324\n82938293\n82947691\n82950203\n82952265\n8295461845\n82959790\n829708yb\n82970988\n82975129\n82975630\n829829829\n82985627\n829867jzg\n829916nc\n82998299\n82MQXT92\n82TGIT92\n83000149\n83001072\n83008300\n83011180\n8301210025\n830124yy\n830131xmxhdy\n83018301\n83020996\n830214cad\n830217001lanzi\n830218117\n83022488\n830227456\n830244wsxp\n83028056\n83028302\n83030588\n83030886\n8303098121\n830312kathy\n830313abc\n830315625\n8303250501\n830326jwt\n830328sice\n8.3033E+11\n83036005\n83038038\n830414092\n83046167@\n83048304\n83049144\n83051399\n830514253\n830520809\n8305248787\n830524999\n830529wf\n83058305\n83059569\n83060610\n830612520\n8.30615E+11\n83062325liu\n83070786\n830711621\n83071212\n83071300\n830720154\n8.30728E+11\n8307285430\n83076713\n830801zz\n830803172\n830806zhe\n830822521\n830830123\n830830830\n83085000\n830911051\n8309140909\n83092190\n830924yi\n830926fdj\n830927qi\n830928wwj\n83098309\n831010520\n831010qaz\n83101120\n831012?rong\n831015489\n831015ljs\n831018aa\n8.31023E+11\n83102381\n83102479\n8.31025E+11\n8.31026E+11\n8.31029E+11\n8.3103E+11\n83108210\n83108310\n83109013\n8.31105E+11\n83111111\n83111138\n831116121\n8311182311\n8311201120\n83112200\n8311221527\n831123add\n8.31125E+11\n83113066\n83118186\n83118311\n83119653\n83120600\n83120615\n83120697\n83120900\n83121220\n83121400\n83121500\n831216225\n831217lilang\n8.31219E+11\n831221113\n8312219445\n831226maggie\n831231210\n83128312\n8313154321\n83134021560\n83145678\n83148314\n83158315\n83158866\n831612583\n83161688\n8316427400\n83164986\n83168316\n83174389\n831782715\n83182514\n831831831\n83183_7915\n83186035\n83186237\n831872us35\n83187878\n83188318\n83188818\n83190287\n83190607\n83198319\n83200167\n83202369\n83205337\n83208320\n83210666\n83211195\n83211yes\n83212930\n8321387cl\n83214653\n83217520\n83218321\n83222121\n83228322\n83229700\n83231323\n83233118\n83234188\n8323691wawa\n83241439\n83241506\n83248324\n832506tt\n83258325\n83265011\n83265935\n83268326\n83269925\n83279186\n8327950288\n83279569\n83279848\n83288328\n8.33013E+15\n83304188\n83305300\n83305777\n83311133\n83313408\n8331663686\n83318331\n83320962\n83322741qqxx\n83323458\n8332783327\n83331206\n83338989\n83339930\n83342899\n83347405\n833525877\n8335438ok\n83358474\n83358897\n83360000\n83360660\n83365116\n83374084\n83381011\n83381099\n83384706\n83385886\n83387198\n833880hql\n83388338\n83390206\n83401189\n83410000\n834110517\n83411438\n83415198\n834159672\n83416666\n83416938\n83417521\n83417852\n83418341\n8.34183E+11\n834196801\n8341abcd\n83429317\n83432242\n83432458\n83432458_itlt\n83433658\n83458889\n834661602\n834677629\n83468346\n83471025\n83487542\n83488348\n83498349\n83498486\n83501798\n83504570\n83505467\n83509950\n83518351\n83520339\n8352183521\n835261xy\n83527732\n83528149\n83531217\n83537174\n83538353\n83554958\n83558355\n83561090\n83562124\n83579545\n83582688\n83584669\n83595741\n83596498\n83606071\n83610719\n83613214\n83614159\n83616695\n83617799\n83618361\n8361990625\n83621239\n8362355js\n83624xjz\n8362599101\n83628324\n83635640\n83641827\n83647681\n83648364\n83655781\n83658160\n83658365\n83658901\n83660631\n83663099\n83663359\n83663543\n83665493\n83667777\n83668366\n83669006\n8367115104\n83675549\n83677445\n83687533\n8368791223\n83690639\n83691747\n83706571\n83707433\n83708046\n837179785\n837214001\n83726656\n83728372\n83728682\n83728824\n83750799\n83750979\n83751991\n83755035\n8375503536\n837613cclqq\n83762949\n83765566\n83767330\n837735205\n83774652\n83776419\n83777808\n83777951\n837829318\n83782960\n83788899\n83792817\n83793733\n83800399\n83808380\n83816722\n83819722\n838221791\n83827833\n83828280025\n83828382\n83828495\n83830955\n8.38328E+11\n83833013\n83836034\n83836cao\n83838383\n83841014\n83845818\n83847086\n83848384\n83848586\n83850137\n83858329\n83860308\n83862451\n83863580\n8386881230\n83872387\n83883788\n83888388\n83888888\n83892111\n83898389\n83899466\n83905731\n8391111st\n83914022\n83918797\n839251yxzdgi\n8392783927\n83931589\n83940292\n83941237\n83965144\n83968396\n83976080\n83978952\n839837582\n839858968\n83987823\n83992536\n83998399\n8.39993E+13\n839www521\n83d8055an\n83yj27tg\n84007410\n8400810411\n840103airain\n840107770803xcz\n8401160020\n84012600\n84012713\n8401541054\n84016lotus\n84018401\n8402061521\n84021363\n84026107\n84028402\n84029383\n8.40311E+11\n840317tt77\n840321zhang\n84032437\n840405ly\n840414820\n840422meizi\n840431700\n84048407\n84050108\n8.40511E+11\n840520lp\n840526liu\n840540810\n840581469\n84062211\n840706abcd\n840720djl\n840728520\n840729shmily\n840812ghy\n84088502\n8409133112\n84091682\n84093629\n84095590\n840984082\n8410032007\n84100399\n841003li\n8.41005E+11\n841006qazwsxedc\n84101028\n841010520\n84101205\n8.41013E+11\n841020sgfhey\n841021liyang\n841024520\n8.41025E+11\n84108410\n841105520\n84110871\n841109yl\n841113cb\n841115dtm\n841120zyj\n84112400\n84112735\n84112828\n8411791214\n841182129\n8411823730\n84118411\n841188818\n84119090\n841204123\n841211jin\n841211qwer\n841211swan\n84121277\n84121812\n8412184121\n84122401\n84123006\n841240123\n84124984\n8412699999\n84127841271a\n84128412\n8412992148\n84131420\n84131425\n841314520\n841314521\n841383923\n84138413\n841415wm\n84148414\n841485152\n84155814\n84168416\n84183822\n841841bb\n84188418\n84193526\n8419584195\n84198419\n84201314\n84208420\n84209584\n84210000\n84211295\n842112zh\n84211314\n84215323\n84216020\n84218421\n84218888\n84221014\n84225356\n84228422\n842288214\n84228831126\n84229098\n84232525\n84232591\n84238277\n84238423\n84239382\n84248424\n84250199\n84251314\n84251625\n84258425\n84264373\n84265103\n84265555\n842657913\n8426584265\n84266248\n84267139\n842671395\n84268426\n84268426qqq\n84269713\n8426o8426\n84271406\n84271799\n84272233\n84276891\n84283722\n84296733\n84304498\n84316385\n8431884318\n84321148\n84324lll\n84335793\n84344220\n84346005\n84347833\n84354324\n8.43628E+13\n84367561\n84389460\n84392788\n843992zb\n8439mabc\n84404903\n84406587AILING\n844086875\n8441084410\n84418103\n84421102\n84442635\n84459332\n84471883\n84474459\n844750399\n84478447\n84481575\n84481915\n84484128\n84496183\n84501228\n84512095\n8451284512\n84517316\n84518451\n84518541\n845201314\n84520690\n845211314\n84527542\n84536296\n84541750\n84558900\n84562415\n84568456\n84568606\n84569519\n84570320\n8457685\n84578956\n84579296\n84588028\n84588695\n845961fru\n84601688\n8460222127\n84606793\n84610148\n84610503\n84611111\n84617000\n8461sini\n846215235\n84625694\n846279513\n84628462\n8462984629\n84630507\n84630731\n84637857\n84638993\n84641991\n84675612\n84680726ha\n84680825\n8468501669\n84685874\n84688468\n84690333\n84693141\n84709818\n84714120\n84724209\n84728472\n84736568\n84739825\n84770978\n847721844\n84775766\n84793480\n84799912\n84804155\n84812203\n848150abc\n84816771\n84818481\n84821556\n8482163222\n84822974\n8482579ye\n848261jessie\n84826520\n84831440\n84832329\n84845309\n84846858\n848475ab\n84848484\n84849618\n84849841\n84852439\n84856070\n8.48576E+13\n84858352\n84858485\n84858687\n84861217\n84863652\n848703955\n84870509\n848711wu\n84873321\n84875075\n84875110\n84880633\n84881003\n84884148\n84888488\n84890872\n84892232\n84900454\n84913456\n84916709\n8491684916\n84919182\n84926013\n84933421\n84940219\n84951623\n84954281\n84961078\n84962002\n849723107\n84983740\n84988988\n84992897\n84hangeng\n85000000\n85000365\n85006324\n850102mm\n850105zl\n85011500\n850116jk\n850116lk\n850118ljn\n850123587\n850124326\n85020404\n850205jcy\n850214850214ZXCV\n85022600\n85022930\n850229zjl\n8.5032E+11\n850321czx\n850330dd\n85035003lx\n85037961\n8504012610\n85042961\n85043454\n85048888\n85052427\n850524lpf\n8506080952\n85062355\n850627yanfen\n85068506\n85072300\n850726bb\n850726bibi\n85078507\n85081056\n85081205\n85081300\n85081873\n850818775\n8.50824E+11\n850825aa\n850891318\n8509181138\n85092233\n850923103\n85093863\n85094457\n85100420\n851006byf\n851007la\n8510082524\n85101010\n85101400\n8510176489\n851019qq\n85102079912\n85102136\n8.51026E+11\n85102900\n8.51031E+11\n851030dl\n85103306\n85108510\n851101001\n851104susylee\n851105fq\n851115851\n851120king\n85112300\n851125qq\n851127123\n851130bb\n85114426\n8511485114\n8.51174E+11\n85118511\n85119758\n8511985119\n85120116\n8512092004\n85121100\n85121800\n851218hlm\n851220cmz\n85122220\n85122843\n85122970\n8512309006\n85123456\n85123547\n85125011\n8512585125\n85128512\n85128773mzk\n851306855\n85134266\n85137385\n85138513\n85145871\n85152968\n8515331521\n85154136\n85154745\n85158515\n85161230\n85168516\n85170352\n85176710\n85178517\n851851851\n85185505\n85186235\n8518718a\n85188518\n85192626\n85197459\n85200000\n85200258\n85201314\n852013aspp\n8520665zmj\n85207410\n85208250\n8520963\n85209630\n85210000\n85210960\n85212588\n85213324\n852134679\n85213806\n852147963\n852147aa\n852169300\n85217277700\n85217277708\n85217277760\n85218521\n85218523\n85221016\n8522285753\n85223000\n85223828\n85225624\n85225680\n852258852\n8522750351\n85228522\n8523032abc\n85231333fc\n852369741\n85237285\n85238523\n8524230862\n8.52445E+13\n85245600\n852456111\n852456123\n85245613\n852456753\n8524567913\n852456852\n852456963\n85246373\n8.5247E+11\n85251314\n85258525\n852627582\n85268526\n85270861\n85274282\n852753951\n85276003\n852783hag\n85278527\n852794613\n8528007008njj\n85281614\n852851861\n85286669\n85288528\n85293906\n852951753\n85299800\n852yuzou\n85310568\n85313874\n853142008\n85316917\n85318531\n85324077\n85324310\n8532486424\n85331283\n85331971\n85337216\n85344622\n85347575\n85349868\n85350604\n85368466\n85369317\n85369758\n85370940\n85373027\n85378537\n85384904\n85392838\n85399581\n85404215\n8540514001\n85406078\n85414657\n854184962\n85419879\n85429100\n8543354860\n85436366\n8543857602sy\n85441681nj\n85443393\n85455066\n85457186\n85458224\n85460408\n85465213\n8546593233\n8546833020\n85468546\n8546cjcj\n85471513\n854728990\n85488125\n85498474pp\n85503096\n85512977\n85513335\n85513737\n85515294\n85516545\n85521327\n85521768\n85522628\n85524125\n85524356\n85526317\n85536198\n85543467\n8554488256\n85545023\n85551734\n85560503\n85561092\n85564966\n8556728788\n85568988\n85569825\n85570808\n85578836\n85580870\n85585125\n85588558\n85590860\n85591945p\n85595889\n85597187\n85605862\n85608560\n85608687\n85617466\n85619688\n85621121\n856231234\n856247931\n8562685626\n85627781\n85628562\n85631198\n85633013\n8563329aa\n85635819\n85638319\n85638563\n85639829\n85640889\n85655388com\n85657603\n85658099\n85668566\n85671672\n85673290\n85677743\n85678190\n85678567\n85681374\n85682233\n85683633\n85688350\n85688568\n85693869123\n85698569\n85699166\n85701597\n85703511\n857100ting\n85710471qaz\n85713102\n85713853\n85717820\n85718571\n85720108\n85726571\n85728611\n85731065\n85731516\n857316yuxuan\n85732222com\n85739112\n85753836\n857571818\n85758222\n85758575\n85759351\n85761892\n857655448\n8576685766\n85766871\n85768576\n85769045\n85770318\n85776845\n85777777\n85778577\n85781731\n85783678\n8578666a\n85788432\n85788578\n85789660\n8579124525\n85792865\n85793741\n85794686\n85799917\n85802539\n8581285812\n85817711\n85818581\n85823201\n85823430\n858266999\n85826942\n85833259\n85838583\n85839569\n8584349714\n85848382\n85848584\n85850492\n85850702\n85854859\n85857067\n8585858585\n85862040\n85862605\n85862711\n85863220\n85865469\n85868586\n85868788\n85872934\n8587419yy\n85878196\n85882879\n858877108\n858877108aop\n85888588\n85888890000\n85890243\n85892529xyz\n8589909wyq\n8589934592\n85901970\n85905402xm\n8590678884\n85908590\n85911478\n8591149000\n859141314\n8591785917\n85918960\n85919023\n85923946\n85936001\n85941745\n8.59513E+13\n85955328\n85961209\n85964891000\n85974163\n85978597\n8598411111\n85985076\n85992894\n85997125\n85998505\n85BIZ711\n85yiqjoHzu\n85yiqkpHzu\n86001175\n86001513\n86002125\n86008600\n86010218\n86013358\n860158bbs\n86017523\n860222Aozhang\n860313mql\n860314wendy\n860320310\n860325123\n8.60327E+11\n860329gb\n86040186\n86041026\n860422yao\n860462xiao\n8605081144\n8605613abc\n86059408\n860612aaa\n860614048\n860705036\n860707530\n860712mty\n860725860\n86080568\n8.60823E+11\n86087333\n86091127\n860913asd\n860914muping\n860921si\n860927as\n860928jsm\n86096723\n86098311\n86101010\n86101111\n861018oo\n8.61024E+11\n861027ABC\n861028520\n86105338\n8.61063E+11\n86108610\n861096388\n86111111\n8611171234\n86111986\n861122816\n86112525\n861126cx\n86112785711\n8611324\n86117cathy\n86118611\n86118702\n86119241\n861202andy\n8.61205E+11\n86120603\n861211520\n8612122271\n861216yikeyi\n86121809\n86122608\n861228dezx\n86123520\n86128612\n86129019\n861294938\n86133093\n8613693aaaa\n86137338\n86138169\n86138613\n86140817\n8.61426E+14\n86143458\n86150825\n86156380\n86158615\n86160000\n86161150\n86165280\n86168616\n861861861\n86188618\n86191111\n86191875\n86195569a\n8620585910\n86206666\n8620733976\n86208620\n86210405\n86211577\n86216032\n86217548\n86218621\n86225411\n86229918\n8622ling\n862319me\n86238623\n862417868\n86245487\n86247931\n8624800B\n86248624\n86250263\n86253121\n86259499\n8625kikeyil\n86260357\n86260626\n86261501\n86261505\n86261954\n86261cjb\n86265807\n86266036\n86266087\n86268626\n86271201\n86278627\n86281068\n86283562\n86288344\n86291136\n862926390op\n8.62926E+13\n8.62926E+14\n86304560\n863115100\n863125hwl\n86313285\n86316913wza\n86318631\n86318980\n86320232\n8632886328\n86329029\n86334537609\n86337762\n86338633\n86346613\n86353307\n86356639\n86358635\n86361890\n86363681\n86364667\n86369301\n86371068\n86371102\n86373613\n86379502\n86379902\n86380226\n86381878\n863863863\n86388638\n86398572\n86399238\n86406689\n86407338\n86411480\n86411972\n86414258\n86415858\n864197532\n86421357\n8.64251E+13\n86427531\n86428642\n86434765\n86441784\n86443379\n86452528\n86454256\n86455125\n86458984\n86459078\n86463316\n86463591\n86463641\n86475zhao\n86479598lxf\n86485466\n864860883\n86487203\n86491881\n86497497ars\n86497584\n86502296\n86503848\n86513123456\n86513464\n86514590\n86515077\n86518651\n86519082cc\n86521438\n8652683926\n86528652\n86529066\n86530280\n86531125\n86532496\n86533655\n86538743\n86543210\n86547218\n86554825\n865585888\n86559784\n86560369\n86561662\n865629400\n86564024\n86565208\n86568042\n86574701\n86574759\n865799812\n86582853\n8658823917\n86591233\n86603146\n86612367\n86617316\n86618033\n866191758\n86625365\n86628496\n86628982\n86630465\n86631918\n86639193\n86639649\n86641787\n8664319413\n86646567\n86651804\n86653269\n86661577\n86666668\n86672098\n86674422\n86678880\n86682128\n86682934\n86685488\n86685539\n86686200\n866866866\n86688668\n86689712\n86691978\n86694192\n86698669\n86702950\n86703632\n86711234\n86712aty\n86715710\n86716090\n86716190\n86718968\n86731972\n86734bing\n86738987\n86741560\n86749754\n86751577\n8.67531E+11\n86754546\n867583659\n86759121\n86760955\n86762973\n86768595\n86768676\n86768949\n86771619\n867758688\n86780440\n86785345\n86786178\n86796202\n86797419\n8679love\n86807458\n8680813608\n8680813612\n86808868\n86809996\n86811711\n86812074\n86812250\n868153056\n86819448\n86822451\n86822763\n86823302\n86824534\n86828682\n86828697\n86830165\n86830999\n86832013\n86832236\n86834711\n86836088\n86838683\n8683875we\n86839246\n86839898\n86841942\n86844030\n86844520\n86852474\n86857098\n86858685\n86860761\n86861032\n86862171\n86866868\n8686868686\n868686886\n86868866\n8.68708E+11\n86874724\n86877216\n86877985\n86878531\n86878687\n86878833\n86878889\n86880306\n86881751\n86888688\n8688angela\n86896030\n86897008\n86898689\n86910199\n86912488\n86914814\n86914871220\n86918162223\n86918691\n86918895\n86924950\n8692575wjw\n8692929abc\n86931148\n86931232\n86938693\n86939055\n86939289\n86939746\n86958273\n86958303\n86965921\n869683yyq\n86968696\n86970000\n86980288\n86983388\n86983918\n86987668\n86998699\n86gmv72tt\n86p11j3n\n86ryuichi\n86w12m20y\n870028047\n87010844\n870114op\n87011530\n87011608\n87012113\n87013216\n87018701\n87021133\n87022846\n87025417\n87031500\n8.7032E+11\n87033159\n87035484\n87039568\n870405liuang\n870415AA\n870423965\n87047016\n87047183\n87048706\n87050243\n87051621\n87052450\n870530nini\n87060130\n870602168\n870612898\n87062011\n8.70622E+11\n870623LYF\n8706291612\n87065414\n870702yoyo\n870713lj\n87079301\n87080100\n87080314\n870818521\n87081900\n870821Lee\n87083049\n87085777\n87089840\n87090909\n87091123\n870911ff\n87092187\n87099162\n8.71022E+11\n871022jingjing\n87108710\n8711032ptyt\n87110423\n87110697\n8.71108E+11\n87111028\n871121sp\n87112421\n87113000\n87113132\n87113711\n87116064\n871169115\n87118711\n871187552\n8712107517\n87121367\n87121941\n87122811\n87123456\n87125571\n87128712\n8712959syj\n87148714\n871516guo\n87152115\n87156151\n87156225\n87160657\n87162980\n87166052\n87167911\n87182184\n87183611\n87184700\n87198719\n87201463\n87203325\n87212241\n87212313\n872166912\n872168??\n87218721\n872221tang\n87224177\n87224734\n87231241\n87235922\n87236177\n8723866wy\n87238923jia\n872415319\n87249199\n872534xl\n87258725\n87263412z\n872656722\n87268630\n87268726\n87272179kimmy\n87272382\n87273076\n872768443\n87280000\n87282771\n87288563\n8729091125\n87295583\n87295712\n87296951\n87296988\n87298505\n87298729\n87299851\n87300785\n87302862\n873059189\n8731984342\n87320201\n87323621\n873245129\n87324892\n87325457\n8732910520\n87330052\n87332051\n87332422\n87337672\n87338452\n87338568\n87338931\n87343993\n87345553\n87345620\n87345697\n87358161\n87358620\n873589abc\n87360343\n87368736\n87370160\n87373506\n87374299\n87386897\n87388738\n87396364\n87400912\n87401180\n87401531\n87406082\n87409212\n87410179\n87412369\n87415089\n8741779gg\n87426194\n8742yanli\n87430180\n87430378\n87434636\n87435133\n87435430\n87435617\n87435937\n87435940\n87436952\n87437774\n87438401\n87438743\n87439271\n87440144\n87441051\n87441330\n87441984\n87444315\n874466096\n87447789\n87449088\n87454620\n87455363\n87457481\n87459213\n874632419\n87465623\n87465835\n87471142\n87471834\n87481220\n87481612\n87485670\n87485756\n874874874\n87487743\n87489921\n87492636\n87495283\n874rbcszs\n87508750\n87508826\n87511128\n87512651\n87512670\n87515850\n87518216\n87518751\n875201314\n87521690\n87524232\n87527191\n87528752\n87531342\n87531610410\n87535044\n87535400sx\n87536156\n87536607\n87536967\n87538263\n87539063\n87546821\n87548659\n87548754\n87549081\n87551731\n87552259\n87557818\n87562925\n87564312\n87567299\n87570612\n87578043\n87578151\n87586050\n87587027\n87591029\n87593635\n8759576rjp\n87596901\n87601787\n87602174\n87603936\n87608760\n876136997\n87614719\n87616529\n87617947\n87619579\n87623732\n87625956\n87628762\n8.7629E+11\n87630922hzj\n87631122\n87631694\n87633969\n87635984\n87640625\n87650234\n87650532\n87650642\n87650726\n87651618\n87651950\n87652343\n87654215\n8765432109\n87654321aa\n87654321abc\n87655400\n87655678\n87656850\n87658430\n87658601\n87658765\n8765951186\n87662210\n876626161\n87663170\n87663721\n87664454\n87664801\n87664823\n87665175\n87665766\n876666666\n876678mmm\n87672773\n87678580\n87681045\n87688768\n87690956qwe\n87693660\n87693725\n876956bvcnxc\n87698769\n876998000\n87699888\n87702513430yes\n87710115\n87711390\n87712176\n87715197\n87717936\n87723710\n87724985\n8.77404E+13\n87748760\n87751018\n87755470\n87756508\n87757970\n87758521\n87758775\n87761173fe\n8776398htz\n87766877\n87767621\n87776095\n87777777\n87779969\n87780291\n87780767\n877826075\n87786547\n87787101\n87788778\n87790908\n87791447\n87793091\n8779341w\n87798779\n87801835\n87802896\n8781087810\n87812664\n87812828\n87812900\n87814675\n87816239\n87816569\n87818251\n87825450\n8782787827\n87839806\n87843173\n87843619\n87850876\n87851101\n87853121xiao\n87853859\n87853964\n87855121\n87858785\n87860524\n87863200\n87868786\n87870206\n87872151\n87875487\n87876638\n87876936\n87878405\n87878417\n878787zz\n87885922\n87887664\n878878kq878\n87888252\n87888788\n87888921\n87888990\n87889827\n87891462\n87896037\n87896113\n8789876991589yj\n87898769958\n87898789\n87902999\n87906043guobo\n87909591\n87910283\n87912543\n87916663\n87917922\n87918791\n87921793\n87924718\n87925336\n87928821\n87933818\n87934240\n87936810\n87948414\n87948794\n87952113\n87953747\n879546213\n87958795\n87959843\n87982517\n87984540\n87985746\n87985894\n87988100\n879891183\n87996913\n87998799\n87999999\n87klwwgft\n87n2y305n7y22\n87yazily\n88000088\n88001679\n88010203\n88012055\n8801314520\n88014300\n88014345\n88015675\n88015800\n88018801\n88021060\n880213woaini\n88022199\n88023614\n88025102\n88025822\n88026161\n88026166\n88026179ll\n88026678\n88026882\n88027241\n88028155\n88029009\n88029479\n88030053\n88031213\n8803170614\n88031891\n8803206lin\n88032198\n88038803\n88040645\n880422pp\n88043011\n88048586\n88049109\n88051192\n8805131234\n88051337\n880518ywf8\n88051kok\n88051lyl\n88052307\n88056402\n88059718\n8806171110\n88061988\n8.80632E+11\n88068750\n880707jbr\n88071554180\n88072997\n8.8077E+12\n880770520\n880770660\n880775lzn\n88077621\n8.80803E+11\n88080398\n88080888\n880815chi\n88082646\n88083080\n88083700\n88085905\n88088808\n88089451\n880901xqy\n8809080706\n88091138\n880911424\n880925wj\n88093139\n88097899\n880985763ri8924\n88098809\n88099809\n88100000\n88100188\n8.81013E+11\n8810189498\n88102816\n8810412521\n88105360\n8810676dgs\n88107821\n88108420\n88108810\n88109134\n8.81106E+11\n881107121yutian\n8.81126E+11\n88113399\n88114xypch\n88115118\n88115679\n88118811\n88119637\n88120155\n881203AA\n8812100sx\n881212mm\n8.81229E+11\n88123100\n88123123\n88125526\n88125699\n8812588125\n8812634911\n88127959\n88128269\n88128688\n88128812\n88130283\n881314520\n88131972\n88132955\n88136279\n88148814\n88149864\n88150204\n88154144\n88156136\n88158815\n88160595\n88161212\n88163109\n88164164\n88165555\n88165590\n88168816\n88176168\n8817803788\n88178832\n88179935\n88180098\n88180204\n88181185\n88181460\n88182833\n88188818\n88188888\n88191986\n88192373\n881984123\n88198588523\n88198591\n88198819\n88200486\n882019jun\n88205274\n88205292\n88207393\n88208820\n88209345\n8.82109E+11\n88211562\n88212979\n88217314\n88217799\n88218821\n882190bai\n88221144\n88221255\n88223366\n88224466\n88224646\n88224682\n88224988\n88225998\n88228113\n88228822\n88229192\n88229810\n88229933\n88233748\n88241823hhxsw\n88242255\n88242890\n88245316\n88245458\n88246760\n88248824\n88250625\n88250885\n88252712qwe\n88255288\n88258686\n88258825\n88259031\n88260788\n88263388\n88264444\n88268826\n88269911\n88270612\n88273596\n88275421\n88283690\n88287694\n8829071ly\n88292384\n88295806\n88296652\n88298lue\n8830137a\n88302170\n88306260\n88306446\n883131yyh\n88314880\n88318167\n88318831\n88323076\n88323774\n88324223\n883246391\n88326229\n88326365\n88326518\n8.83274E+12\n88328832\n88331777\n88338833\n88338844\n8833991100\n8833993302\n88340922\n88342277\n88352500\n88352737\n8835407c\n88355907\n88358061\n88359206\n88359412\n88365659\n88369145\n88374109\n88377246\n88383799\n88387611\n88390113\n88390438\n8839487lion\n88397218\n88410862\n88412275\n8841488414\n88418841\n88421096\n88421737\n88432003\n88435780\n88442200\n88442266\n88446622\n88448552\n88448844\n88449464\n88453611\n88455141\n88456021\n88458845\n88464238\n88467492\n88468846\n88473369\n88480000\n88481101\n884811034\n88481218\n88481234\n88483465\n88483721\n884838bbaa\n88485071\n88485208\n88487657\n88487809\n88488495\n884888888\n8848zmlm\n88491608\n88492562\n88492825\n88496253\n88496289\n88498590\n88498849\n88501318yy\n88502249\n8850288502\n8850302win\n88507240\n88508850\n88509790\n8851561623\n88517094\n88518123\n88518851\n88520000\n88520520\n88520530\n8852088520\n885211314\n88521444\n88521521\n8852188521\n88522230\n88525612\n88528852\n88532077\n88536573\n88538678\n88538853\n88540114\n88544044\n88545101\n88545846\n8854788547\n88550235\n88551573\n88551676\n88552200\n88552211\n8855221133\n885522123\n88554466\n88555021\n88556677\n88556699\n8855688556\n88557766\n88558080\n88558855\n88563066\n88563635\n88564496\n88568856\n88570542\n88581936\n88582688\n88583871\n88586308\n88587758\n88588683\n88588858\n88589871\n88592086\n88592253\n88593866\n88594614\n88598859\n886001cz\n8860409123\n88608989\n88612010\n88618060\n88618861\n88621656\n88624781\n88628862\n88633847\n88638863\n88648864\n88649981\n8865201314\n88654321\n88658865\n88660099\n88660660\n88662244\n88662566\n88663322\n88664422\n8866442200\n88664627\n88666538\n88666688\n88667755\n8.86681E+15\n88668686\n88668899\n88669980\n8867625941\n88680765\n88681009\n88683319\n88686868\n88686899\n88687352\n8868864499\n88688688\n886887500\n88688868\n88698177\n88698177ee$$78\n88698869\n88701953\n887023857\n88702591\n88709394\n88710691\n88713608\n88713972\n88715258\n88720221\n8872132551\n88723043\n88724103\n887272727\n88727481\n88735587\n88737532\n88737923\n88738777\n88758875\n88761545\n887654321\n88768912\n88771122\n88771314\n88771456\n887735688\n88773630\n88775504\n88776542\n8877665544\n88778413\n88785790\n887881736\n88788878\n88790721\n88794753\n88798879\n888000020\n888000888\n88800186\n88800888\n8880099124\n8880606853\n88808880\n888093408\n88811886\n88812345\n888123456\n8.88124E+11\n88815296\n888156518\n88816888\n88819306\n88819585\n888222000\n8882757655\n88828798\n88831269\n888328120\n8883533524\n88835546\n88836489\n88838478\n88838685lulu\n88838990\n88845466\n88846944\n88851888\n8885201314\n888555222\n888561674\n88858885\n8.8859E+11\n88860171\n88861166\n88861612\n88863218\n88865228\n88865888\n888666000\n888666123\n888666222\n888666333\n888666888\n888666999\n88868886\n88868888\n88868932\n88871824\n88872100\n88877107\n888777666\n88879533\n88880424\n88880925\n88881688\n88884350\n88885418\n8888855555\n88888812\n888888168\n88888878\n88888885\n8.88889E+12\n8.88889E+15\n8.88889E+19\n88888888_l\n88888888aa\n88888888aaa\n88888888abc\n88888888asd\n88888888f\n88888888k\n88888888li\n88888888q\n88888888QQ\n88888888w\n888888aa\n888888abc\n888888abcd\n888888CUGOO\n888888kplsa\n888888ll\n888888mm\n888888moli\n888888ok\n888888ol\n888888qq\n888888XIONG\n88889999a\n8888a8888\n8888aaaa\n8888abcd\n8888bbbb\n8888kkkk\n8888oooo\n8888qqqq\n8888wwww\n8888xiong\n8888yy8888\n88890998\n88894868\n88895090\n88898889\n88899573\n88899900\n8.88999E+11\n888999666\n888999777\n888999888\n8.89E+11\n88899989\n888999aa\n888999aaa\n888999abc\n888999qhp\n888999qq\n888999qqq\n888AAA888\n888abc888\n888comnet\n888service\n888wwxxzz\n88900013\n88907313\n88907511\n88908890\n88910817\n88910977\n88912963\n88914295\n88914857\n88915685\n889158962\n88916033\n88916508\n88917618\n88918532\n88918891\n88919232\n88920053\n88921167\n88922223\n88928123\n88928892\n8893068097\n88931120\n88932257\n88948000\n88949701\n8894985aa\n88950009\n889531900\n88956780\n88957044\n88958895\n88961222\n88961406\n88968896\n88969755\n88971037\n88977010\n88980380\n88984896\n88988898\n889889889\n88990011\n88990223\n88991010\n88991122\n88991155\n889912346\n88991678\n88995566\n88996600\n88996633\n88996655\n88996677\n8899736240\n88997652133\n88997766\n889988wawamy\n88998989\n88999988\n8899ebay\n88ballcom\n88woaini\n89003942\n89006061\n89008887\n89008900\n89009889\n890122ii\n890123456\n89015222\n890156zl\n89018901\n89026260\n8904046m\n890427ky\n89045272\n89052566698\n89057313\n89061246\n89069500\n890720wwq\n8907477x\n89078881\n89078907\n8.90804E+11\n890806andyang\n890815lc45skip\n89081680\n89088908\n890890890\n890890ok\n8.90909E+13\n89091268\n89099665\n89101010\n89101112\n89108138\n89108910\n8910jqka\n8911227158\n891130520hxt\n89115932\n89118911\n891189yuanjun\n89122400\n89146041\n89158915\n89176548\n89183027\n89188918\n891891891\n89191921\n89203920\n89213129\n892158343\n89218921\n89219021\n8922272221\n89225500\n89231805\n89238923\n89248911\n89250001\n89250121\n892502303\n892648414\n892723349\n89275049\n8928aaaa\n89297076\n89298929\n89328819010\n89328932\n89338933\n89345137\n893457750\n893489aa\n89358935\n89388663\n89422400\n8944032aas\n89442400\n89452125\n894564537\n89464136\n89470573\n89484096\n89489244022\n89504899\n89511086\n89518951\n89528390\n895283900\n89530abcd\n8953621435\n89540415\n89550155\n89561631\n89562300\n89562310\n89562314\n895623147\n89568956\n89573063\n89588888888\n89595251010\n89596180\n89602007\n89603279\n89607177\n89613179\n896231878\n89624624\n8962789627\n89631139\n89632147\n89633133\n89636275\n89638963\n89645512\n89647310\n89648964\n896541230\n89658965\n8966138gyhq\n89662432\n896651843\n896689529\n89668966\n89674523\n896896896\n89698969\n89702028\n89704464\n89708970\n8971268532\n89721679\n897229hc\n89728514\n89728972\n89729981\n89735279\n8.97401E+11\n89752912\n897564231\n89757123\n89757521\n89759223\n89759419\n897654321\n89766dove\n89768976\n89770013\n89781889\n897856288\n89787868\n89788978\n8979017611\n89793238\n8979323846\n8.97932E+11\n897969591\n89801878\n89804832\n89808678\n89810877\n89815159\n89819299\n89823912\n89824813\n89827546\n89831966\n898334283\n89838983\n89846007\n89862921\n89864622\n89866191\n89866698\n89868986\n89871683\n898720347\n89872965\n89873957\n89878987\n89881666\n89888988\n898898898\n89890147\n89891saa\n8989565602\n89895689\n898974123\n89898036\n89898899\n898989889\n89899898\n89899918\n898hfsasaS\n89908990\n89909321\n89910000\n89913470\n8991543020\n89918991\n8991913175\n89922467\n89926589\n89926599\n8992899248\n89939625\n89942935\n89955998\n89956662\n89958995\n89959801\n8996825749\n8.99697E+12\n89979153\n8998116867\n89982052\n89982708\n89985421ff\n89988800\n89988998\n89989188\n89989899\n899899899\n899993123\n89atd2z4\n89Bu0221QQ\n89edit02\n89ting627yu\n8a8a8a8a\n8a8b8c8d\n8b191dd8\n8d1u4a4i\n8dn2ewCXNH\n8dp2evCWNH\n8dp2evCXNH\n8dp2ewCXNH\n8dp2fvCWNH\n8e00zz7s\n8e16BP#3\n8en2ewCXNH\n8en2ewCXNI\n8en2ewCXPI\n8en3dwDXPI\n8en3dwDYPI\n8en3ewCXPI\n8en3ewDXPI\n8gox8h26\n8io88243\n8kjcxABC\n8lijiejava8\n8lortami\n8NJGZXM7\n8oo92c7745\n8pima.com\n8qianwan\n8w2i0l6l2s1\n8x2g4Gcc9q\n8x2h4Eddan\n8x2h4Fccap\n8x2h4Fccaq\n8x2h4Fcdap\n8x2h4Fddan\n8x2h4Fddap\n8x2h4Gcc9q\n8x2h4Gccaq\n8xxg3Gcc9r\n8xxg3Hcb9r\n8xxg3Hcc9r\n8xxg4Gcc9q\n8xxg4Gcc9r\n8z213j9q3f\n8z8z8z8z\n9*Lq?H>5\n90-=op[]\n90000000\n900000000\n9000000000\n9000017181\n90007272\n90009000\n9.00127E+11\n90013891\n90019001\n90019002\n9002030305\n900206aa15\n90029002\n900324520\n9003766613\n90039003\n900414dai\n90041550\n9005117387\n90052818\n900600300\n900603lxf\n900721004\n900811fgr\n900900900\n900901WY\n90099009\n90110533\n90118113\n90119011\n901216123\n901222aa\n90123000\n90123456\n90129012\n90129639\n901621lk\n90169016\n90189018\n901896tan\n901901901\n90203754510\n902211920\n90225525\n90239023\n90240000\n902421210a\n90247036\n90259025\n90266209\n90274966\n90279027\n9027@7209*520\n902822124\n90289028\n902902902\n90378177\n903897555\n903988994\n90400003\n904501212\n90451koji\n90453622\n904904904\n9051428aaa\n90520123\n9058111314\n905874482\n905905905\n90603356\n906077740\n906157294\n90617722\n90618012\n90639287\n90679067\n906829li\n906906906\n90754803\n907738qqqfff\n90803891\n90804891\n90807060\n9080706050\n90809080\n9081314\n90818larry\n90823252\n908381247\n90849084\n90864066\n9087171817\n9087654321\n90889088\n908908908\n90899089\n90904371\n9090980zw\n90909900\n909247378\n90949094\n909909909\n9099890998\n90999099\n91009100\n910101601\n910111213\n91014891\n91019101\n9101ylw251223\n910283lc\n910305258\n910330yu\n9104224316\n91059105\n9.10823E+11\n91090dxt\n910910910\n910911912\n91099109\n9.11007E+13\n91100911\n91101010\n91103157\n91109110\n91111111\n911119110\n911119911\n91119111\n9111SHIJIAN\n91131421\n9115201314\n911571174\n91159115\n911807519\n9118162635\n911911119\n9.11912E+11\n911911aaa\n911912913\n911914xb\n91199119\n911i3uefce\n911i3vefbe\n911j4tffcd\n911j4uefcd\n911nk679dpk611\n911turbo\n91201314\n91209120\n91213373\n91215225\n9121522521\n9.12152E+13\n91215238\n91216891\n91219121\n9122191221\n9122591225\n91230000\n9123456789\n912513wu13\n91259125\n9126ml9126ml\n91279127\n91280000\n912826520\n91283799\n91289128\n912912912\n91299129\n912lq912lq\n9130386959\n9134707861\n91372468\n913724685\n91372468510\n91374286\n91379137\n913913913\n91411011\n914814789\n91482686\n914914914\n915108108\n9151291314\n91568288\n91586688\n91589158\n915915915\n91604891\n91605891\n91631700jjl\n91639163\n916812102\n9168601986\n91689168\n916916916\n91709170\n91726502\n917315147\n917382465\n91774561\n917910000\n917917917\n91800won\n91809180\n918123456\n91827364\n9182736450\n918326327\n91862596\n91864676\n9187781592\n9187XIAOYAO\n91886238\n91889188\n91919191\n919200tate\n9192631770\n91929394\n919814359\n91991817\n919919919\n91999199\n919cc1022\n91d428aa\n91ilaoqinty\n91shanghaicom\n92013lkj\n920211yue\n9.20215E+11\n9202185863jxx\n920228meng\n9203116834\n92039828\n92041119\n9204647a\n92059205\n920695212\n9.20824E+11\n920913916\n920920920\n920keitalove\n92108185361\n92109210\n92117791\n9211823932\n92118791\n92119211\n92130068\n92130792\n92139213\n92189218\n921921908\n921921921\n921j4sfgdc\n921j4tfgcc\n921j4tfgdc\n921k4sfgdb\n9221126526\n922117525\n92212105\n92213891\n92214891\n922301409\n922715lsd\n922814115\n922829214\n922870007\n922922922\n922h4Eddan\n922i4Ceebk\n922i4Ddebm\n922i4Deebk\n922i4Deebm\n922i4Eddan\n922i4Eddbm\n922i4Eddbn\n922i4Edebm\n922i5Ceebk\n922i5Cefbk\n922i5Cefck\n922j5Befcj\n922j5Cefcj\n922j5Cefck\n92309230\n92312685\n9.23203E+12\n9232049899\n92332284\n92339233\n9235211115\n92369236\n923724630\n9237291015\n923923923\n92405791\n924115520\n9242008888\n924515339\n9245892458\n92491074\n924924924\n92495833\n9251979xin\n92527788\n9254yjf8986\n92589258\n9259251229\n925925925\n92599259\n92614589\n92623ashin\n92649264\n92653589\n92669266\n9.26819E+11\n926926926\n926o1o12\n92702689\n92731900\n92740101\n927531ii11\n92755555\n92780538\n927927927\n927979fang\n928009910\n92801891\n92808891\n9.28142E+11\n92819281\n928305nmd\n928331107\n92839283\n928749765\n9288091427\n928869077\n928928928\n9289861314\n928h1025m513y\n928lovebo\n928zhang\n92902891\n929291114\n92929292\n92949698\n929533521\n9.29619E+13\n92962821\n929929929\n92999299\n929lin684\n92cjb9cf\n93019044\n930427497\n9.30472E+13\n93047621\n930501266\n930511dtm\n93068875\n930930930\n931111082\n93189318\n93189897\n932083yzg\n93209502\n93221870\n93229322\n93231303\n932384626\n932568417\n93262288\n932964966\n933160049\n93399339\n93403888\n93470658\n93488152\n935201314\n93529352\n93585zham\n936171811\n93618524\n93621000\n9.36235E+11\n93636807\n93658479\n93699369\n93733000\n93744471\n93825855\n9388866874\n93898295\n939053714\n93939393\n93941314\n93943344\n93943344amw\n93945354\n93949394\n93949596\n93949798\n9394club\n939564819\n9.39565E+14\n93q1h547s\n94010557\n94020025\n94026630\n94029402\n940721zl\n94089408\n940926gbd\n94093701\n94099681zk\n94119411\n94119986\n941233129lichee\n94123456\n94129412\n94135354\n94136699\n94139413\n94144821\n941533asd\n94165912\n94169416\n94174546\n94189418\n941955777\n94199419\n94201314\n94209420\n9421108110ca\n94211206\n942129484\n94219421\n94247802\n94249424\n94258144\n94264426\n94264534\n94264926\n94264983\n94280904\n94284680\n94293780\n94301fsh\n94309430\n9433138123\n94350283\n94364246\n94382568\n94408765\n94426933\n944369wf\n94438474\n944494321\n945201314\n9456113426\n94567560\n945686464\n94589458\n9459452357\n945945945\n946051bZBs#\n94625900\n9465122q\n94689468\n946952301\n94722065\n9.47269E+11\n94742834\n94745059\n94747158\n94782105\n94789478\n94801070322\n948067211\n948813833\n94888666\n948948ll\n94949494\n949527212\n9495961398\n94962859\n94969496\n94yhqjoGzu\n94zhrjoGyt\n94zhrjoGyu\n95000998\n95001152\n9500352345\n95013805999\n9501923621\n95024040\n95039503\n95042648\n95071308\n950811yyy\n950918163\n95100493615\n9510945014\n95109510\n951117whu\n951159951\n95119511\n95120717\n95121386\n95122895759\n95123456\n95123578\n951235789\n951236874\n9512395123\n95124780\n951357456\n9.51358E+11\n95139513\n951452980\n951475369\n951478632\n9514786321\n951623847\n95168003\n9516888123\n9517530\n95175300\n95175312\n9517532468\n951753258\n95175328\n951753321\n9.51753E+11\n95175346\n9517534682\n95175357\n951753654\n951753789\n95175382\n9517538246\n9517538426\n9517538462\n95175388\n951753951\n951753963\n951753aa\n951753abc\n951753asd\n951753poi\n951753qaz\n95179817\n951846237\n951846273\n951847623\n951852753\n9.51853E+11\n95188484\n95189518\n951951951\n95198295\n9519840529\n951af852sd\n951chenxi\n95201314\n95209520\n95211314\n95217033\n95219521\n952478919\n9526134myp\n9526xxht\n95270000\n95271314\n95271@china.com\n95272046\n95277259\n9527952788\n9.52795E+11\n95279528\n952822576\n95287216\n95289528\n95302136\n9530295302\n95305643\n953612000\n95386929\n95389538\n954120cr\n9541471890\n95437582433\n954731007\n95506880\n95509551\n95519700\n955350523h\n95535745\n955471985\n95573014\n95588123\n9558895588\n95597875\n955998046\n955998047\n9559995599\n9560031211\n95606516\n95628451\n95641275\n956474963\n95650342210\n95650695\n95684213\n95690584\n957061980\n95709524\n95715471\n95738824\n95761811\n957642jyn\n95779949\n9.58002E+11\n9580095800\n9.58019E+11\n9580391598\n9580552221\n9580575056\n9580596901\n9580810222\n9580822386\n95808870\n95809580\n9580989061\n9581233337\n9581295812\n958129947\n9581322180\n9.58167E+11\n958187213\n9582816328\n95828336\n95841013ok\n958581527\n95879587\n95889588\n958958958\n958968978\n9590095900\n9.5901E+11\n9.59011E+11\n959014587\n959017723\n9593810010\n95939616828\n9.59506E+11\n9595095950\n9.59514E+11\n9595195951\n9595953hd\n9595959595\n95959697\n9596021807\n95968128\n9.59682E+12\n95969798\n9596979899\n95haigui\n95yhqjoGzu\n96001062345\n96003002\n96011059\n960113004\n96021108\n96030009\n960305457\n96039603\n96041219\n96049604\n960507lpp\n960520ok\n96054121\n96061901\n96073649\n96079275\n960826wang\n9608284428\n960915xgd\n960960960\n96101327\n96109610\n96109740\n961109cxj\n96114557\n9611796135\n96119611\n96120535\n961208123\n96121011\n96121015\n96121020\n96121129\n96123456\n9612413a\n9.6127E+11\n96128777\n9612896128\n9612901773\n9615065257\n96152020\n9616496164\n9616899199\n9616996169\n96189618\n961987947\n96206035\n96211627\n96212161\n96221313\n962358718\n962464520\n9.62465E+11\n96258230\n9625wanne\n96299888\n963.852\n9630076888\n96301111\n963012sz\n96308520\n96309630\n963147852\n963151111\n9631596315\n96319631\n9632112369\n96321456\n963214587\n9632147852\n963214789\n9632147a\n963215874\n9632196321\n963258123\n963258147\n963258456\n96329632\n963369963\n963369mm\n96339633\n963456123\n963520yoyo\n963528417\n963562395\n963741123\n963741852\n963741852qq\n9637596375\n96385200\n96385210\n963852123\n9638521417\n963852147\n963852741qaz\n963852741sex\n963852963\n9.63853E+11\n963852@741\n963852aa\n963852abc\n963852mm\n963852qaz\n963892abcd\n96389638\n963963123\n963a963a\n964068848\n96443218\n9644860313\n9650180814\n96502166\n965201314\n9652348283\n96549654\n96559725\n96564808598\n96578888\n965874123\n96588163\n965941318\n9665707640\n96664499\n967)(*&^\n96701224\n967683579\n967854dfd\n96789100\n96789678\n9681287755\n9681854005\n96818968\n96833369\n968431187\n96844869\n968574123\n968574321\n9685743210\n96883654001\n96889688\n96893168\n96896888\n968968968\n96898968\n96899689\n96905668611\n96905762\n969065224\n9691896918\n969210848\n96927634\n96928288\n969332958\n9694482664\n96959695\n9696096960\n96963002\n96965026\n9696969696\n96970513\n96979899\n96989698\n96990206\n969927187\n96998123\n9699896998\n9.69998E+11\n97009700\n97010182\n9.70115E+11\n9701202544\n97013328\n97035578\n9703good\n970417174\n97050505\n97052153\n97060086\n97060130\n97064769\n970701hg\n9.7071E+12\n97070z97070\n97079707\n97081013\n97096734\n971015668\n971041014\n97104104\n97116097\n97119711\n97120714832\n97126026\n97131330\n971384265\n97139713\n97156328\n97179083\n97193021\n9720183guo\n9721love\n97229869\n972314064\n972433337\n97259281zw\n97259725guo\n97267900\n97268378\n97279727\n972820roto\n97289728\n9.73154E+11\n97348645\n9735182064\n97352444\n973918lb\n973987008\n97404158\n97428TZzhan\n9743132l\n97439743\n97465233\n975086135246ty\n975086ty\n97511aaa\n9.75149E+11\n97520ni333\n97521413\n9753113579\n97531246\n975312468\n9753124680\n975313579\n975318642\n9753186420\n9753197531\n97537653\n97538642\n9.75426E+11\n97585197\n975888088\n975975975\n97599911\n976125318\n97613056892\n97639763\n976431258\n9764318520\n9764764498\n976498ABC\n976855922\n977108520\n977223497\n97758521\n9777042585\n97772294x\n97809012\n978117821\n978232000\n97828113\n978645312\n97865342\n97873230\n9787802258\n9.78781E+13\n978916di\n978978978\n9.78979E+11\n9791936222\n97919791\n979456321\n979479349\n97973912\n97979797\n9798229798\n9798836070\n97989798\n97989900\n979899ed\n97999799\n97gk97gk\n97ou78nn\n980021945\n98009800\n9800990623\n98010086\n98010233\n98010396\n980123456\n98014008\n98019801\n98020443\n98021203\n98021302\n98021658\n980241127\n98029802\n980305959\n98031343\n980316528\n98032006\n98039803\n9804121810\n980414606\n980511gb\n98051301\n98052166\n9805260000\n98053jam\n98059586\n980621yfq\n98069806\n98070555\n98071084\n980724xlh\n980808niu\n98087924\n98089808\n98093232\n98094011\n980988mm\n980dffsfd\n9810168ljh1018\n98105224\n98109810\n98110161\n981108721111xy\n98115107\n98118555\n98119811\n9812110040\n981224az\n9812260058\n98123084\n981231312\n98123456\n98124166\n98129812\n98130301206\n98131110\n98134186\n981362087\n98145189\n981526888\n98157531017\n981601134\n98160791\n98160803\n981745281\n981760123\n9.81803E+11\n98188798\n98189818\n981978228\n9819vvvv\n98201117\n98209820\n98211420\n982128082\n98220523\n98225251\n9.82554E+11\n9825610354\n98269826\n982719286\n98283355\n98286595\n98300227\n98301007\n98311203\n983125343\n98320000\n9832102510\n983563622\n98376542\n98382100\n98386688\n983983983\n98407700\n98416021\n9843042042\n984401144\n98465945\n98479847\n98489848\n9851898518\n9852098520\n98521121\n9852174563\n9853561230\n98562886\n985632147\n98563369\n985633699\n98569856\n98584284\n98589858\n98610504\n98615555\n98618808\n98624433\n986271463\n9862renee\n986370719\n9865321245\n986532147\n986532741\n98654321\n98660000\n98665701\n98669866\n9867534210\n98675423\n98681140\n98689868\n9869604401\n98696045\n986986986\n987032067\n9870520206\n98709870\n98710118\n98710412\n9.87105E+11\n987123654\n987157236\n98719871\n987219wst\n9.87221E+11\n98729872\n98730abcd\n987311311\n98732100\n987321456\n987321abc\n987321pp\n98741023\n9874123650\n9874123654\n987412365mad\n987412369\n987412563\n987456121\n9874561230\n98745632\n987456321{}**\n987456987\n98749874\n98752100\n987532159\n98754321\n98756038\n98760000\n98760011\n98760abc\n9.87621E+11\n98765021\n9876504321\n9876512345\n987653210\n98765400\n98765410\n98765412\n9876541230\n98765423\n987654231\n9876543201\n987654321*\n98765432101\n9876543210abc\n9.87654E+15\n987654321aaa\n987654321ab\n987654321abcd\n987654321ad\n987654321asd\n987654321c\n987654321l\n987654321o\n987654321ok\n987654321p\n987654321s\n987654321x\n987654321y\n987654321Z\n987654322\n987654329\n98765432a\n9876543322\n9876543chen\n987654654\n987654987\n9.87655E+11\n987654aa\n987654ab\n987654ABC\n987654abcd\n987654asd\n987654b...\n987654lw\n987654mj\n987654qq\n987654qwe\n9876556789\n987656789\n9876598765\n98766789\n98766789zh\n98767880\n9876abcd\n987761194\n9877789sylWAN\n987789987\n98779877\n987861011zhblj\n98789878\n98798798\n98799979\n987matry0\n987okooo\n987wjl987\n98815218\n98827846\n98833013\n98839316\n9885835395\n98858899\n98859885\n98879887\n98889888\n988918sbl\n988988988\n98899889\n98909890\n9891811796\n98921404\n989231301\n98935129\n9896450437\n98967937\n98972021\n98973210\n98979695\n9897969594\n98979897\n98984aa130\n98987676\n989898ok\n98989988\n98989999\n9898??ll\n9898asdf\n9898club\n9898win98\n98991715\n98997598\n98999899\n98asdfgh\n98c10306\n98weizhurj\n99009900\n990103219\n99010525\n9901099010\n9901238981\n9.90126E+11\n9901361268\n990168555\n99019901\n99020315\n99026007\n9902866508\n99029902\n9903031969\n99031040\n99031108\n99032402\n990326aqi\n990330216\n9.90332E+13\n9903530207\n99041133\n9905112533\n99052145\n990524lzy\n9905267174\n990540215\n99054111\n9.90599E+11\n990610517\n99061111\n99062079\n99064083yy\n990722**\n99074018\n99074122\n990802mj\n99081051\n99081138\n9908199081\n99082010\n99089908\n99090832\n990970086\n990990990\n99099909\n99101655\n99101917\n99102014\n991021zyg991021\n99103298\n99105260\n99105905\n99106015\n99108051\n99109910\n991104101\n99110523\n99111512\n99112301\n991141698\n991151108\n99118882\n99119911\n9912000105\n99120836250xgj\n991217567\n99123456\n99124332\n991261966\n99129912\n99130072\n99130417\n9913051011\n99131043\n9913141314\n991314520\n99131499\n99134259\n991352040\n99152133\n99159915\n99169916\n991701280\n991775520\n991775521\n9917758521\n99183374\n99184565\n9.91882E+11\n99189918\n99196399\n991991991\n99199919\n99201234\n99201314\n99202999\n9920999209\n99211314\n99212213\n992123mm1\n99219921\n99220224\n9.92203E+14\n99224410\n9922479278\n99227265\n99227880\n99229494\n99240103\n99241527\n992553667wan\n99265432\n99270679bb\n99274089\n99279415\n99282099\n992858664\n99289928\n99303213\n99304015\n99309930\n993156000\n993172300\n99319931\n99320flixx\n99336768\n99339933\n993564qj\n993658495\n99366993\n993899bb\n993907abc\n99399939\n99402215\n994051055\n99441148\n99466123\n99494495\n9951283117\n9951797954\n995179aaa\n9951899518\n995201314\n99520520\n9952099520\n995211314\n99529952\n99535449\n99551122\n99551133\n99559955\n99569956\n99587631\n99589958\n995995995\n99619961\n996315poi\n996343993\n99639963\n99654802\n99659965\n9966123456\n996633..\n99663300\n99663311\n99663322\n9966332211\n9.96634E+11\n99668855\n99669966\n996738444\n99689968\n996996996\n99699969\n99703105\n9970319356\n99709394\n99714003\n9972012027\n99722311a6\n99728728\n9972899728\n9.97332E+11\n9973373935\n99750626\n9976305k\n99766446\n99772200\n9977553311\n99776688\n99779977\n99780121z\n997811chen\n99786699\n99789456\n99789978\n99790721\n99790845\n99792458\n99799513\n9980199801\n99809980\n99811205\n99811899\n99813721\n99816636\n99817749\n9981797954\n99818864\n9.98189E+11\n9.982E+11\n9981tj8864\n99828550\n998288627\n998379ab\n99839983\n99840701\n99841023\n99865028\n998663269\n99879610631\n99879987\n99880000\n99881122\n99885566\n99886600\n99886633\n99886655\n99886699\n99887711\n998877123\n99887755\n998877665\n9.98878E+11\n998877abc\n99888899\n99889898\n9988DOOG\n9988zzyy\n99891234\n998917908\n99899989\n9.99E+11\n999000999\n9990518668\n999078qq\n9990902wx\n999110120\n99911111\n999111999\n999123123\n99912345\n9991799693\n99919991\n9992236280\n99926999\n99935449\n999555111\n999555888\n9995618709\n9995752999\n9995861364\n999666999\n999666gto\n99980001\n999847741\n99987315\n99987654321\n999888000\n999888111\n999888123\n999888666\n9.99889E+11\n99988898\n999888999\n999888abc\n999896chy\n99989796\n99989998\n99992222\n99993333\n99994444\n99997777\n99998437\n99999520\n9999966666\n99999888\n99999900\n999999123\n9999997568\n99999990\n99999998888\n999999998\n9999999991\n9999999996\n1E+12\n1E+16\n1E+20\n999999999b\n999999999c\n999999999d\n999999999f\n999999999g\n999999999H\n999999999j\n999999999k\n999999999l\n999999999lf\n999999999m\n999999999n\n999999999q\n999999999r\n999999999s\n999999999t\n999999999w\n999999999x\n999999999y\n999999999Z\n99999999a\n9999999a\n999999aa\n999999aaa\n999999abc\n999999qq\n9999aaaa\n9999asdf\n9999oooo\n999ing2009\n999sky534\n999xw7283425xyw\n99fu99xing99wen\n99jk99jk\n99xinnet\n9a8b7c6d\n9bugaosuni\n9em3dwDYPI\n9en3dwDYPI\n9g3e67qo\n9ijn0okm\n9ijn8UHB\n9IJN9IJN\n9lianjia\n9lj198802020\n9nanuttt\n9ol.0pг╗/\n9q1cozya\n9s8d8sd8\n9si71km39\n9tcl10ch\n9YUE27RI\n:359887409\n:460832092\n;o;ofpifpi\n<1977XBC1225>\n?7gQ951!\n?enigma?\n@123456789\n@123456@\n@126.com\n@163.net\n@5201314\n@5884172\n@7800585\n@@7533967@@\n@Aly6767@\n@beijing2008\n@hotmail.com\n@jojo520!\n@sina.com\n@sohu.com\n@Surveillant@\n@tianya@\n@titan75\n@Unthinkable@\n@wmnbmh250269\n@WSX3edc\n@xin%520\n[19841002]\n[[[460627]]]\n[]\\\\][xtau0.0\n^*!%(*))\n^111aaa$\n^^jul2788*\n^ljxrt250$\n_1234567\n_talkweb\n_xinxin679227_\n`05232425\n`123456789\n`1234567890-\n`1234567890-=\n`123`123\n`123qwer\n`12`12`12\n`1qaz2wsx\n`1qazxdr56\n````1111\n`````````\nA**##a123\na-123456\na.123456\na000000a\na003109z\na00de35t\na0238458\na03547364\na03789606\na04520402123\na05947383087\na0748129\na0810060\na0819884\na08844695\na0987654321\na0a0a0a0\nA100s200\na10101010\na1010110\na10203040\na110110110\na110110a\na110120130\na11111111a\na1111117\na111111a\na111111s\na111222333\na111b222\na112233a\na11235813\na113380807\na119857015\na11b22c33\na12121212\na122820222\na123.123\na1230456\na1231231\na1231512315\na1231516\na1233210\na123321123\na123321a\na12341234\na12342234\na12344321\na1234554321\na123456*\na123456+\na123456..\na12345600\nA123456123\na123456123456\na1234562\na1234566\na1234567889\na1234567890a\na123456789z\na12345678b\na12345679\na1234567a\na1234567b\na1234568\na1234569\na123456?\na123456aa\na123456l\na123456s\na123456z\na12345aq\na12365478\na1236987\na12369874\na123698745\na123963a\na123a123a\na123a321\na123a456\na123a456a\na123b123c123\na123b321\na123b456c\na123bbxz\na123s123\na123s456\na123s456d789\na12b34c56\na1314125\na1314520a\na1314527\na134679852\na1357900\na135792468\na1357924680\na13601077988\na13907569409\na1392010\na13974426291\na13976036334\na1472583\na147258a\na147b258\na14953009\na152535365\na15487963\na159753a\na1598753\na16259852\na164574514\na16899168\na168b169\na17213164\na1955426\na19651030\na19681968\na1970b18\na19710902\na19761220\na1976717\nA197712050\na1978103b\na19782121978\na19803S2\nA19821009\na19821014\na19821108\na19830527\na1983919\na19840224\na19841026\na19841231\na19860209\na19861110\na19871010\na19871211\na1987811.\na19880506\na19890416\na1989124\na19921012\nA1A1A1A1\na1a1a1a1a1\na1a2a3aaqq\na1a5a9u3\na1b1c1d1e1\na1b2c3A1B2C3\na1b2c3d4e5f6g7\nA1b2C3D4e5f6g7H8\na1b2c3d4f5\na1b9c8d1\nA1B9C8D7\na1cherry\na1d3g5j7\na1qazM2WSXpp31\na1s1d1f1\nA1S2D3F4\na1s2d3f4g5h6j7k8\na1system681129\na20040508\na20050030\na20082008\na201201201\na202112d\na21498087\na21k4sfgdb\na2202121\na220a220\na2222222\na22222222\na22j5Befcj\na22j5Bffci\na22j5Bffcj\na22k4rghda\na22k4rghea\na22k4sfgdb\na22k4sfhdb\na22k4sghdb\na22l5qghe9\na22l5qgie9\na2322391\na24120770a\na24433270\na25184602\na25251325\na2534529\na2591885\na26582080\na267455a\na2803129\nA283431148\na2885350\nA299792458\na2aakkk123\na2b2c2d2\na2gin3ty\na3128718\na31415926\na3143303\na321321321\na321654987\na324413a3244\na3289618\na32j5Affci\na32j5Bffci\na32l5qgie9\na32l5thie8\na32l5thie9\na3313555\na33333333\na334422334422342\na3344520\na3344521\na33461511\nA3399660\na33j5Affci\na33j5Afgci\na33j5Afgdi\na33k5Afgdh\na33k5Afgdi\na33k5zfgdh\na33k5zggdg\na33k5zggdh\na33k5zghdg\na3428345\na3456789\na34853569\na3592757\na3598138\na3633511000\na3651118\na3653223\na3691000\na3760481\nA3779210b\na378490503\na3820217\na3838240\na3842317\na3b4c5d6\na3eilm2s2y\na3jianglai\na4231882\na42695200\na42896524\na4296190a\na4325651\na4366205\na441221025\na446915529\na4545111a\na4554550\na459065531\na46453212\na4719310\na4843693\na4872056\na4a4a4a4\na4AgsjnFyt\na4b3c2d1\na4zgsjnFyt\na4zhrjnFyt\na4zhrjoGyt\na503132987\na50386556\na5044611\na52005200\nA5201314A\na521521521\na5220375\na5223891\na523223427417\na5303903\na530520z\na5329261\na53517230\na54181452\na54680903\na5509007\na5513760\na5516512\na5536870\na5555555\nA55555555\na5563514\na55995988\na5644856\na5647322\na56625344\na569174901\na5819031\na58218789a\na5888651\na5905382\na5919978\na5a4a3a2a1\na5a5s5s5\na600110a\na6168468peng\na620212z\na6263965\na628999628999\na632023319\na6350941\na63516391\na6352980\na63653127\na6370663\na64540456\na6470024\na6500101\na6543210\na654321a\na65921344\na65d857c\na6602168\na6666666\na66666666\na666666a\na67211100\na67581895\nA684257x\na69188196a\na6s3g9v5\na7058626\na7252434\na729899a\na729dkx8h\na7301007\na73186219b\na7320956\na74108520\na7719423\na774936188\na7758258a\na7758520\na7758521a\na7758521b\na7758991\na7788521\na780413a\na78221314\na7880229b\na7895123\na789512364\na7895123A\na78963214\na7BktntLDy\na7BkuntLDy\na7CjumsKDy\na7CkumsKDy\na7CkumsLDy\na7CkunsLDy\na7CkuntLDy\na7dbfbcc\na800802601\na801015g\na8011010\na81361090\na82011127\na820629s\na82422855\na830319a\na83421071\na83491273\na83934030\na84716057\na84857316\na84901485\na8492180\na84931022a\na8498381\na84f17rj99\na8500168\na86365210\nA86400915\na8645022\na865w463\na8671328\na8686886886\na87654321a\na8852099\na886a886\na8871918\na8880312\na8888888888\na88888888a\na888888a\nA88900600\na898989a\na8ks231kbcsb\na8yinyue\na911881435\na9256944z\na92719271a\na971111i\na980a980\na981bc66\na9876543\na988966123\na989920b\na99024009\na99633948\nA9999999\na99999999\nA999999A\na9b5c4d3\na9b8c7d6\na9h12o3i6b7\na;sldkfj\nA_123456\naa000999\naa001388\naa005500\naa019893150\naa021231\naa097336\naa10181019\naa102030\naa102200077\naa110110\naa1111111\naa111222\naa11223344\naa112288\naa113118\naa11aa11\nAA11bb22\nAA11BB22CC33\nAA121212\naa123000\naa1234567890\naa123456789aa\naa123456BB\naa1234aa\nAa123789\nAA123AA123\naa123aa456aa\naa123bb123\naa12ss12ss\naa1314521\naa13282725816\naa13700488927\nAA147258369\naa158998\naa15900178121\naa159357\naa159753\naa168168\nAA16888888\naa194997\naa19590726\naa19631963\naa19860311\naa198877\naa1bb2cc3\nAA213321\nAA222222\nAa2282586\naa25201755\naa26321575\naa321123\naa321321\naa336699\naa369369\naa4210769\nAA423117584\naa452228\nAa456123\naa456852\naa5661133\naa571400\naa584520\naa6450320\naa6528028\naa666666\naa667788\naa6750025aa\nAA67621858\naa678678\naa6811418\naa731110\naa768210\nAA7758258\naa7758521\nAA778899\naa780928\naa789789\naa79880132\naa82235940\naa82851827\naa851201\naa861168\naa8612568\naa86363262aa\naA88888888\naa888999\naa963852\naa998877\naa999999\naa9999999\naa9999999999\naaa00000\naaa000111\naaa000aaa\naaa0123456\naaa012612\naaa100200\naaa110110\naaa111...\naaa111000\naaa11111\naaa111123.\naaa11122\naaa111789\naaa111aaa\naaa111bbb\naaa112233\naaa123000\naaa123123123\naaa12341515\naaa1234567890\naaa123456aaa\naaa123654\naaa123789\naaa123bbb\naaa1245145\naaa1357247\naaa13579\naaa1357924680\naaa138197\naaa13929011462\naaa155377\naaa180602zzz\nAAA20090909\naaa258369\naaa332332\nAAA369369\naaa3851191\naaa456123\naaa501532\naaa520520\naaa666666\naaa666888\naaa765071\naaa775898\naaa778899\naaa78222\naaa789789\naaa7918393\naaa888635545708\naaa88888\naaa888888\naaa890604\naaa916898\naaa98098\naaa987654321\naaa999666\nAAA999888\naaa=-900706\naaAA1122\nAAAA1234\naaaa12345\naaaa1983\nAAAA2008\naaaa2222\naaaa3333\naaaa4444\nAAAA5555\naaaa6666\naaaa7317\naaaa9999\nAAAAA00000\naaaaa111\naaaaa29696\naaaaa55555\naaaaa88888\naaaaaa00\naaaaaa000000\naaaaaa111\naaaaaa12\naaaaaa2006\naaaaaa666666\naaaaaa999\naaaaaaa8\naaaaaaaa1\naaaaaaaa8\naaaaaaaaaaa\naaaaaaAAAAAA\naaaaaaaaaaaaaaaaaaaa\naaaaaaas\naaaaaadearbook\nAAAAABBBBB\naaaaasssss\naaaaazxj\naaaaffff\naaaaqqqq\naaaaZZZZ\naaabbb111\naaabbb123456\naaabbb888\naaabbbccc123\naaabbbcccddd\naaaqqqaaa\naaasdaaasd\naaasss0249\naaasss111\naaasss123\naaasssaaa\naaazzzxxx\naabb1121\naabb1122\naabb112233\naabb1234\naabb668899\naabb72cd\naabb7788\naabb999888\naabbaabb\naabbcc00\naabbcc11\naabbcc111\naabbcc112233\naabbcc12\naabbcc123456\naabbcc88\naabbccdd123\naabbccdd731022\nAAbbKK99\naabcdefgh\naadokaixin\naagg1177\naaking007\naakkcc86\naakkccop\naakknnff\naaqq123456\naaron123\naaron1987\naaron520\naaronaaron\naaroncarter\naaroncater23\naaronkite\nAARONKWOK\nAaronLee\naas123456\naas790513\naass1122\naass123456\naass1981\naass995533\naassaass\naassdd00\naassdd123\naassddffgg\naasst1130\naavvccdd\naayygybb\nAb-123456\nab000000\nab010903\nab030506\nab031001\nab111111\nab112233\nab118118\nab11ab22\nab122211\nab123321\nab1234567890\nab123456ab\nAB1234cd\nab123654\nab123789\nab123ab123\nab12ab12\nAB12CD34\nab135790\nab147258\nab147258369\nab147852\nab159753\nab168168\nab19750718\nab2605688\nab301601\nab456789\nAB5201314\nab615800\nab6198018\nab654321\nab654987\nab666666\nab715500\nab721215\nab750826\nab7512309\nAB789456\nab820401\nAB82165289\nab871004\nab888888\nab895620\nab918273\nab969103759\nab987654321\nab9dica9\naba654321\naba7c0bf\nabaa597859\nabab1212\nabab2233\nabab2233?\nabababab\nabaccc01\nabaoabao\nabb123456\nabba123456\nAbbey(@8\nabc.1234\nabc.123456\nabc00000\nabc00541\nabc009mm\nabc010203\nabc0123456\nabc0123456789\nabc058888\nabc07933204\nabc100200\nabc10086\nabc102030\nabc110110\nabc11111\nabc111222\nabc11223344\nabc11abc\nabc121212\nabc123!@\nabc123..\nabc123...\nabc12300\nabc123000\nabc12315\nabc123321cba\nAbc1234%\nabc1234560\nabc123456789abc\nabc12345abc\nabc12356\nabc123654789\nABC12366\nabc12369\nabc123888\nabc123987\nabc123abc456\nabc123cba\nabc123cba321\nabc123d4\nabc123de\nabc123dearbook\nabc123DEF\nabc123def456\nabc123xyz\nabc123yu\nabc126126\nabc13098986768\nabc1316822\nABC13228282009a\nabc1332208\nabc135790\nabc147369\nabc159753\nabc168168\nabc17xyz\nabc19450505\nabc1957818\nabc19811228\nabc19821001\nabc19830925\nabc1989asd\nabc1992411\nabc2009abc\nabc2130377\nabc222222\nabc222666\nabc23009887\nabc246810\nabc258258\nabc262411\nabc31415926\nabc336699\nabc3368990\nABC343508\nabc3621955\nABC369258\nabc369369\nabc449928\nABC456123\nabc456456\nABC456789\nabc456852\nabc4995121\nabc5453718\nabc55555\nabc555555\nabc56789\nabc59420\nabc651def\nabc666888\nabc666abc\nabc709394\nabc741852\nabc753951\nABC7654321\nabc77559\nabc778899\nabc789789\nabc789abc\nabc789xyz\nabc830306\nabc831220\nabc8653498\nabc888666\nabc888999\nabc888abc\nabc911119\nabc911911\nabc95599\nabc963852\nabc963852741\nabc98765\nabc988613\nabc99801\nabc999999\nabc@123!\nabc_123456\nabc_881010\nabcabc11\nabcABC111\nABCABC123\nABCABC123123\nabcabc123456\nabcabc88\nABCCBA123\nabccba123321\nabccbaabc\nabcd!@#$\nabcd+1234\nabcd.1234\nABCD0000\nabcd000000\nabcd020219\nabcd0551\nabcd1001ri\nabcd110108\nabcd1111\nabcd111111\nabcd1125\nabcd1218\nabcd1230\nabcd1234.\nabcd12343\nAbcd12345678\nabcd1234567890\nABCD1234777\nabcd1234a\nABCD1234abcd\nabcd1234abcd1234\nabcd1234efg\nabcd123654\nabcd123789\nabcd123abcd\nabcd123efgh\nabcd1357\nabcd1361\nabcd1688\nabcd1900\nabcd1966\nabcd1972\nabcd1981\nabcd1982\nabcd1983\nabcd1984\nabcd19841128\nabcd1986\nabcd1988\nabcd1989\nabcd1999\nabcd2000\nabcd2001\nabcd2006\nabcd2007\nABCD2008\nabcd2009\nabcd2010\nabcd2222\nabcd2345\nabcd2468\nabcd4444\nabcd4567\nabcd5213\nabcd54321\nabcd543211982\nabcd5555\nabcd5566\nabcd6666\nabcd666666\nabcd6688\nabcd6789\nabcd7032\nabcd7758258\nabcd7890\nabcd841021\nabcd8899\nabcd8996\nabcd9510\nabcd9803\nabcd9876\nabcd987654\nabcd9999\nabcd_1234\nabcd_321106\nABCDABCD\nabcdabcd123\nabcdabcd1234\nabcdabcdabcd\nabcddcba\nabcdduck\nabcde11111\nabcde125\nabcde13579\nabcde2008\nabcde23456\nabcde3603021984\nabcde54321\nABCDE98765\nabcdef12\nabcdef12345\nabcdef123456789\nabcdef654321\nabcdef888\nabcdefabcdef\nabcdefg0\nabcdefg00\nabcdefg000\nABCDEFG000591\nabcdefg001\nabcdefg11\nabcdefg111\nabcdefg12\nabcdefg123456789\nabcdefg123456h\nabcdefg261827\nabcdefg321\nabcdefg456\nabcdefg520\nabcdefg521\nabcdefg666\nabcdefg7\nabcdefg7654321\nabcdefg789\nABCDEFG8\nabcdefg9\nabcdefga\nabcdefgab\nabcdefgABCDEFG\nabcdefgfq\nabcdefgg\nabcdefgh123\nabcdefghijkl\nabcdefghjkl\nabcdefgz\nabcdmnmn\nabcdwxyz\nabcdxor188188\nabcge123\nabcidd1984\nabconline\nabcqq163\nabcs369##\nabcxyz123\nabcy123789\nabczcf1127\nabd112358132134\nabd123456\nabdcghjk\nabdullah\nabetterday\nabiaolaure1222\nabl44812\nable2705678\nabluesky\nabnormal\nabriongded\nABS123456\nabsolute\nabsolutely\nabsunshine\nabzhuzhu\nac/88271z\nAC00000000\nac136091\nac963852\nACACACAC\nacad781227\nacc9806ac\nacca2004\naccd123tew\nacceleraee\nAccenture1\naccessibm\naccident\naccomplish\naccountant\naccounting\nACCP1234\naccp123456\naccpliuwei\nacdcacdc\nacde4321\nacds991220\naces991754\nachali0928\nachilles\nacid1219\nacmilan1899\nacmilan7\nacmilano\nACr2CUo2\naction88\nacupoftea\nad005com001\nad123123\nad1816ad1816\nad1821cs\nad200907\nad521241\nad789012\nad795252\nad87654321ad\nad890426\nad962512\nada200127\nada3817079\nada771202\nada789456123\nadadadad\nadagio1987\nadahai01\nadal0910\nadam4019\nadam51863378\nadam6891\nadamadam\nadamancy\nadamcheng\nadaoshen\nadd123456\naddress66\naddw454aa\nade123456\nadelaide\nADEn1234\naden520114\nADforever1116\nadgadgadg\nadgjl123\nadidas123\nadidas33\nadidasadidas\nadidasnike\nadidaspk\nadj258ej\nadjsnbyzhy\nADLSZYWHN\nadmin000\nADMIN007\nadmin101\nadmin110\nadmin111\nadmin120\nadmin168\nadmin1988\nadmin2008\nadmin2009\nADMIN2010\nadmin32417\nadmin3568790\nadmin520\nadmin530\nadmin99530\nadmin999\nadminfzt\nadminhao\nadminigou\nadminist\nadminister\nadministr\nadministra\nAdministration\nadminliu\nadminlogin\nadmins00\nadminsky2043\nadmintmode\nadmintusu\nadminuser\nadmiral188\nadnwe123\nadoglikeawind\nadolfhitler\nads123456\nadsfadsf\nadsl01230\nadsl1234\nadsl12345\nadsl123456\nadsl2006\nadsladsl\nadu021018\nadueadue\nadvanced\nadventure\nadzcadzc\naeg20086\nAegeansea\naeiouaeiou\naek000932\naerolite\naesop001\naeyooadmin\naf123456\naf3021744\naf3601675\naf368898\nAF8732E3\naf87654321af\naf888888\nafafafaf\nafdfss78610520\nafei2000\nafei2702530\nafei791203\nafeiafei\naffection\nafflatus\nafineday\nafjг╗8822538\nafldtvenus\nafq3wr123\nafsdafsd\nafsj123456\nafternoon\nAG123456\nagagiitfu\nagainskh\nagamemnon\nagan123456\nage688com\nagentsoft\nageofking\naggressive\nAgilent123\nagnes0716\nagnieczka610\nagoodboy\nagoodday\naguan2009\naguilera\nah123456\nah88888888\naheadyes\nahill1029\nahnjaewook\nahq871228\nahshsx123\naht659hjt\nahttchmyy\nahuatian\nahui23019\nahuiahui\nai110119\nai110801\nai123123\nai123654\nai131624\nai1986712\nAI198739\nai19880829\nai389424256\nai5041020\nai520520\nai7250783\nai7758258\nai7wangdao\nai8722709min\nai890926\naia412999\naiaiaiai\naiaiying1314\naianyixuan\naibabamama\naibao1314\naibaobao\naibaobao1314\naibaobei\naibeibei\naibi1451\naibin1314\naibingbing\naibuaiwo\naibuhouhui\naibwfkbss\naichen222\naichimian\naichirou\naichishuiguo\naichouchou\naidan1314\naidandan\naidaoming\naidedaijia\naidefeixu\naidehuoyan\naidejiushi\naidejiushini520\naidejshini\naidermoi\naideshini\naidewuyu888\naidiandian3030\naidinghu\naidingni\naidisheng\naidjiusni\naidnvren\naidongying\naidoudou\naids1234\naidsaids\naiduoduo\naifang1314\naifeiertai\naifeifei\naifeilove\naifeng1314\naigd-129\naigh1120\naighaigh\naigoaigo\naigochow\naigs1314\naiguijuan1025\nAIGUO2009\naiguozhe\naihaima14\naihan1314\naihenjiandan\naihenqingchou\naihentong\naihexihuan\naihexiwang\naihua1314\naihuanhuan\naihui1314\naihuihui\nAIJIAJIA\naijiao1314\naijiaren\naijie1314\naijiejie\naijielun\naijingjing\naijiuaile\nAIJIUQUBA297866\naijiuyigezi\naijuan1314\naijuanjuan\naijueli234543\naijun0810\naijun1314\naike8923\naikiaiki\naikoaiko\naikongzi\naikunzhen\nailaogong\nailaohuyou\naileen007\nailei1314\nailei19871025\nailingyiwannian\nailinlin\nailiujia\nailiujuan\nailixiang\nailonger\nailuailu\naim31415926\naimaomao\naimeimei\naimengmeng\naimin1314\naiminmin\nain868686\nainannan\naini.1314\naini10000\naini10000nian\naini1234\naini1986\naini1988\naini1999\naini1beizi\naini1wannian\naini2008\naini2134\naini520520\naini5211314\naini5588\naini88723a\naini888888\naini8918669\nAini9999\nainiaide\nainiaiwo\nainibaobao\nainibuhouhui\nainibuhui\nainibushi23tian\nainibuyanhui\nainidaodi\nainidaosi\nainidaoyongyuan\nainidexin\nainideyun\nainifeng\nainigaolei\nainihaoma\nainihaonan\nainijiujiu\nainilaopo\nainimama\nainironger\nainiru25\nainiwsling\nainiyang\nainiyijiu\nainiying\nainiyishen\nainiyishengyishi\nainiyishi\nainiyitian\nainiyiwan\nainiyiwangnian\nainiyiwann\nainiysys\nainiyuan\nainizaimyt\nainne0607\naioulisi\naipincaihuiying\naiping1314\naiqian1314\naiqianqian\naiqin1314\naiqin800703\naiqing123\naiqing1314\naiqing36ji\naiqing520\naiqingbsqb7\naiqinghai\naiqinghai417\naiqingmima\naiqingniao\naiqingzhuanyi\naiqinhai\naiqunfa667\nairchina\naircraft\nairhb1000\nairjordan\nairplane\nairukongqi\nairwater\naishangai\naishangaiqing\naishangleni\naishangni1314\naishangsan\naishangwj979\naishanshan\naishasha\naisheishei\naishenghuo\naisheying\naishideru\naishishenme\naishleni\naishouji\naishuang\naishuishui\naisinila\naisinile\naisiteru\naisiyuan\nAISU1314\naita1314\naitao1314\nAITAOTAO\naiteng520\naitianya\naiting1314\naitingting\naitsmq99\naivy521521\naiwei1314\nAiweiwei\naiwenwen\naiwoaiwo\naiwoderen\naiwohaishita\naiwohaoma\naiwojiuaiw\naiwojiujiu\naiwolaogong\naiwolaopo\naiwonipalema\naiwozhonghua\naiwoziji\naiwujiwu\naiwuxian\naiwuzhijing\naixiangsui\naixiao123\naixiao8487\naixiao888\naixiaoage\naixiaobai\naixiaobing\naixiaoming\naixiaoxiao\naixiaoxue\naixiaoyan\naixiaoyi\naixiaoyu\naixin1314\naixingming\naixinjueluo\naixinxin\naixiziji\naixuan1314\naixue1314\naiyan1314\naiyang1314\naiyangyang\naiyanyan\naiyaoyao\naiyawocao\naiyayasp\naiyi1945\naiyi613613\nAIYIGEreN\naiyingying\naiyinsitan\naiyixidelu\naiyoaiyo\naiyoomin\naiyoutianyi\naiyu1314\naiyuanyuan\naiyueyue\naizai1123\naizai2005\naizai2008\naizaiaini\naizazadi\naizhaowei\naizhuanjiao\naizhuzhu\naiziji0129\naiziji1204\naiziji123\naiziji520\naiziji521\naiziji99\naizijiaiziji\naizijiba\naizijiduoyidian\naizj1314\naj123456\najdatjjemlm\najgdddit\najieajie\najingbr12\najqghdpv\nak000000\nak213828\nak47158596\nak4719840829\nak47636lll\nak47ak47\nak47b6o2\nAK47F1H3Q0\nak47good\nak47m4a1\nAk700y78\nak704223\nakae1234\nakaeduwu\nakakakak\nakanishi\nakanishi870127\nakanishijin\nake87e98a\nakenaken\naki8234JP\nakirasendoh\naklianfa\nakriafuji\nakshbeyond\nakuzk123\nal123456\nal5201314\nal56116532123165\nal790801\nal88al88\naladdin19840729\naladin0730\naladoudou\nalalalal\nalalei123456\nalan2008\nalan7215\nalanalan\nalang625\nalanvicky\nalauju422\nalbatross\nalbbh40dd\nalbbyssdd\nalbbzmkm\nAlbert152\nAlbty00o\nalck361546\nalcls0901\nalecalec\nalenalen\nalex1234\nalex123456\nAlex1980\nalex1981\nalex1983\nalex1984\nalex1986\nalex2008\nalexalex\nalexchen\nalexcyl020907\nalexginie000530\nALEXhuang\nalexwang\nalexwong\nalexyang\nalexzhang\nalfaromeo\nalfred456\nalfred77\nali09701981\nali871105\nalialiali\nalian2288\naliang123\naliaosha\nalibaba123\nalibaba40\nalibabalive007\nalice123\nalice1987\nalice520\nalice521\nalice6352040\nalicealice\naliceliu\nalien7cp\nalingtuofo\naliwangwang\nallanallan\nallanchen\nallen001\nallen007\nallen0305\nallen070923\nallen0855\nallen123\nallen1987\nallen2007\nallen520\nallen521\nallen543216\nallen7667\nallenallen\nalleniverson\nalleniverson3\nallenlee\nallensu0305\nallensuu\nallenwang\nallenyidinghong\nallesgute\nallforlove\nallforone\nallforyou\nallgood168\nalliance\nallinone\nallinwind1211\nallisoknow\nallloveme\nallmylife\nallmylove\nallright\nallstar007\nallthebest\nalm641112\nALMIGHTY\naloevera\nalohomora\naloneman\nalongalong\nalonso813\nalove620718\nalpacino\nalpenliebe\nAlpha123\nalpha1985\nalphaone\nalpsgaga\nalsk5213\nalskalsk\nalskdjfh\nalskdjfhg\nalth1985\naltin1984\naluminum\nalvvvqxm\nalw8aps8\nam123456\nAM891204\namam0421\naman13620\namanda2630\namandalee\namao4690119\namaoamao\namay1973\namber*931101\namber0921\namber1016\namber1981\nambersea69\nambition\nambitious\nambrosia\nAmbrosini\nambulance\namd836465\nameiamei\nameijie999\namenamen\namengxue\nameramer\nAMF1L78nhf\nAMF1L78oif\nAMF1L79oif\namilk202968\namilne0410\naminadiab\namingo123\namitabha\namituo123\namituofo\namoaraul\namoisonic\namour123\namour753\namouramour\namptck3298\nAMsmile5525\namtf1188\namtfamtf\namwamd850316\namwfhvwy\namwgyaigh\namwicfdx\namwihggw\namwmwychl\nAMWofn812928\namwpeichjh\namwss368\namy-kimi\namy001277\namy123456\namy123amy\namy5201314\namy881212\namy920308\nAmy_1985\namywang1981\namyyippl\nan000000\nan02787593967\nan10000n\nan1033hua\nan123456789\nan19850413\nan2004646\nan46849819\nan7138505\nan750715xbb\nan791013\nan852180\nan8889496xbb\nanadthdl\nanalysis\nanan123456\nanan2004\nanan2008\nanan856313\nanananan\nanata552\nanda1990ty\nandersen\nandhesaid\nandi59452816\nandiey505\nandy0127\nandy1018\nandy1111\nandy1230\nandy1234\nANDY123456\nandy1314\nandy1979\nandy1981\nandy1982\nandy1984\nandy1985\nandy1986\nandy1987\nandy1989\nandy2000\nandy2002\nandy2003\nandy2006\nandy2008\nandy2009\nandy654321\nandy6656788.\nandy832189\nandyandy123\nandychang\nandychen\nandycool\nandydong\nandyekin\nandygigi\nandyhuang\nANDYISME\nandyjesen\nandyking\nandylau1355\nandylau6185\nandylove\nandylovelinda\nandyoyoc\nandyroddick\nandytong\nandywang\nandyyang\nandyye123\nandyzhang\nandyzhou\nanechbbs\nanewlife\nANEWSTART\nANF1M79oif\nANF2M79oif\nanfernee\nanfujiao\nangel000\nangel001\nangel003\nangel007\nangel0202\nangel0303\nangel0502\nangel0511\nangel1008\nangel1217\nangel1230\nangel123456\nangel1314\nangel1982\nangel1983\nangel1984\nAngel1985\nangel1986\nangel1987\nangel1988\nangel2000\nangel2002\nangel2008\nangel2009\nangel2046\nangel214\nangel222\nangel329\nangel369\nangel520\nangel5201314\nangel521\nAngel6688\nAngel8116\nangel828\nangel8597595\nangel888\nangel970923\nangel999\nangela123\nangela1234\nangela512\nangela520\nangelangel\nangelchen\nangelfayed\nangelfish\nangelfly\nangelfox\nangelheart\nangelina2006\nANGELINE\nangelisflying\nangeljing\nangelkiss\nangelkitty\nangellee\nangellei\nAngelli003\nangellove\nangellover\nangelman\nangelnick\nangeloo27\nangels1818\nangelsky\nangelwang\nangelwing\nangelxiao\nangelyufeeling\nangie311409\nangiewei217\nangle123\nangle520\nanglelove\nangles9302\nangleyang\nangn102427\nanhui123\nanhuiren\naniceday\nanimation\nanita123321\nanitamui\nanjaewook\nanjing19870714\nanjinnan\nankiytt520\nanleipinmi\nanlongfox\nanm951266888363\nanmoran123\nann4713175\nanna1212\nanna123456\nanna19850619\nanna929113\nannaanna\nannabella\nannahuang\nannanlmk1l\nannasong\nannasue521\nanne1971\nanne2000\nanneanne\nannebaby\nannibaobei\nannie123\nannie520\nannie_7668\nannieannie\nannielee\nannielily1\nanniwaer\nannyanny\nannybaby\nannyKity\nanother1\nanother123\nanother975\nanothera\nanotherday\nanothering\nanotherone\nanpenganpeng\nanqi821102\nanqiuliang\nanqixuan\nanquandi1\nanquandiyi\nanquanmima\nansalily\nansheng82\nanshenghao\nanshun144\nanson123\nAnswer003\nanswer123\nanswerme\nante2005\nantelope\nanti0123\nanti520death\nantiliyuan\nanting2020\nantiusa001\nanuanlinhua\nanvychen\nanxin12345\nanxinlei\nanxn2june51\nany10100\nanyany2009\nanycall@123\nanying3201567\nanyixuan\nanyso258\nanyu1984\nanyuanhl\nanywhere\nanywnanywn\nanzhao82\nanzhiruosu\naoaoaini\nAOAOAOAO\naoaojiao\naoe123iwu\naoienter\nAokRppM843\nAokRptM843\naolanduo\naon2052854\naoqi2009\naoqiguanggao\naorpose38\naoyi123456\naoyunhui\nap814171\nape54321\nape754warm963\naphhyxyj\naphrodite\naping615243\nApjRppL844\nApjRppM844\nApjSppM844\nApjSqpM844\nApkRptN843\nApkSptN843\napollo222\napollo79\napologize\napoptoxin4869\napotoxin4869\napparition\nappendix\nappieluo\napple000\napple001\napple00123\nApple002\napple007\nApple0329\napple100\napple1011\nAPPLE110\napple111\napple119\napple1230\napple1234\napple12345\napple123456\napple1314\napple139061\napple168\napple1982\napple1983\napple1984\napple1985\napple1987\napple2000\napple2003\napple2006\napple2008\napple2009\napple2010\napple312\napple317\napple320\napple321\napple32299\napple323\napple333\napple456\napple4897\napple520\napple521\napple5678\napple666\napple725458372\napple729\napple777\napple8008\napple823\napple8250\napple888\napple911\napple999\napplebanana\napplebear\nAPPLEBOY\nappledearbook\nappledog\napplefly\napplegirl\napplejuice\nappleking\napplelee\nappleliu\napplelove\nappleman\nappleorange\napplepear\napplepig\napplered\napplesky\napplesun\nappletree\napplewaner\nappleyuan\napplication\nappreciate\napril0713\napril1st\naprilapril\naprilrain\napsqyudng\nAPTX-4869\naptx4689\napysgauy\naq111111\naq131216\naq1sw2de3fr4\nAqjSqpM844\nAqjSqpN844\nAqjSqqN844\nAqjTqqN844\naqs123456789\naqsw8899\naqu1314520\naqugss230011\naqwsde25\naqy8517512\naqzaaqza\nar123456\nAr801121\narakiren\naranlove\narchangel\narchdevil\narchfiend\narchitect\narchitecture\narchmage\nardybaby\naren731018\naresares\nareyouok\nareyouready\nareyousure\narielzhong\nariosujtb\naristotle\narkee4024\narmageddon\narmstrong\narmyworld\narron1120\narry123456\nARSENAL14\narson125\nart080701\narwrakevin\nAS000000\nas007007\nAS01390139\nas020626as\nas076323\nas110110\nas111111\nas112233\nas114001\nas121212\nas123456as\nas123654\nas123as123\nas12as12\nas12df34\nas134578\nas13g76mnlp\nas141963\nas19700328\nas197009a\nas198233\nas198613\nas198686\nas19871027\nas2404793\nAS258369\nas2583697\nas3102323\nas3105890\nas321321\nas369258\nas3724871\nAs412251\nas522396\nas5258536\nas654321\nas7758258\nas7758521\nas7883248\nas789456123\nas840614\nas8547589\nAS868686\nas8746495\nas888888\nas989898\nas@#$%369DF\nasa123456\nasakurahao\nasakurayou\nasalways\nasas123456\nasas195647.520\nasas78523\nasasas11\nasasas12\nasassasa\nasb#1234\nasb#2345\nasd000000\nasd00123\nasd041895\nasd110110\nASD11111\nasd111111\nasd111222\nasd112233\nasd121212\nasd123!@\nasd123...\nasd123000\nasd12315\nAsd123229a\nasd12345258\nasd1234567890\nasd12369\nasd123dsa\nasd123fg\nASD123FGH456\nasd123qwe\nasd123zxc\nasd123zxc456\nasd135246\nasd13579\nasd1944910\nasd1985asd1985\nasd232526\nasd258369\nasd2727#\nasd321321\nasd321654\nasd333555\nasd336699\nasd351420\nasd3663735\nasd369369\nasd456456\nasd45679\nasd456852\nasd456asd\nasd520520\nasd5211314\nasd523615\nasd56178\nasd6218372\nasd628316\nasd666666\nasd741852\nasd753951\nasd7758258\nasd778899\nasd789789\nasd888999\nasd987654\nASD990822\nasd99887766\nasd@239518\nasda1231\nasdasd00\nasdasd11\nasdasd110\nasdasd111\nasdasd123123\nasdASD1234\nasdasd99\nasdasdaa\nasdasdas\nasdasddsa\nasdasdqwe\nasdcvbn1\nasddsa123\nasddsaasddsa\nasdfг╗lkj\nasdf-123\nasdf-1234\nasdf0000\nasdf0111\nasdf0123\nasdf0123456789\nasdf0515\nasdf0987\nASDF1006\nasdf1111\nasdf1122\nasdf1212\nasdf1230\nASDF123123\nasdf123321\nASDF12345\nasdf1234567\nasdf123654\nasdf123asdf\nasdf1260\nasdf1314\nasdf1357\nasdf13579\nasdf147258369\nasdf159753\nasdf1978\nasdf1979\nasdf1980\nasdf1981\nasdf1982\nasdf1984\nasdf1985\nasdf1986\nASdf2000\nasdf2004\nasdf2008\nasdf2009\nasdf258369\nasdf400200\nasdf4444\nasdf456123\nasdf4567\nasdf45678\nasdf5201314\nasdf5566\nasdf5678\nasdf666888\nasdf6787\nasdf6789\nAsDf7070\nasdf7410\nasdf7890\nasdf789456\nasdf78963\nasdf8024\nasdf8520\nasdf8888\nasdf9876\nasdf;lkj\nasdfasdf1\nasdfasdf123\nasdfasdf1234\nasdfffff\nasdfg000\nASDFG111\nasdfg11111\nasdfg147\nasdfg2009\nasdfg267\nasdfg2wsx\nasdfg520\nasdfg54321\nasdfg6230\nasdfg668\nasdfg777\nasdfg789\nasdfg7890\nasdfg888\nasdfg963\nasdfggfdsa\nasdfgh11\nasdfgh12\nasdfgh1234\nasdfgh147\nasdfgh1849\nasdfgh1997\nasdfgh369258\nasdfgh456\nasdfgh66\nASDfgh789\nasdfgh87\nasdfgh987\nasdfghas\nasdfghasdfgh\nasdfghdearbook\nAsdfghj1\nasdfghj123\nasdfghjklг╗\nasdfghjkl110\nasdfghjkl111\nasdfghjkl1234\nasdfghjkl12345\nasdfghjkl1234567\nASDFGHJKL456\nASDFGHJKL789\nAsdfghjkL9\nasdfghjkl;бп\nasdfghjklmp3\nasdfghjl\nasdfghzxcvbn\nasdfGjkl\nasdfglkjh\nasdfgqwert\nasdfgzxc\nasdfgzxc432a\nasdfgzxcvb\nasdfhjkl\nasdfjk88\nasdfjklг╗\nasdfjkl0\nasdfjkl123\nasdfjkll\nasdfjklz\nasdflkjh\nasdfpeter\nasdfqwer1234\nasdfuiop\nasdfvcxz1\nasdfxiao\nASDJKL112\nasdjkl123\nasdlkj123\nasdqasdq\nasdqaz123\nasdqs495\nasdqweasd\nasdqwezxc\nasdwsxqwe\nasdzxcasd\nasdzxcasdzxc\nasdzxcqwe\nasen8433\nasfasdfhgfg@126.\nasha83866\nashesoftime\nashin1206\nashiwoaini\nashou999\nashu@china.com\nasiaasia\nasiainfo\nasiaking\nasiastarchy\nasjkasjk\naskaaska\naskformore\nASlk1973ZXmn5533\naslongas\nass123456\nassassass\nassdassd\nassessage\nassessed\nassholes\nassiduous\nassissy20\nassist32\nassistant\naster797237\nastonish\nastroboy\nastronaut\nastronomy\nASTV198012\nasukaasuka\nasurababy\nasure*-*505181\nasus1234\nasus123456\nasus4423\nasusasus\nasy369sh\nasyouwish\nasz123456\naszx1234\naszxxzsa\nat123456\nat852777\nataiatai\nathena168524\nAthenaeum\nathens12\nathlon64\nathlonxp\nathrunkira\nathrunzala\natlantic\natmcu.cf\natmosphere\natobekeigo\natombomb\natompass\natpx4869\natsuko86\nattention\natx20011\nau00001000\naua70875\nauckland\naudreyhepburn\naug061982\naugustus\naum950510\nAUSCOOL2009\nAustralia\naustralis\nauthority\nauto50507\nautoauto\nautodesk\nautoexec.bat\nautojason\nautomatic\nautomation\nautopower\nav111111\nav123456\nAveryLiu\navh2320136\nAVM5Uacunj\nAVM5Uadunj\nAVM5Ubdunj\nAVM6Ubdunj\nAVM6Ubdvnj\nAVN6Ubdvnj\navril331\navril927\navrilwhite\naw123123\naw893710247\nAWDRGYJIL\nawdx7301\nawdxAWDX\nawei830125\naweiop123\nawen2000\nawfi1981\nawfi58721\nawhpg2009\nAWN6Ubdvnj\nawnplm821\nawnubybe\nawnujeje\nawp6115758\nawrfasryrtjsdg@1\nawsawywh\naww123456\nax111111\nax112233\nax123456\nax57563095\nax996000\naxax888999\naxczw123456\naxdvgn24680\naxhxc16303\naxigeling\naxing521891\naxjlzz-1981\nAY123456\naya21scn\naya7492211\nayanami0\nayanamirei\nayayasp11\nayifangwei\nayiya2009\nayong888\naysia163\naysia1698\naysia968200\naysia9688\nAyu99212213\nayumi1107\nayumi520\nayumihamasaki\nayumilene\nayumimable\nAyy1989112\naz09fjet\naz123123\naz123654\naz23558556\naz70260633\naz7812369\naZA0070731\nazaazafighting\nazc1981a\nazhen830\nazhuixxva\nazjazj1987\nazs123456\nazsx1234\nazuoazuo\nazureviolin\nazx123456\nazz439617\nb//830412\nb0000000\nb00000000\nb00031128\nb00111318\nb007uick\nb01095221\nb02173114\nB03117121\nB05020827\nb0j9h1v9\nb0ns1eep\nb11111111\nb123456b\nb19840531a\nb19860125a\nb209bb67\nb2561881\nb32l5thif8\nb32m5thjft\nb32m5tijft\nb32m5tijgt\nb33k5ygheg\nb33k5zghdg\nb33k5zgheg\nb33m50ijgt\nb33m50ikgt\nb33m5tijgt\nb33m5yghef\nb33m5ygheg\nb33m6xghef\nb33m6xhhef\nb33m6xhiee\nb33m6xhief\nb366beca8154\nb3AgtinExs\nb3c2d4bd\nB3c4d5e6\nb3ZgtinExs\nb43m6whife\nb43m6xhiee\nb43m6xhife\nb43n6whifd\nb4AgsinFxs\nb4AgsinFxt\nb4AgtinFxs\nb5201314\nb542029468\nb5j5s5s1\nb6066998\nB612B612\nb6340919\nb6byc6t7c3\nb6CjumsKDy\nb6CjvmsKCy\nb6CjvmsKDy\nb6DjvmsKCx\nb6DjvmsKCy\nb7CjumsKDy\nb7ct1ez0\nB8437zzz\nb87387238\nb8f9b8r2\nb98ak899\nba123456\nba1979cd1023\nbabababa\nbabamama123\nbabamamahao\nbabamamahewo\nbabamamawo\nbabamamawoaini\nbabawoaini\nbAbI1206\nbabuku123456\nbaby0527\nbaby0825\nbaby1013\nbaby1019\nbaby1225\nbaby1234\nbaby1314\nbaby1314520\nbaby1978\nbaby1982\nbaby1983\nbaby2002\nbaby2008\nbaby2009\nbaby520520\nbaby820907\nbaby8888\nbabycomeon\nbabyfaye1\nbabyfish\nbabyhuihui\nbabyiloveyou\nbabykiss\nbabylong\nbabylover\nBABYME0725\nbabyrain\nbabywoaini\nbabywolf\nbabyzhang\nbacheeillen\nbachelor\nbackbone\nbackfire\nbackground\nbackhome\nbad79842\nbadboy123\nbadeinet\nbadisituta\nbadtbadt\nbaeeq179696\nbaeyongjun\nbafcuwxf\nbagayalu\nbageyalu\nbaggio10\nbaggio123\nbaggio18\nbaggio1967\nBAGGIO218\nbaggio670218\nbagmywxf\nbai123obasan\nbaibai520\nbaibaibai\nbaibo1025\nbaicai0509\nbaicaoyuan\nbaicesfi\nbaicheng\nbaichi00\nbaichi123\nbaichuan\nbaidhqcgss\nbaidianfeng\nbaidianfeng8583\nbaidiankuye\nbaidou123\nbaidu0603\nbaidu123\nbaidu123408\nbaidu2009\nbaidu2tianya\nbaidu520\nbaidubaidu\nbaiducom\nbaiduren\nbaiduzhus\nbaiguang\nbaigujing\nbaihang2009\nbaihe160631\nbaihe1987v\nbaihe3206\nbaihehua\nbaihelily\nbaihualin\nbaijia1213\nbaijiazi\nbaikaishui\nbailiang\nbailongba2\nbailu19810307\nbainiangudu\nBAIPWYGCHH009117\nbaiqiang\nbairiyishanjin\nbairongwenhua\nbaisbais\nbaishan2009\nbaisheng\nbaishiyu1988\nbaishuang\nbaisihui\nbaisong520\nbaisu123456\nbaiuvssgh\nbaiwei2008\nBAIXIANG\nbaixiaochi5241\nbaixiaoliang\nbaixue123\nbaixue5201314\nbaixuefeng\nbaixuesong\nbaixyutibn\nbaiyan1982\nbaiyang123\nbaiyangzuo\nbaiybaiy\nbaiyfjhh\nbaiyinqi\nbaiyu123\nbaiyu8923567\nbaiyun;520\nBAIYUNBAIYUN\nbaiyunfei\nbaiyunfeng\nbaizilove\nbajie16888\nbakeluo2009\nbakhn524ds\nbakhny12\nbalabala\nbalangshan\nbalilianren\nballack13\nballball\nballodliu\nbama1982\nbama5200\nbamahewo\nbamanihao\nbamawoainimen\nbamboo-13579\nbamboo123\nbamboo818858\nbanaihui\nbanana123\nbanana2373\nbanfanhong\nbangdang\nbangni12\nbangyang\nbanjiang\nbankofchina\nbankrate\nbansheng\nbanshouren\nbanzhang\nbanzhiyan\nbanzhuan\nbao12345\nbao123abc\nbao138168\nbao1hhd258\nbao666999\nbao76842891\nbao830925\nbaobao1016\nbaobao110\nbaobao1206\nbaobao123456\nbaobao1314\nbaobao1983\nbaobao1986\nbaobao1986712\nBAOBAO2003\nbaobao2008\nbaobao20080108\nbaobao2009\nbaobao21\nbaobao80\nbaobao88\nbaobao99\nbaobaoai\nbaobaoaiwo\nbaobaobaobao\nbaobaobeibei\nbaobaodearbook\nbaobaoguai\nbaobaohao\nbaobaolan\nbaobaolove\nbaobaomao\nbaobaomm\nbaobaozhu\nbaobei00\nbaobei11\nbaobei19901211\nbaobei2009\nbaoBEI5201314\nbaobei99\nbaobeiaini\nbaobeibaobei\nbaobeibuku\nbaobeier\nbaobeigeda\nbaobeiguai\nbaobeilove\nbaobeiwoaini1314\nbaobeixieyunqing\nbaobeiyu\nbaobeiyuanyuan\nbaobeizhu\nbaochang\nbaocheng\nbaodajiang\nbaoduzi14\nbaofen29061748\nbaofeng771103477\nbaoguangba8888\nbaohaisen\nbaoleibaolei\nbaoliang\nbaomihua\nbaoqiang\nbaoshihu\nbaoshijie\nbaoshuang\nbaosight\nbaosteel\nbaoxiang\nbaoyouwo\nbaoyumeng\nbaozheng\nbaozhiqi\nbaozi123\nbaozi520\nbaozi=07\nbaqishijia\nbarbarian\nbashanyeyu\nbashenan\nbashezhe\nbashm7073\nbasiteng\nbasteter\nbati0201\nbatigoal\nbatistuta9\nbatman11\nbatou502382\nbattle0513\nbawangbieji\nbawgiqtd\nbb000000\nbb111011\nbb111111\nbb112233\nbb123123\nbb123321\nbb1234567\nbb131421\nbb1314520\nbb200.com\nbb200808\nbb2mbb2m\nbb520520\nbb5211314\nbb584520\nbb5qpcast\nBB654321\nbb731028\nbb7758258\nbb7758521\nbb7802829\nbb790927\nbb850726\nbb888888\nbb917mm830wo128\nbbb123123\nbbb1234567\nbbb222BBB222\nbbb887575\nbbbb0000\nbbbb1111\nbbbb11111\nbbbb123456\nbbbb2222\nbbbb751028\nbbbb8888\nbbbbbbbbb\nbbbbbbbbbb\nBBC3226688\nbbc359610\nbbc990310\nbbcbbcbbc\nbbcdy130350\nbbh2gd2vk9\nbbily1027\nbbj123456\nbbkissme\nbblovebb\nbblovegg\nbbmm5201314\nbbmm840815\nbbmmjjdd\nbbmmwanm\nbbmmwoaini\nbbnn2323\nbbpplove\nbbqbbqbbq\nbbs12345\nbbs123456\nbbs13418049076\nbbs5201314\nBBs549393428\nbbs555333\nbbs957957\nbbsbbsbbs\nbbstianya\nbbting52099\nbbvodbbvod\nbbww7275\nbbxubbxu\nbbxwwang*321\nbbxxweiyi\nbbzy1234\nbc1990131\nbc221ac383\nbc987654\nbchuoyan\nbclcaoming\nbcron20011222\nbcxfwh3837025\nbczwldln\nbczxxxljz\nbd123456\nbd51515252\nbdgbyy123\nbdmingxing\nbdqh111860823\nbdqn123456\nbdwgwqgo\nbdzz232m\nbea/*0717\nbeachboy\nbeacky413\nbeacon3418\nbeanbean\nbeancurd\nbear110120\nbear1122\nbearbaby\nbeatles0213\nbeauteous413386\nbeauty007\nbeauty123\nbeautybeauty\nbeautylife\nbebebebe\nbebetter\nbecauseofyou\nbeckham007\nbeckham07\nbeckham1\nbeckham123\nbeckham2002\nbeckham23\nBeckham237\nBeckham520\nBECKHAM7\nbeckham723\nbeckham777\nbeckhamli\nbecky123\nbeckyyoung\nbee62442\nbeelzebub\nbeethoven\nbefortime\nbeginithiahia\nbehindyou\nbei-jing\nbeibei11\nbeibei123\nbeibei19891005\nbeibei2007\nbeibei550901\nbeibei83\nbeibeibei\nbeibeixiner\nbeidaihe\nbeidaqingniao\nbeiduofen\nbeifa1108\nbeifang0876\nbeijiguang\nbeijin2008\nbeijing01\nbeijing010\nbeijing1\nbeijing110\nBEIJING123\nbeijing123456\nbeijing2006\nbeijing2007\nbeijing20080808\nbeijing2009\nBeijing2010\nbeijing521\nbeijingaoyun\nBEIJINGBEIJING\nbeijingdaxue\nbeijingnihao\nbeijingp\nbeijingren\nbeijingyiye\nbeijixing\nbeijixiong\nbeijmassage\nbeikehanmu\nbeikesun\nbeiniganran521\nbeisen2008\nbeishang\nbeishida\nbeishizidengni\nbeitouzhen321\nbeiwocun5016\nbeiyuken\nbekkyhan\nbelieveme\nbelinda1\nbellbell\nBELLDANDY\nbellevie\nbelovedjerry\nbemyself\nben123456\nben5201314\nben878691\nbenben12\nbenben123\nbenben520\nbenben521\nbenbenben\nbenbenniu\nbenbenxiong\nBenbenzhu\nbendan123\nbendan520\nbendan521\nbendanbajie\nbendanyatou1314\nbenet1234\nbenet2.0\nbengbeng\nbenimaru\nbenladen\nbenladeng\nbenny123\nbennychan\nbennylee\nbenq*edifer\nbenq123456\nbenqbenq\nbenxiaohai\nbenxiong\nbenyatou\nbenzbenz\nbenzhang\nbenzs600\nbeone123\nbeperfect\nbergkamp\nberkeley\nberrybed\nberrykey875\nberylhaze\nBessy119\nbest1234\nbest2000\nbest9899\nbest9899168\nbestbest\nbestfaye\nbestgirl\nbestking\nbestlife\nbestlike\nbestlove\nbestlover\nbestofbest\nbestpbin\nbestrong\nbestronger\nbesttwo77340\nbestwish\nbestwishes\nbethebest\nbetheman\nbetter1113\nbetterbest\nbetterman\nbettervie\nbetty123\nbetty206\nbetty216\nbetty520\nbetty5205501\nbettybetty\nbewithyou\nbeyinjia\nbeyond11\nbeyond1117\nbeyond123\nbeyond123456\nbeyond1983\nbeyond1993\nbeyond2000\nbeyond2005\nbeyond2008\nbeyond512\nbeyond520\nbeyond521\nbeyondbeyond\nBEYONDlove\nbeyondme\nbeyondsky\nbeyonjia\nbeyourself\nbf123456\nbf870616\nbffdll07\nBFGTJ@qq.com\nbfjd19840715\nbfonline\nbfshlyshsh\nbg123456\nbg898989\nbgs23110\nbgy888888\nbh123456\nbh986103\nbhgb2357\nbhlibrary8200\nbhq123456\nbhu89ijn\nbhx203448\nbhxy2005\nbi1l9l2e\nbi2500000bjt\nbi6656124\nbi850726\nbiaibiaibiai\nbian11qq\nbian1983\nbianbian\nbianCHENG\nbianfeng\nbianfuxia\nbiangbiang\nbianji0516\nbianjiang\nbianjibu\nbianjing\nbianselong\nbianxingjingang\nbianyuan\nbiao3694\nbiaobiao\nbiaozhun\nbibi0726\nbibi123456\nBiBi19850726\nbibi850726\nbibibibi\nbible64517072\nbiedaohao\nBIEDAOWOHAO\nbiefanwo\nbiegaile\nbielaizhende\nbieliwozhl\nbierhoff\nbiewangle\nbiewenwo\nbiezaidiule\nbigangel\nbigapple\nbigbigdog\nbigbiggirl\nbigbigworld\nbigblack\nbigchina\nbigdog888\nbigdream\nbighouse\nBigMouse\nbigmouth\nbigseven\nbigstone\nbigtiger\nbigworld\nBIHAILANTIAN\nbihongtu\nbihumanbu\nbijia2010\nbijiasuo\nbijuan829\nbikebike\nbilibaobosandun\nbill82021\nbillbill\nbillchen\nbillchuang\nbillgate\nbillgates\nbillhttp\nbillionaire\nbillwang\nbilly123\nbillzhang\nbillzhou\nbiluochun\nbimancqf\nbimi6915138\nbin12345\nbin178883\nbinbin0107\nbinbin0428\nbinbin110\nbinbin1314\nbinbin520\nbinbin521\nbinbinyouli\nbincheng19710406\nbing1234\nbing123456\nbing2008\nbing2009\nbing2k2k\nbing5201314\nbingbing123\nbingbing312312\nbingbing520\nbingbing521\nbingbing820\nbingbingbai\nbingchao\nBINGCHEN\nbingcheng\nbingchuan\nbingdian\nbingdong\nbingfeng\nbinggege\nbinghecun\nbinghong\nbinghongcha\nbinghuqie\nBINGhuZHANG\nbingjian\nbingjiling\nbingjing\nbinglang\nbinglang09\nbingleng\nbinglian\nbingling\nbinglong\nbinglove\nbingning\nbingo123\nbingo911\nbingobin2010\nBINGObingo\nbingqilin\nbingqing\nbingshan\nbingshuang\nbingshui\nbingtian\nbingtianshi\nbingwang\nbingxian\nbingxiang\nbingxiao\nbingyang\nbingying\nbingyuan\nbingzhilian\nbinhai11\nbinladen\nbinwolf310\nbinxue724\nbinzhuyu\nbinzi781027\nbio127000\nbiohazard\nbiologist\nbipt070467\nbiran521\nbird2000\nbird2007\nbirdbird\nbishengke\nbishidaohao\nbishijixu\nbismarck\nbit4022572\nbitch1220\nbiutermtd\nbiwoxingfu\nbixuewuhen\nbiyelunwen\nBIYESHEJI\nbiyesheng\nbiyishuangfei\nBIyuntian\nbj000000\nbj111111\nbj123123\nbj123456\nbj123456789\nbj191111\nbj20080808\nBJ20082008\nbj2008ay\nbj2009111\nbj342423cs\nbj51660635gkk\nbj898998\nbjay2008\nbjbaijian\nbjcg2009\nbjcy2009\nbjdashang123\nBJduduwolf\nbjfamous\nbjfutong\nbjgzmvw6\nbjhyn2008\nbjjlb896270819\nbjjm6uz2\nbjjmy1989\nbjl198625\nbjldzr6688\nbjmdz120916046\nbjshjf.cn\nbjsx1027\nbjwangluo\nbjwylb888\nbjzhitang\nBK123456\nbkqbss7844\nbksy2009\nbl123456\nbl147258369\nbl1987824\nblack123\nblackangel\nblackberry\nblackblack\nblackboard\nblackboy\nblackcarbon\nblackdog\nblackeye\nblackeyes\nblackfish\nblackhawk\nblackhole\nblackhorse\nblackice\nblackking\nblackman\nblackrain\nblacksheep\nblacksky\nblacksnow\nblackstar\nblackstone\nblacktea\nblacktulip\nblackwhite\nblackwolf\nBlademaster\nblameoper\nblankblank2\nBLB83298210\nblessneptune\nblessyou\nblfgwycl\nblj158ly\nblog123456\nblog2004\nblogiwxo\nblogssf2010\nblood123\nbloodwolf\nblt161616\nblue0710\nblue1234\nblue123456\nblue1314\nblue1979\nblue1982\nblue2004c\nblue2009\nblue7777\nblue96121\nblueangell\nblueapple\nbluebaby\nbluebear\nblueblood\nbluecat99\nbluedream\nblueearth\nbluefire\nbluefish\nbluegenius\nblueghost\nbluegirl\nbluegreen\nblueheart\nbluehorse\nblueidea\nblueking\nbluekiss\nbluelight\nbluelinux\nbluelove\nbluelover\nbluemary\nbluemouse\nbluenails777\nbluenight\nblueocean\nbluePoint\nbluerain\nblueriver\nblueriver1023\nbluerose\nbluesblues\nblueshell\nbluesky0324\nbluesky123\nbluesky520\nbluesky8485\nbluesnail\nbluesnow\nbluetears\nbluetooth\nbluewater\nbluewind\nbluewing\nbluewolf\nbm1024006bm\nbm123456\nbm1314520\nbm20040515\nbm5201314\nBmday403\nbmfnboston\nbmpbmpbmp\nbmsshkyglx\nbmw123456\nbmw745li\nBMW760LI\nbn123456\nbnhk8ied\nbnm123456789\nbnm83l074\nbnmbnmbnm\nbnmyn09112002\nbnn198736\nbnni1234\nbnsdmm201314\nbo123456\nbo860401\nBo_5201314\nboat006insky875\nboat007insky877\nbob123456\nbob@800305\nbobbybobby\nbobo00200\nbobo1010\nbobo1118\nbobo120810\nbobo1225\nbobo1234\nbobo123456\nbobo1314\nbobo1985\nbobo1986\nbobo2005\nBOBO2007\nbobo2209\nbobo5201314\nbobo521521\nbobo7571\nboboaimama\nboboaini\nBOBOBOBO\nbobohong\nboboikedou928\nbobowoaini\nboboyongzai\nbobsmith274600\nboc123456\nbocai123\nBoeing747\nboeing777\nbofushuai\nbohemian\nbohetang\nbohongjian\nbojiansky\nbojitianjuan\nboju123456\nboke123456\nbokeenet\nbolanbujing\nbolang247\nboli0102\nboliwawa\nbolutek23a\nbom22058\nbombastlc0257\nbombbomb\nbomei123456789\nbonbonbon\nbonita2.9\nbonnie123\nbonnie124\nbonnie520\nbonny520\nbook0615\nbook1234\nbookbook\nbookworm\nboom99ty\nboontrade\nboran0419\nboran419\nboranjing\nborlandc\nborn2loveu\nbornon1015\nborntowin\nBOSNANDA51168\nboss3105003217\nbossanova\nbossboss\nbosscc08\nboston99@china.com\nBostonRS1899\nbothwell\nboulevard\nbovetp163\nboy123456\nboy147258\nboyandgirl\nboyboyboy\nboylhngirl\nboyslove\nboyuan77316\nboyuanchong\nbp2334525\nbp3255899\nbpjishou\nbpl70106\nBplTqtO843\nbpmfdtnl\nbpmfdtnlgkh\nbq123456\nBQCJZSL22\nBqjTqqN844\nBqkTqqN844\nBqkTrqN844\nBqkTrqN854\nBqkTrqP854\nBqkUrqP854\nBqkUrrP854\nBqkUrrP954\nBqlTqtO844\nBqlTqtO944\nBqlTqtP944\nBqlUqtP944\nBr13jHhrh6\nbr13jhhrhl\nbr760325\nbraveboy\nbreakfast\nbreaking\nbreatheagain\nBREEZEOK\nbrendaclare\nbressanone\nbrianbrian\nbridge123\nbright1228\nbrightfuture\nbrigitte\nbrilliance\nbrilliant\nbritneyspears\nBrkUrrP954\nbroccoli\nbrondegirl\nbroodwar\nbrothers5\nbrucelee\nbrueeceli\nbryant24\nbrysj1975\nbrysjhhrhl\nbs123456\nbs197812\nbs3e4axv\nbs515732\nbsanxing\nbsdmw001\nbsl002a4a\nbssn21145\nbswdylnwsw\nbt123456\nbt505177\nbt781021\nbtbtbtbt\nbtgcD311\nbtmq3323\nbtpdi333\nBTT811001\nBtzl1003\nbu123456\nbuainile\nbubaizhe\nbubububu\nbuckingham\nbudaoweng\nbuddhist\nbudebushuo\nbudongni\nbudweiser\nbuerzhouzhu\nbufangqi\nbug00001\nbugaoshuni\nbugaosuni1\nBugaosuni619\nbugu60159\nbuguan3721\nbuguniao\nBUHAOWAN\nbuhaoyisi\nbuhouhui\nbuilder88\nbuilding\nbujianbusan\nbujidefeng\nbujidele\nbujingyun\nbukejie0509\nbukeneng\nbukesiyi\nbukeyishi\nbukusishen\nBUL5Tactmi\nBUL5Tacumi\nBUL5Tacuni\nbulabuqu217\nbullfrog\nbullsbulls\nBUM5Tacuni\nbumingbai\nbunengshuo\nbunengshuodemimi\nbupaoqibufangqi\nbuptwy830919\nburanchen\nburni101\nburni101yang\nburnilee\nBURUMENG\nbusanbusi\nbush3210\nbushi123\nBUSHIBUAINI\nbushibuzaihu\nbushimima\nbushiren\nbushuang\nbushuimian\nbushuole\nbusiniao\nbustrain\nbutterfly0623#\nbutterfly1012\nbuxiangai\nbuxiangni\nbuxiangshuo\nbuxiangxin\nbuxiangZAIAI\nbuxiangzhangda\nbuxianjun\nbuxiao030628\nbuxie520.com\nbuxihuan\nbuxudaohao\nbuxudong\nbuyaobuyao\nbuyaofangqi\nbuyaolian\nbuyaomima\nbuyaopianwo\nbuyaorewo\nbuyaowangji\nbuyfun68\nbuyshi68\nbuzaiaile\nbuzaibeipiao\nbuzailianai\nbuzaiyouai\nbuzaiyouyu\nbuzhidao0\nBUZHIDAO1\nbuzhidao7\nbuzhidaoa\nbuzhidaomima\nbuzhidaosina\nbuzhidaoya\nBVM5Tacuni\nBVM5Uacunj\nbwhhfytbz\nbwiewlb2010\nBwithu7779\nbx123123\nbx123456\nbx2310372\nbx723916\nbxgzsmrszxz\nbxtbaby25\nbxw286622\nby0123654\nby0s030695\nby123131\nby123456\nby1982333\nby20071022\nby583678366\nby931938\nbyd89888888\nByebye88\nbyebyebye\nbyecity11\nbyron1221\nbytheway\nbywwcnll\nbywxbyjb\nbyxyg918\nByynet2010\nbyz124816\nbyzantium\nbz123456\nbz19840220\nbz6614733\nbzbq0611\nbzbzbzbz\nbzwb0607\nc00000000\nc0123456\nc0wrie11\nc0z0c5938\nc1111111\nc11111111\nc11h3w3992\nc123123123\nc123123c\nc1234567890\nc123456c\nc130c130\nc1314520\nc197615c\nc19790916\nc1986222\nc19870321\nc19881210\nc1h1e0n2\nc1h2e3n4\nc2682239\nc282648247\nc299792458\nc313s611s925\nc359535088\nc371112c\nc398377675\nc3n14q17\nc3ZftimEws\nc3ZftimExs\nc3ZfuimEws\nc3ZgtimExs\nc3ZgtinExs\nc43n60ikg0\nc43n60ikgt\nc43n60jkh0\nc43n60jlh0\nc43n6whifd\nc43o61jlh0\nc43o61jlh1\nc44n6vijfc\nc44n6vijfd\nc44n6whifd\nc44n6whjfd\nc44n6wijfd\nc44p6uijgb\nc44p6vijgb\nc44p6vijgc\nc44p7uijgb\nc44p7uikgb\nc5201314\nc520c520\nc54p7uikgb\nc54p7xikgb\nc54p7xjkga\nc54p7xjkgb\nc56z1208\nc66524143\nc6761821r\nc6DiwmrJCx\nc6DjvmrJCx\nc6DjvmsJCx\nc6DjvmsKCx\nc6DjwmrJCx\nc6EiwkrJCx\nc6EiwmrJCx\nc73371100\nc7603102028c\nc7758258\nc7758521\nc791582t\nc7990327\nc7e4s9a1c9r1\nc8010906\nc83hang83\nc85k12q10\nc916871w\nc929310r\nc98277397EXQJ\nc987654321\nca123456\ncaco1234\ncadcadcad\ncadillac\ncaesar007\ncaesar123\ncafelee821115\nCAI12345\ncai123456789\ncai13976630582\ncai2234169\ncai53519\ncai681023\ncai7890543\ncaibutou\ncaicai123\ncaicai520\ncaicai521\ncaicaicai\ncaicaikan\ncaicaiqq\ncaicaizhu\ncaicheng\ncaifaxian103\ncaifuyouwo\ncaihe0510\ncaihongru\ncaihua890806\ncaihui206\ncaihui213\ncaihui324\ncaikai1982312\ncailiang\ncailigui821018\ncailijia\ncaiqi!(^$\nCAIQIANG\ncaiqin8839728\ncairuihua\ncaishuang\ncaishuzhen\ncaitn123\ncaixiang\ncaixianlan\ncaixinxin\ncaixuyao\ncaiyifan\ncaiyihui1\ncaiyilin\ncaiyuhang\ncaiyunfei\nCAIyunxia\ncaiyuting\ncaiyuwan\ncaizheng\nCAIZHUOYAN\ncajianerguo\ncakecake\ncalabash\ncalendar\ncaletank\ncalfSHEN\ncallcall\ncallcenter\ncalligraphy\ncalmdown\ncambridge\ncamcbr50tt\nCamellia\ncamillepin\ncamus0212\ncamus2714\ncamus2727\ncamusmilo\ncan771216\ncancan000\ncancan123\ncancer00\ncanco123456\nCandy007\ncandy1029\ncandy1983\ncandy19880117\ncandy2008\ncandy520\ncandy5211314\ncandy72923\ncandybaby\ncandyboy\ncandycandy\ncandychen\ncandyhong\ncandylong\ncandylove\ncandywang\ncandyzhang\ncangcang\ncanghaixiao\ncanglang\ncangli1992\ncanglong\ncangqiong\ncangtian\ncangying\ncangzhou\ncanifuck\ncaniggia\ncanihelpyou\ncannavaro\ncanopy22\ncanton00\ncanudigit\ncanxin520\ncao111111\ncao12345\ncao1978310\ncao19880203\ncao201314\ncao2ni2ma\ncaobo771015\ncaochang\ncaochong\ncaocunchao\ncaodaokun\ncaohaibo\ncaohaiyang\ncaohanze\ncaohui521\ncaoji2006222\ncaojiaqi\ncaojie1226\ncaojing520\ncaojinge\ncaojingyi\ncaojunjie\ncaoliang\ncaolianzhe\ncaolihong521\ncaolijun\ncaoliwei\ncaomei228\ncaomingsyx\nCAONIDAYE\ncaonilaomu\ncaonima00\ncaonima000\ncaonima11\ncaonima111\ncaonima12\ncaonima121\ncaonima1234\ncaonima1478\ncaonima2\ncaonima250\ncaonima38\ncaonima4\ncaonima748\ncaonima7788\ncaonima88\nCaonima888\ncaonimaa\ncaonimabide\ncaonimacaonima\ncaonimad\ncaonimadaohao\nCAONIMADE\ncaonimade520\ncaonimadebi\ncaonimageb\ncaonimagebi\ncaonimalegebi\ncaonimama1\nCAONIMAYA\ncaoniniang\ncaonisima\ncaonizui\ncaoqiang\ncaosheng\ncaoshuai\ncaoshuang\ncaosinima\ncaotamade\ncaotianya\ncaowei123\ncaoweiliang\ncaoweizubi\ncaoxiang\ncaoxiaofei\ncaoxiaoyan\ncaoxixinc\ncaoxuemei\ncaoyan729\ncaoyang123\ncaoyanhua\ncaoyanyan\ncaoyu123\ncaoyuan521\ncaoyuanluntan\ncaoyuanzjykyzjk\ncaoyunfu\ncaozheng\ncaozijian\ncappuccino\ncar12345\ncardigan\ncarefree\ncarefully\ncareycarey\ncarfield\ncarfield77\ncaribbean\ncarlcarl\ncarlqain\ncarlsberg\ncarnation\ncarnival\ncarol123\ncarol725\ncaroleason\ncaroleking\ncarpenter\ncarre0044\ncarrie1986\ncarry1155\ncarter15\ncary332604\ncasablanca\ncasillas\ncassiopeia\ncassiopeia3333\ncat001074\ncat042475\ncat123456\ncat142223\ncat7777777\ncat790419\ncat820323\ncatalyst\ncatanddog\nCATANDMOUSE\ncatcatcat\nCatDowns\ncatharine\ncatherin\ncatherine123\ncatherinelyn\ncathleen\ncathy0601\ncathy123\ncathy128528\ncathy511\ncathy520\ncathycathy\ncathyhuang\ncathyqss0109\ncathyyyy\ncatlovefish\ncatMouse\ncattsoft\ncatyh1018\ncavabien\ncavalier\ncaxkd62825y\ncazzo1001\ncb123456\ncb1986619\ncba110ok.\ncba123456\ncba18701\ncba654321\ncbcbcbcb\ncbg947224\ncbghxd19990452\ncbi8088dg\ncbnlovenn\ncbsgfndetgwsght@\ncbsgfnsght@126.c\ncbt2648263\ncbt818fx\ncbtyy101!\ncbzca7021\ncc000000\ncc0000000\ncc040225\ncc111111\nCc111816\ncc112233\ncc123123\ncc1234567\nCc12345678\nCc123456789\ncc123654\ncc1314520\ncc13577143619\ncc198407\nCC199211\ncc20010617\ncc2312470\ncc263263\ncc310800\ncc520kuku\ncc5211314\ncc611799\nCc662588\ncc666666\ncc820115\ncc830109\nCc831026\nCc83626250c\ncc840310\ncc861019\nCc9251978\ncc999999\ncc_61096781\ncca840707\nccaihui16896761\nccanddodo\nccandxx070619\nccat530902\nccb123456\nccbbaa12345678\nccc11111\nccc12270\nccc1234567\nccc765100\nccc800515\ncccc0000\ncccc6724\nccccccccc\ncccccccccc\ncccccccccccccc\ncccccccccccccccc\ncccpcccp\nccdf*0201\ncced1234\nccedcced\nccedujfj\nccf123456\ncch123456\ncchenle2\ncciloveyou\nccimiee01024208\nccjfgmvb\nccjj13999ffss\nccjjbbinsert\nccjjll1210\nCcjsj1200\nccladder\ncclovecc\ncclt10325\nCCNACCNP\nccrr688cn\nccrr9180\nccsgdhr2009\nccssddnn\nccto.tv/blog\ncctv.com\ncctv1234\ncctv12345\ncctv123456\ncctv1998\ncctv2000\ncctv2008\ncctv2009\ncctv830122\ncctv886cxw\nCCTV@007\ncctvcctv\ncctvhao123\ncctvhere\ncctvnews\ncctvsoft\ncctvvtcc\nccwccwccw\nccwoaini\nccwwll123\nccx19711210\nccxxccxx\nccxxggyy\nccyh5277\nccyj1950927\nccylzg682782\ncczadmin\ncd123123\ncd1231512315\ncd12341234\ncd1234567\ncd123456789\ncd123yu810\ncd19861209cd\ncd19861213\ncd19960207\ncd456852km\ncd5201314\ncd84324849\ncd85170352\nCD987116CD\ncdb903163\ncdcppc881100\ncdd907fcsw\ncde3vfr4\ncdefgab123\ncdel1125\ncdexswzaq\ncdgg861006\ncdh0000000000\ncdiamqxy642450\ncdk19871116\ncdm123456\ncdma2000\ncdma2008\ncdmacdma\nCDMcdm55426\ncdnowmp4\ncds100828\ncds198191\ncds830310\ncdsb100016006\ncdsf2009\ncdw153189\ncdwindows\ncdxyhyok\nce551029\nceceliazh\ncecilia##)\ncecilia524\ncelebrate\ncelebration\ncelia920\ncelinedion\ncenboo690122\ncengjing\ncengjingcanghai\ncengjingdeni\ncengjingzuimei\ncenhuajie\ncentipede\ncentrino\nceo123456\nceodlw5200\nceramics\nCERRSY520\ncertainly\ncerulean\ncervin2010\nceshi123\ncestlavie\nCET333333\ncexoaugef\ncexoiqpl\ncexowfnh\ncf081088\ncf1314521\ncf137245\ncf361980\ncf760926\ncfc7788c\ncfcqcfcq\ncffhGJH58\ncfjtywh911199911\ncflfeilongchen91\ncfp00000\ncfq334613\ncfq3792023\ncfs612722\ncfxtdcom\ncfz123456\nCG000000\ncg006986853\ncg123456\ncg147258369\ncg19890127\ncg6113663\ncgbszzmn\ncgdxz1234567\ncgf198896\ncgh165431\ncgn92504891\ncgq7509498\ncgy7626869\nch═??╦┼г730525\nch102086\nch11008575\nch111111\nch123123\nCH123456\nch123456789\nch1314520\nch143723\nch192970\nch19690808wf\nch198071\nch19cu77la0913\nch3ch2cooh\nch3ch2oh\nch4796613\nch5201314\nCh666666\nch710322\nch7w.renda\nch805148ting\ncha1xun3tian\nCHACHACHA\nchaichai\nchaijian\nchaijing\nchaiqian\nchairdesk\nchairman\nchaiyuan\nchaliwang\nchallenge\nchallenger\nchamcham\nchameleon\nchampagne\nchampions\nchan13135257\nchan1984\nchanchan\nchanchan2002\nchang110\nCHANG111\nchang123456\nchang1981\nchang1986\nchang1988\nchang520\nchang5395\nchang8866\nchanganzhen\nchangbin\nchangchang\nchangchao\nchangchen\nchangcheng\nchangchun\nchangdao\nchange123\nchange2009\nchange77\nchangechange\nchangfang\nchangfei\nchangfeng\nchanggong\nchanghai\nchanghao\nchanghong\nCHANGHONG159\nchanghua\nchanghui\nchanging\nchangjia\nchangjian\nchangjiang123\nchangjie\nchangjin\nchangjing\nchangjiu\nchangjuan\nchangjun\nchangkai\nchangkong\nchangkun\nchanglei\nchangliang\nchanglin\nchangling\nchangliu\nchanglong\nchangmao\nchangmin\nchangming\nchangning\nchangpeng\nchangping\nchangqing\nchangrong\nchangrui\nchangsha\nchangshan\nchangsheng\nchangshi\nchangshou\nchangshu\nchangshuai\nchangshuN\nchangtian\nchangting\nchangwei\nchangwen\nCHANGXIANG\nchangxiao\nchangxiaofeng\nchangxin\nchangxing\nchangyan\nchangyang\nchangyaya1215\nchangying\nchangyong\nchangyou\nchangyuan\nchangyuann\nchangyun\nchangzheng\nchangzhi\nchangzhou\nchanhans\nchanjuan\nchannelv\nchao1234\nCHAO1986\nchao1ran2\nchao8qiang888\nchaodeai\nchaodong\nchaofeng\nchaoge79lb\nchaohong\nchaohuiwansui\nchaojimima\nchaojiwudi\nchaoming\nchaonima\nchaonimabi\nchaoren2468!\nchaosafen\nchaosusu\nchaoxian\nchaoxiang\nchaoyang\nchaoyanyan\nchaoyue520\nchaoyueziwo\nchaozhou\nchar4499\nchar515517\ncharacter\ncharisma\ncharlesliu\ncharllie\nchasedream\nchat7admin\nchatname\nchattingonqq\nchayuan2008\nchb123456\nchb2128826\nchcc8432\nchd1987827\nche123456\ncheating\ncheche123\ncheckitout\ncheckout\nchectiip123\ncheer929\ncheerdayned\ncheguevara\nchen0000\nchen000000\nchen0124\nchen0126\nchen014259\nchen0210\nchen0218\nchen0422\nchen0722\nchen0806\nchen0823\nchen0826\nchen0898\nchen0919\nchen1001\nchen1006\nchen1010\nchen1012\nchen1013\nchen1014\nchen1015\nchen1017\nchen1018\nchen1020\nchen102220\nchen1023\nCHen1024\nchen1025\nchen1026\nchen1028\nchen1029\nchen1103\nchen1104\nchen1107\nchen1109\nchen1111\nchen1113\nchen1121\nchen1122\nchen1123\nchen1125\nchen1126\nchen115524\nchen1198\nchen1206\nchen1210\nchen1212\nchen1215\nchen1216\nchen1218\nchen1221\nchen1224\nchen1225\nchen1226\nchen1227\nchen1228\nchen1230\nchen123123\nchen123321\nchen12345\nchen1314\nchen139mo\nchen1689\nchen1934\nchen1969\nchen1970\nchen1971\nchen1972\nchen1973\nchen1974\nchen1975\nchen1976\nchen1977\nchen1978\nchen1979\nchen1980\nchen1981\nchen1982\nchen1983\nchen1984\nCHEN1985\nchen1986\nCHEN1987\nchen198710\nchen1987510\nchen1988\nchen1989\nchen1990\nchen1991\nchen1992\nchen1994\nchen1995\nchen1996114\nchen1997\nchen2000\nchen2001\nchen2002\nchen2003\nchen2005\nchen2006\nchen2007\nchen2008\nchen2009\nchen2010\nchen2020\nchen211223\nchen218133\nchen2468\nchen3230172\nchen340925\nchen3569\nchen3886\nchen4545\nchen520520\nchen523334\nchen5277\nchen57wen\nchen6666\nchen666666\nchen7313\nchen751231\nchen779240\nchen780620\nchen780903\nchen8105\nchen821919\nchen871030\nchen8888\nchen890523\nchen975889\nchen9999\nchenabc123\nchenaihua\nchenbbk716\nchenbiao\nchenbin123\nchenbinbin\nchenbing\nchenbo123\nchenbobo\nchenchang\nchenchaoquan\nchenchaoza\nchenchen12\nchenchen123\nchenchen2006\nchenchen520\nCHENCHEN521\nchenchencc33\nchenchenchen\nchenchewu\nchenchong\nchenchongwu\nchenchuan\nchenchuang\nchenchun\nchenchunlin\nchenchusheng\nchencong\nchencuiyun14\nchendabб╛╠ь╤─▓й┐═б┐\nchendaliqw123\nchendan520\nchendandan\nchendanyan123\nchendaoming\nchendawei\nchendebao\nchendeng\nchendesen\nchendian\nchending\nchendongdong\nchendongmei\nchendu8841\nchenduan\nchenedison\nchenerdong\nchenf3794\nchenfaqing\nchenfd911\nchenfei123\nchenfeifei\nchenfeiyu\nchenfeiyu315\nCHENFENG\nchenfuan\nchenfujun\nchenfuling\ncheng000\ncheng001\ncheng00qmwn00\ncheng1022\ncheng110\ncheng111\ncheng1111\ncheng1234\ncheng12345\ncheng1314\ncheng168\ncheng1980\ncheng1981\ncheng1982\ncheng1983\ncheng1984\ncheng1985\ncheng198572\ncheng1986\ncheng1987\ncheng1988\ncheng1989\ncheng2007\ncheng2008\ncheng2009\ncheng2010\ncheng2381439\ncheng330\ncheng42505200\ncheng521\ncheng568777\ncheng688\ncheng789\ncheng888\ncheng924bo\ncheng999\nchengbao\nchengbin\nchengbing\nchengcai\nchengcan\nchengchao\nchengchen\nchengcheng123\nchengcheng520\nchengchong\nchengchu\nchengchun\nchengdan\nchengdi123456\nchengdong\nchengdu028\nchengduyanyi\nCHENGENG\nchengfang\nchengfei\nchengfeng\nchenggang\nchenggang631224\nchenggao\nchenggong123\nchenggongshuyuwo\nchengguan\nchengguang\nchengguo\nchenghai\nchenghan\nchenghao\nchengheng\nchenghong\nchenghua\nCHENGHUAN\nchenghui\nchengjia\nchengjian\nchengjiang\nchengjianning\nchengjianqmwn\nchengjiao\nchengjie\nchengjin\nchengjing\nchengjisihan\nchengjuan\nchengjun\nchengkai\nchengkao\nchengkun\nchenglan\nchenglei\nchengliang\nchenglidd\nchenglili\nchenglin\nchengling\nchengluer\nchengmei\nchengmeng\nchengmiao\nchengmin\nchengming\nchengnan\nchengnuo\nchengong\nchengpeng\nchengping\nchengqian\nchengqiang\nchengqing\nchengquan\nchengran\nchengrong\nchengrui\nchengsheng\nchengshi\nchengshi33\nchengshu\nchengshuai\nchengshuang\nchengsiyu001\nchengtao\nchengtian\nchengting\nchengtong\nchenguan\nchenguang\nchenguanxi\nchenguilin\nchenguohua\nchengwang\nchengwangcai\nchengwei\nchengwen\nchengxia\nchengxian\nchengxiang\nchengxiao\nchengxin\nchengxing\nchengxun\nchengxuyuan\nchengyan\nchengyang\nchengyao\nchengyin\nchengying\nchengyong\nchengyou\nchengyuan\nchengyuanyuan\nchengyue\nchengyun\nchengzhang\nchengzhen\nchengzhi\nchengzi123\nchenhaibin\nchenhaibo\nchenhaifeng\nchenhaihai2975\nchenhaijun\nCHENhaiPING\nchenhaitao\nchenhaiyan\nchenhang\nchenhao123\nchenhao520\nchenhaonan\nchenhaoran\nchenheng\nchenhong99\nchenhongjun\nchenhongyu\nchenhuajie\nchenhuan\nchenhuang\nchenhui123\nchenhuilin\nchenhuiye\nchenhujie\nchenjf001\nchenjiahua\nchenjiahui\nchenjiajia\nchenjiajie\nchenjiali\nchenjiaming\nchenjianan\nchenjianbin\nchenjianbo\nchenjianfeng\nchenjiang\nchenjianguo\nchenjianing\nCHENJIANJUN\nchenjianli\nchenjiao\nchenjiaolan1001\nchenjiaqi\nchenjiarui\nchenjiawei\nchenjiawen\nchenjiaxin\nchenjiayi\nchenjie123\nchenjie520\nchenjie521\nchenjie68\nchenjihua\nchenjin123\nchenjing123\nchenjing520\nCHENJING521\nchenjing8133\nchenjingfeng\nchenjingjing\nchenjinwei\nchenjinxin\nchenjiwei\nchenjiyuan\nCHENJUAN\nchenjuan123456\nchenjun123\nchenjun520\nchenjunfeng\nchenjunjie\nchenjunwei\nchenjunwei119\nchenjunwei520\nchenjunyi\nchenjunyu\nchenkai123\nchenkang\nchenkangyi000\nchenkong\nchenkun123\nchenlang\nchenlei123\nchenlei520\nchenlele\nchenli123\nchenli520\nchenlian\nchenlibo\nchenlifang\nchenlihong\nchenlihua\nchenlijia3333\nchenlijuan\nchenlijun\nchenlili\nchenliming\nchenlin123\nchenlin520\nchenlina\nchenlinlin\nchenliping\nchenliren\nchenlirong\nchenliwei\nchenlixia\nchenlixin\nchenliya\nchenljing\nchenlongdm\nchenlove\nchenlulu\nchenmeilin\nchenmeiling\nchenmeng\nchenmiao\nchenminghui\nchenmingzhong\nchenmixia\nchenmoshijin\nchenning\nchenpengfei\nchenpingping\nchenpinsi\nchenqi123\nchenqiao\nchenqin2003\nchenqing\nchenqinghua\nchenqingqian\nchenqiong\nchenqiu0810\nchenqiuyue\nchenqu79\nchenquan\nchenrenhai@222\nchenrike1689\nchenriwei\nchenrong\nchenrui270043\nchenrui3862130\nchenruo19820201\nchenshan\nchenshang\nchenshanshan\nchenshao\nchenshasha\nchenshen\nchensheng\nchenshijie\nchenshiqi\nchenshiquan\nchenshixin\nchenshixing\nchenshiyan\nchenshiyu\nchenshuai\nchenshuang\nchenshui\nchenshuiliang123\nchenshun\nchenshuo\nchenshuyan\nCHENsijie\nchensiqi\nchensisi\nchensiwei\nchensiyao\nchensiyu\nchensiyuan\nchenSONG\nchensongge\nchentang663\nchentao520\nchenteng\nCHENTIAN\nchenting\nchenting123\nchentingting\nchentong\nchentongm\nchenwang\nchenwei1\nchenwei123\nchenwei1987823\nchenwei520\nchenweidong\nCHENWEIHUA\nchenweijia\nchenweijie\nchenweiping\nchenweishu\nchenweistar\nchenweiwei\nchenweiyi\nchenwenCHENWEN\nchenwenjie\nchenwenjuan\nCHENWENJUN\nchenwenli\nchenwentao\nchenwenting\nchenwenwen\nchenxi123\nchenxi520\nchenxi99\nCHENXIAN\nchenxiang\nchenxiangyu\nchenxiao520\nchenxiao612\nchenxiaobo\nchenxiaochun\nchenxiaodong\nchenxiaofeng\nchenxiaohua\nchenxiaohui\nchenxiaojie\nchenxiaojuan\nchenxiaojun\nchenxiaolan\nchenxiaoli\nchenxiaolin\nchenxiaoling\nchenxiaolong\nchenxiaomei\nchenxiaoming\nchenxiaoqing\nchenxiaowei\nCHENXIAOXIAO\nchenxiaoyan\nchenxiaoyu\nchenxijun\nchenxin123\nchenxin1983\nchenxin520\nchenxinyu\nchenxiong\nchenxixi\nchenxm65\ncHENXUAN\nchenxuan3056\nchenxuehua\nchenxuejiao\nchenxuelian\nchenyajun\nchenyali\nCHENYAN123\nchenyan520\nchenyanan\nchenyanbo\nchenyanfei\nchenyang123\nchenyanhua\nCHENYANJIE1983\nchenyanli\nchenyanling\nchenyanni\nchenyanping\nchenyanqing\nchenyanyan\nchenyaoyao\nchenyaxi\nchenyi123\nchenyifan\nchenyifei\nCHENYIFENG\nchenyihao\nchenyihua\nchenyijun\nCHENYIMING\nchenying1108\nChenying123\nchenying520\nchenyiquan\nchenyiru\nchenyiwei\nchenyiwen\nchenyixi\nchenyixin\nchenyixuan\nchenyixun\nCHENYONG123\nchenyongli\nCHENYOUCAN1215\nchenyouwei\nchenyu02\nchenyu123\nchenyu1987\nchenyu520\nchenyuan\nchenyuanyuan\nchenyufeng\nchenyuhua\nchenyujia\nchenyujie\nchenyujin\nchenyulin\nchenyulong\nchenyumei\nchenyuping\nchenyuqi\nchenyuqing\nchenyuting\nchenyuxuan\nchenzeng\nchenzeyu\nchenzhan\nchenzhang\nchenzhao\nchenzhencz\nchenzheng\nchenzheng0\nchenzhicong\nchenzhidan\nchenzhihao\nchenzhihua\nchenzhihui\nchenzhijie\nchenzhiming\nchenzhiqiang\nchenzhiwan\nchenzhiwei\nchenzhiyong\nchenzhong\nchenzhou\nchenzhoulan\nchenzhuo\nchenzicong\nchenzijian\nchenzishuai\nchenziyuan\nchenzmkkk\ncherish520\ncherry0222\ncherry118\nCherry123\ncherry1982\ncherry2008\ncherry26\ncherry520\ncherry556166\ncherry622\ncherrychen\ncherrycherry\ncherryin\ncherubim\ncheshire\nchessman\nchestnut\nchetx123\ncheung70\nchevrolet\nchf123456\nchf197816\nchfany8464\nchh123456\nchhe0sps\nchhtg123\nchhzh01123581321\nchi880312\nchia0817\nchicheng\nchichuniu\nchickchick\nchidu_100\nchifanle\nchihui520\nchijia123\nchilam23\nchilam827\nchilamok\nchilavert\nchildhood\nchiminglixiang\nchina.com\nchina000\nchina001\nchina007\nchina009\nchina06.com\nchina091102\nchina110\nchina120\nCHINA123\nchina1234\nchina12345\nchina12345.com\nchina123456\nchina12582\nchina168\nchina178\nchina1949\nchina19491001\nchina1982\nchina1984\nchina1985\nchina1986\nchina1989\nchina2000\nchina2001\nchina2002\nchina2003\nchina2004\nChina2007\nchina2009\nchina2010\nchina2012\nchina520\nchina521\nCHINA555\nchina626\nchina666\nchina7758521\nchina888\nchina911\nchina@123\nCHINABANK\nchinabbs\nchinabeijing\nchinabenet\nchinablue\nchinaboy\nchinacat\nchinachen\nchinachfang\nchinacom\nchinacot\nchinadns\nchinadragon\nchinaedu\nchinaese\nchinaeve123\nchinafung\nchinagdcn\nchinagirl\nchinago123\nchinahacker\nchinahacker888\nchinahero\nchinaitlab\nchinajie\nchinaking\nchinalife\nchinalinden\nchinaliu\nchinalong\nchinalou\nchinalove\nchinaman\nchinamobile\nchinamost\nchinanet\nchinansa\nchinaone\nchinapeople\nchinapost\nchinaren123\nchinasun\nchinatelecom\nchinaths\nchinatown\nchinaunicom\nchinausa\nchinawang\nchinawin\nchinawok\nchinayang\nchinazhang\nchinese00\nchinese1\nchinese123\nchinese2008\nchinese7788\nchinese8\nchinesechinese\nCHINESEGIRL\nchineseman\nchineseren\nching100\nching5513\nchinghai\nchingwen\nchinoise\nchitengltm\nchitianshi\nchiu1pkkme\nchiu8888\nchivalrous\nchivalry\nchiwenmio21\nchixiaoming\nchixinjuedui\nchixiren\nchj123456\nchj2118340\nchj3376126\nchj5658123\nchjw1217\nchli1214\nchlyyl2008@\nchm991054\nchmj198473\nchn661568\nchnenkhai\nchniminchnimin\nchnpshy2003\nchoaswin\nchochang\nchoijiwoo\nchoiweiwei\nchong100\nChong123\nchong123456\nchong17010\nchong520\nchongchong\nchongdie\nchongdong\nchongerfei\nchongf355\nchongfang55\nchongjie\nchonglang\nchongliang\nchongm59686523\nchongming\nCHONGqing\nchongqing.198279\nchongqing1\nchongsheng\nchongtianyifei\nchongwu521\nchongxin\nchongxinlaiguo\nchongyang\nchopsticks\nchose_001\nchouazhu\nchoubaobao\nchouchong\nchouchou123\nchoujidan\nchousaodan\nchouxiaoya\nchouyugege\nchowchow\nchowss121\nchpf062031\nchpfx3285\nchq730217\nchqq0508\nchqtian89\nchqx1109\nchrdw123\nchrdwhdhxt1988\nchris1234\nchris1258\nchris310\nchris520\nchris9111\nchrisamy\nchrischa\nCHRISchris\nchrislee\nchrislee310\nchrismas\nchristal\nchristan\nchristiana\nchristin\nChristine\nchristMAS\nchriswjy\nchrysanthemum\nchryzchr\nchsnchsn\nchsnchsn_1984\nchu123456\nCHU696969\nchu@810000\nchuan520\nchuanboli\nchuanbolicom1\nchuanchuan\nchuanglian\nchuangshiji\nchuanguo\nchuangxiang\nchuangxin\nchuangye\nchuangyi\nchuanhai\nchuanjiang\nchuanling2009\nchuanqi1\nchuanqi123\nchuanqi520\nchuanqitian\nchuanshi\nchuanshuo\nchuantian\nchuanwen\nchuanYING\nchuanyue\nchuanzhang\nchuchuchu\nchuchukeer\nchuguang\nchuhan1001\nchuheridangwu\nchuichui\nchujiang\nchuliuxiang\nchun0609\nchun1010\nchun123456\nchun1980\nchun1986\nchun761028\nchuncheng\nchuncheng3900\nchunchuis\nchunchuishi05\nchunchun520\nchuner0116\nchunfang\nchunfeng\nchunghwa\nchunguang\nchunhong\nchunhuayanhui\nchunjian\nchunjiang\nchunjuan\nchunlian\nchunling\nchunlong\nchunming\nchunnuanhuakai\nchunping\nchunqing\nchunqiuting\nchunsheng\nchuntian\nchuntian123\nchunvzuo\nchunxiang\nchunxiao\nchunyang\nchunying\nchunzhen\nchunzi313@\nchuqiang801229\nCHUQIANRU\nchurchill\nchurchsinsin\nchurentoudi\nchusheng\nchutiange\nchutiange13\nchuxueli\nchuyouchun\nchwdmm1985\nchwndingm\nchwy1031\nchxiaowu\nchy123456\nchy30lry\nchy451270\nchy800422\nchyichin\nchyicross\nchyno19811209\nchyygmchyy\nCIA1336.338\nciaociao\ncici019841212\ncici1206\ncici1983\ncici1987\ncicicici\ncicilein\ncicilove\nciciwang\ncigarette\nciicwelcome\nCiji1995\ncike1112\ncili1975\ncin567dy\ncinderella520\ncindy123\ncindy1254\ncindy321\nCindy520\ncindy718\ncindychen\ncindycindy\ncindyshie\ncindywang\ncinfvwnfsi\ncing761103\ncinkicyan\nciqingkedai\ncisco1234\nciscoccie\nciscoccnp\nciscocisco\nciscolinux\ncisdi213\ncissy19861021\ncissy217\ncitibankcts\ncitizen1\ncityenglish\ncityhunter\ncivil983\ncj123456789\ncj1234QWER\ncj1987525\ncj19890214\ncj19891016\ncj3223530\ncj5201314\ncj611011\ncj720212\ncj801213\ncjb112233\ncjb123456\ncjb60277\ncjbcjl112233\ncjbinsert\ncjc345678\nCJCF1980\ncjchnwscqwsbsy\ncjcj1218\ncjcjcjcj\ncjdflyking\ncjdlxyrjns\ncjf.2001\ncjf123456\ncjg123456\ncjglsl1225\ncjh123456\ncjian888\ncjj123456\ncjj880206\ncjjlovegx1314\ncjjun3864\ncjk841009\ncjl911cjl\ncjms051222\ncjmxtfcjm\ncjpdd1974\ncjq123456\nCjq2003717\ncjq423000\ncjqbaobao\ncjr1218027\ncjrabbit\ncjy006709\ncjy123456\ncjy19880201\ncjy82313\ncjz15260200344\ncjz78547854\ncjzj8845378\nck0404lfz\nck07zpd1\nck123456\nck168168\nck800829\nckchen777\nckdyl5515825\ncklovelife\ncksyddjhsydjj\ncl198889\ncl200703101\ncl3213018\ncl5201314\ncl791104\ncl888888\nclamp19791103\nclampclamp\nclaralaw\nclarkkent\nclassical\nclassmate\nclassroom\nCLAUDE555\nclawclaw\nclaymore\nclb123456\nclclkiki\nclcx7878\ncleanclear\nclear520\nclearsky\nCLEOPATRA\nclery615\ncleverboy\nclevergirl\nclfzxj1989\nclh123456\nclinique\nClinton20\nclj123456\ncll4413260\ncll712521\ncllrch521023\nclm843766\nclosetoyou\ncloud1218\ncloud312427\ncloudcloud\ncloudfly\nclouding\nclour123\nclover123\ncloverhyde\nclp112233\ncls123456\nclsteaching\nclt1989719\ncltypett\nclub$1018\nCLW860385\nclyz2006\ncm123123\ncm123456\ncm198604\ncm3242681\ncm5201314\ncm662729\nCM7788SH\ncm830865\ncm980602\ncmbjxccwtn\ncmbquery\ncmd5920870\ncmf1106310310\ncmhqyaic\ncmj198206\ncmj821212\ncmm12244\ncmm198517\ncmvqwoji\ncmy15949693379\ncn123456\ncn179510\ncn19820304\ncnchnsy001\ncncncncn\ncncwbzdx\ncnhacker\ncnhk0425\ncnHonKer\ncnm.ywzhdr\ncnm123123\ncnmcnmcnm\ncnodiscover\ncnooccnooc\ncnrrss.cnOK\nCnwgtx1314\ncnxtd981119\nCNYMAM111\ncnymmtdh\ncnzlz1458\ncnzx060831\ncoach6906\ncoca585343\ncockcock\ncockroach\ncoco1116\ncoco1212\ncoco1234\ncoco123456\ncoco1314\ncoco1980\ncoco1986\ncoco2008\ncoco2009\ncoco5201314\ncoco520linyu999\ncoco6894\ncocobaby\ncocococo\ncocofei307\ncocohuang\ncocokiki\ncocokoukou666\ncocokugo\ncocollll\ncocoloodubau\ncocolove\ncocotian\ncocotoll\ncocowang\ncode5337\ncode8295\ncodecode\ncodeiscode\ncoffee520\ncoffeecat\ncoffeemate\ncoffeetea\ncoffer123\ncola1101\ncola1118\ncolacola\ncoldhawk\ncoldstar\ncoldwater\ncoldwind\ncolin123\ncolinchen\ncolinwong05\ncollection\ncollin4628\ncolorful\ncolorful365\ncolorwolf\ncolourful\ncolt0318\ncolumbus\ncom57680\ncom815815\ncomaroad\ncome1234\ncomebaby\ncomeback\ncomecome\ncomehere\ncomeon123\ncomeon1314\nComeOn2010\ncomeoncomeon\ncomeonon\nCOMEONOVER\ncometo05\ncometome\ncometrue\ncomfuck1977327\ncomicfans\ncomm1001\ncommand050\ncommand1\ncommand123\ncommandcommand\ncommander\ncommando\ncommandos\ncommands\ncommunication\ncommunity\ncompact319\ncompaq123\ncomputer001\ncomputer007\ncomputer123\ncomputers\ncomtom803422\ncon198473\nconan123\nConan2006\nconanconan\nconankid\nconceied\nConcerto\nconfidenc\nconfident\nconfidential\nconfig.sys\nconfigconfig\nconfucius\nconfusionisme\ncong1987\ncong6000\ncong66850412\ncongcongcong\ncongcs17\ncongersai2007\ncongming\ncongqian\ncongratula\ncongratulate\ncongratulation\ncongratulations\ncongrong\ncongshan\ncongtouzailai\ncongyang\ncongying\ncoNIferc\nconnicezq9\nconnieli\nconqueror\nconqueryou\nconsider\nconstance\nconstant\nconstantine\ncontinue\ncontrast\ncontribution\nconvenient\nconversation\ncook100cs\ncookersong\ncookie123\ncookie89612\ncool1234\nCOOL123456\ncool2000\ncool2008\ncool778899\ncoolapril\ncoolbaby\ncoolblood\ncoolboy1\ncoolboy6198\ncoolcold\ncooldragon68\ncooldragon68_88\ncoolee1116\ncoolfire\ncoolfish\ncoollove\ncoolmail\ncoolmoon\ncoolrain\ncoolshow\ncoolstar\ncoolsummer\ncoolwater\ncoolwind\ncoolwolf\ncooper!@2005\ncooy19912727\ncopperbus\ncopperdesk96\ncoppergoat26\ncoppermine\ncopy2008\ncopycopy\ncopyright\ncore1423\nCorelPainter\ncorfu123\ncorleone\ncorn1089\ncornetto\ncotton1198\nCougar77\nCOUNTRYGG\ncourenao\ncoursimer\ncowboybepop\ncowboyzhang\ncp123456\ncp13574236521\ncp13873431968\ncpcptxwd\ncpf123456\ncpf19860206\ncph760613Xyy\nCPHay6587561\ncpz7285879\nCQ123123\ncq123456\ncq123456789\ncq19831027\ncq19831112\ncq29buq5\ncq3357571\ncq5201314\ncq8wjjwx\ncq911119\ncq980926\ncqcbs13709439218\ncqdsl0909\ncqdsl090909\ncqg1856217313\ncqkdczyzsdsywr\nCqlUqtP954\nCqlUrtP954\ncqmengshi\nCqmUrtP954\ncqmyg123\ncqmygysdss\ncqnx5050\ncqq0310.\ncqq1096114\ncqskychen\ncqzhangjh\ncqznz200902\ncr123456\ncrab198179\nCRANBERRIES\ncranberry\ncrane0214hh114\ncrazy153\ncrazyboy\ncrazychen\ncrazycrazy\ncrazydog\ncrazyman\ncrazystone\ncream3113\ncreature\ncrescent\ncrg1993075\ncrh123456\ncrhbsj64\nCristofer\nCrkUrrP954\nCrmUrrP954\nCrmUrrP955\nCrmUrrQ955\nCrmUrtP954\nCrmVrrQ955\nCrmVrtQ954\nCrmVsrQ955\nCrmVssQ955\ncrocodile\ncromwell\ncronaldo\ncrossfire\ncrossing\ncrossrainbow\ncrosstime\ncrowhack\nCROWmars1124@)\ncrqj8icq\ncrssic0710\ncruelrise\ncrusader\ncryptogram\ncrystal.d\ncrystal11\ncrystal123\ncrystal1314\ncrystal1982\ncrystal1984\ncrystal227\ncrystal520\ncrystal521\nCrystalLYF\ncs000000\ncs123456789\ncs1314520\ncs2290577\ncs3712887\ncs5201314\ncs5211314\ncs630424\ncs750725\ncs7758521\ncs810519\ncs852123\ncs882388\ncs999999999\ncsbluan5201\ncsc123456\ncscec26671\ncsceccscec\ncscx2009\ncsd123456\ncsdn.com\ncsdn1111\nCSDN112358\nCSDN123123\ncsdn123321\ncsdn12345\ncsdn2006\ncsdn2008\ncsdn868786\ncsdncode\ncsdncsdncsdn\ncsdndownload\ncsdnkevin\ncsdnpass\ncsdnpassword\ncsdntongxingzheng\ncsdnxiazai\ncserkaka\ncsfiy5200\ncsgangtai\ncsgo1234\ncsh1981815\ncsj123456\ncsk101010\ncsldm2010\ncsm123456\ncsmyhome_net\ncsongercn\ncsq850104\ncsqb1020\nCss003876c\ncssyzqjx\ncst923923\ncstll1982\ncstlovecst\ncstxl1984\ncsueducomcn\ncswhubsh\ncswyx1984\ncsx8095146\ncsy520zyx.\ncsy871315288\ncsy911cc\nct123456\nct80794352\nctfjr4tqta\ncti123456\nCTK4Sabtmh\nCTK4Sabtmi\nCTK4Sactmi\nCTL4Sactmi\nCTL5Sactmi\nctqx50802959\nctrl3alt\nctrlshift\nctrvnium23\nctt123456\ncu2oh2co3\ncui123456\ncui2418821\ncui5201314\ncui7801067\ncuicui1981\ncuicui28\ncuicui520\nCUICUICUI\ncuifang0311\ncuihaijian\ncuihui2009\ncuijimin\ncuijimin_525\ncuiliang\ncuilijie123\ncuilu1984\ncuimingjun\ncuipei0618\ncuiqiang\ncuiqing_992277\ncuishaofei\ncuishuai\ncuiweibin\ncuiweilu\ncuiwenru\ncuixiang\ncuiyanan\ncuiyue1990527\ncuiyue21\nCuizhen415\ncuizheng\ncuizhiqiang\ncuizhuoxin\nCUL5Sactmi\nCUL5Tactmi\nculetstudio\nCUmt2230940\nCUMTCUMT\ncunhong123\ncuntpiero\ncunzhang\ncupidcai\ncups9835\ncurapica1110\ncurarpikt\ncuso45h2o\ncutecute\ncutezhimm\ncvb123456\ncvbnmfgb\ncvbyuj5d\ncvf339ghty\ncvucp9am\ncw123456\ncw123456789\ncw19811106\ncw4095217\ncw5225518\ncw801116\ncwaw0016\ncwf700602\ncwh960129\ncwj123456\ncwm6889587\ncwpkiamd\ncww85637390520\ncx122rk65y01\ncx123123\ncx123321\ncx12345678\ncx19510125\ncx19830711\ncx5201314\nCX5211314\ncxb123456\ncxc123456\ncxc4712021\nCXC707902\ncxc850205\ncxd123456\ncxd983022\ncxdhr999\ncxf0898520\ncxf123456\ncxf20016\ncxf200163995\ncxf218dj1q8\ncxf791025\ncxfcxfcxf\ncxga2000\ncxh123456\ncxj0123456789\ncxj123456\ncxj19810618\ncxj5770273\ncxj931600\ncxj951100\ncxl032412\ncxl123456\nCXM012484\ncxm123456\ncxm8552215\ncxmcxmcxm\ncxp-lsrh\ncxp123456\ncxqdcxqd\ncxrzb12220b\ncxshmily558217\ncxt19821018\ncxtnihao\ncxvbw322\ncxw6655022\ncxwcxwcxw\ncxx831800\ncxx8601117\nCXY105106\ncxy1147226\ncxy123456\ncxy6822433\ncxy771012\ncxz123456\ncxz123eagea\ncxzcxzcxz\ncxzdsa321\ncxzdsaewq\ncxzdsawok\ncxzr1777\ncy000000\ncy112233\ncy123321\ncy123456789\ncy1314520\ncy138830\ncy190701\ncy19801218\nCy19830612\ncy198628\ncy198799cy\ncy288289\ncy5201314\ncy600896\ncy712529920\ncy8243947\ncy830612\ncy87561555\ncy888888\ncyan0.618\nCYB20077\ncyb850502\ncybercat\ncyc123456\ncyc19840901\ncyc1986129\ncycy511528\ncyd_ascr\ncyf123456\ncyf790230\ncyg31423\ncyg436325\ncyh123456\ncyh821002\ncyhfjc19900113\ncyhhlove\ncyicwhat1\nCYJ13003933920\ncyj19861216\ncyj4690165\ncyj740104\ncyl123456\ncylz1209\ncym123456\ncym730307\ncymay459989\ncymonica\ncynosure\ncynthia33\ncyo820gi\ncyp03124410\ncyq123456\ncyr86485217\ncyshmily\ncyt151613698\ncytcytcyt\ncyw1985320\ncyxxkj2009\ncyy123456\ncyy402tsg\ncyy820302275\ncyy8254009\ncyycyycyy\ncyz060130\ncyz123456\nCz-z760524\ncz111111\ncz123456\ncz19821029\ncz20130204\ncz20502060\ncz5201314\ncz753951\ncza0002342\nCZAchenza\nczc111111\nczczczcz\nczd1314588\nczh123456\nczh2288076\nczh624696350\nCZJ123456\nczl585852\nczm19661111\nczn97825\nczq708201\nczw050322\nczw123456\nczx123456\nczxczxczx\nczy123456\nczyi191080070\nczywgsdl\nczz13675152815\nd0d0d03721\nd1234567\nD12345678\nd123456d\nd123456x\nd197302120226h\nd19750221\nd1qdybzgedtd\nd22xjnmhx\nd317067l\nd37fv4wtpx\nd37fv520530\nd3sds7wcck\nd3YevhlDwr\nd3YfuhmDwr\nd43o61jlh1\nd43o61kli1\nd46fdsa01\nd4c3b2a1\nd51557555\nd5176958\nd5201314\nd53o61kmi1\nd53o71kmi1\nd54o71kmi1\nd54p71kmi1\nd54p71kmi2\nd54p72kmi2\nd54p72kmj2\nd54p72knj2\nd54p72lnj2\nd54p7xjkga\nd54q7xjkh9\nd54q7xjkha\nd54q7xjmh9\nd54q7xkmhx\nd54q7xkmix\nd55q72kmix\nd55q72knix\nd55q7xkmix\nd5EixkrIBw\nd5FixkrIBw\nd65q72knix\nd65q82knix\nd68r4sd44d\nd6EiwkrJBw\nd6EiwkrJBx\nd6EiwkrJCx\nd6EixkrIBw\nd6EixkrJBw\nd7758521\nd781118d\nd8856f96se\nd987654321\nda0ha0-de\nda123456789\nda1bian1\nda2khdahda\nda385859869\nda456789\ndaaagh8999\ndabaicai\ndabaichi\ndabaisha\ndabao123\ndabaobei\ndabaobuping2009\ndabdtnhbdsrte@12\nDABEICIYIN\ndabendan\ndabieshan\ndabing123\ndachangjin\ndacheren\ndachui781201\ndad19280908\ndadada123\ndadan.721300\ndadaobaidusina\ndaddaddad\ndadi1977\ndadidadi\ndafeizhu\ndaffodil\ndafgagrew\ndafuweng\ndage5612\ndagenihao\ndaguaiguai\ndaguaikun\ndaguixiaogui\ndahai001\ndahai123\ndahai2299\ndahai521\ndahainan\ndahaizhen\ndahanchao\ndahandahan\ndahaoren\ndaheminzu\ndahongying\ndahuachi\ndahuaidan\ndahuamao\ndahuangde\ndahuaxiyou\ndahuilang\ndahundan\ndai780115\ndaibo123\ndaicheng\ndaichun666\ndaidai123\ndaiDAI520\ndaidaidai\ndaijiang\ndaijianjun\ndaijieqiong\ndailiang\ndailifan\ndailonghui\ndailuaill\ndaiqiang\ndaiqibiao3099\ndaishuang\ndaisy000\ndaisy114\ndaisy123\ndaisy1983\ndaisy2009\ndaisy520\ndaisy820314\ndaisydaisy\ndaisylee\ndaisywang\ndaixiang\ndaixin332\ndaiyuchen\ndaiyumei\ndaiyun168\ndaiyunfw\ndaizhe4793\ndaizheng\ndajiadian\ndajiahaoa\ndajiaoban\ndajidali\ndakongyi\ndalahoya\ndaldiuehoudaho\ndaledale\ndalian0411\nDalian123\ndalianbing\ndalianmao\ndalishuishou\ndalq1982\ndamaomao\ndamazhai\ndameguying\ndameiren\ndamidandan\ndamihexiaomao\ndamimi78\ndamingai88\ndaminghu\nDAMINGQI88\ndamo880608\ndamoguyan\ndamoguying\ndan123456\ndan61968551\ndan7kljfi\ndan800111\ndan821214\ndan871001\nDANce137171\ndanceing\ndandan20060110\ndandan22\ndandan5201314\ndandan530\ndandandan\ndandande\nDandelion\ndandinghe\ndangdang\ndanger29\ndanguo&*(\ndangweijun\ndangxiao\ndangyang\ndangying\ndangyuqian\ndanhuang\ndanhuashan\ndaniel11\nDaniel1108\ndaniel12\ndaniel123\ndaniel1981\ndaniel520\ndaniel731205\ndanielchan\ndanielchen\ndanieldaniel\ndaniele2010.\ndaniugege\ndanny123\ndannychan\ndannychen\ndannydanny\ndannyzxd\nDANPIANJI\ndanshan1979\ndansheng\ndanshenguizu\ndanshenhan\ndanxiaofei\ndanxiaogui\ndanxibao\ndanxingdao\ndany1488\ndanzi123456\ndao123456\ndaocaoren\ndaodagouwu\ndaodaodao\ndaodejing\ndaofeng1937\ndaohao444\ndaohao4ma\ndaohao4qj\ndaohaodesi\ndaohaokechi\nDAOhaoQUsi\ndaohaosi\ndaohaozhe4\ndaokedao\ndaolala789\ndaomeidan\ndaomingsi\ndaonimabi\ndapao621\nDapen9XU\ndaphnezz\ndapianzi\ndapigujinghua\ndaqi1234\ndaqi123456\ndaqimima\ndarenpk123\ndarevanq\ndark7708\ndarkblue\ndarkdark\ndarkhorse\ndarkhunter\ndarkking\ndarkmoon\ndarknight\ndarling003\ndarling123\ndarling520\ndarren103\ndarwin123\ndas123456\ndas3531111\ndasadasa\ndaselang\ndasenlin\ndashagua\ndashan123\ndashanhao\ndashi123\ndashitou\nDAshiZHANG\ndashuaige\ndashuang\ndasibushuo\ndasiwoyebushuo\ndasiyebushuo\ndASX609M\ndate2009\nDATETIME\ndatezhao\ndatiancai\ndatou127\ndatou520\ndatougui\ndatuoxiaotuo310\ndave1234\ndavedave\ndavid007\nDavid1234\ndavid1975\ndaVid1984\ndavid1987\ndavid2000\ndavid2008\ndavid516\ndavid520\ndavid521\ndavid888\ndavid983608\ndavidbeckham\ndavidchan\ndavidchen\ndaviddavid\ndavidking\ndavidlee\ndavidliu\ndavidong\ndavidtao\ndavidwang\ndavidwgh\ndavidzhang\ndavincicode\ndawadawa\ndawei123\ndawnli5233\ndawoniu01\ndawson5360\ndaxia007\nDaXia124\ndaxian636432\ndaxiaojie\ndaxieabc\nDaxingxing\ndaxue123\ndaxuecheng\nDAXUESHENG\ndayanjing\ndaybreak\ndaydayup920\ndaydream\ndaye2008\ndayingjia\ndaynight\ndayspring\ndayudayu\nDayusky7814\ndazhanhongtu\ndazhaxie\ndazhedaren\ndazhndsh\ndazhonghua\ndazhuang\ndazhutou\ndazui@2k\ndb123456\ndb197552\ndb2admin\nDB52133447\ndb7792368\ndbeckham\ndbmznjzy\ndbrbshsh\ndc123456\ndcba1234\ndcba4321\ndcba_0987\ndcefdcef\ndcx138148\ndcy12345678\ndcyptadh\ndcysales\ndd000000\ndd0108jhy\ndd1006zc\ndd112233\ndd1221333\ndd123123\ndd123321\ndd1234567\nDd123456789\ndd12xx89\ndd1314520\ndd20031013\ndd5201314\nDD520520\ndd5211314\nDD821025\ndd880514\ndd888888\ndd9527dd\nDD990804TT\nddcldlm1986\nddd123456\nddd666ddd\ndddd4444\ndddddddd123\nddddddddddd\ndddddddddddd\ndddddddddddddd\ndddddddddddddddd\nddddffff\nddddj123\nddddwawj\ndddfff000\ndddffggg\ndddnnnppp\ndddtefp23\ndde82119\nddffjjkk\nddiajbrso\nddingshan\nddjg489d\nddk751121skj\nddkkddkk\nddlovecc\nddloveff\nddmmddmm\nDDMMWW369\nddmzdhhh\nddpiaopiao\nddppt1091\nddqlwm06100611\nddrbdgzy\ndds123dds123\ndds5351130\nddslr9063\nddxxqq007\nddy123456\nddyy1983924\nddyy54632\nddzj8888\nde119840301\nde123456\nde19840406\ndead8888\ndeadfish\ndeadline\ndean1008\ndear1214\ndear1230\ndear1234\ndear79913\ndear881112\ndearbaby\ndeardear\ndearfriend\ndeariloveyou\ndeathdeath\ndeathknight\ndeathmask\ndebera0403\ndebug123\ndebug263\ndebugztv99\ndecadent\ndecember\ndede132501\ndedewang\ndedexiaomao168\ndeepblue\ndeephaze\ndeeplove\ndeepriver\ndeerlulu\ndefender\ndeihcwxf\ndejatiu500\ndejing110\ndekalog7188\ndelicate\ndeLL1234\ndell1420\ndell2008\ndell6400\ndell700m\nDell_2007\ndella347773\ndelldell\ndelldelldell\ndeloitte\nDELPHINE\ndelpiero\ndelpiero10\ndeltaforce\ndeluohaida\ndemodemo\ndemonhunter\ndeng0775\ndeng1001\ndeng1234\ndeng1978\ndeng1982\ndeng1984\ndeng1985\ndeng1986\ndeng1989\ndeng2008\ndeng2mao\ndeng3730323\ndeng7531\ndengbiao\ndengbing\ndengchao\ndengcheng\ndengchuan\ndengdai123\ndengdaiai\ndengdaini\ndengdaiwoai\ndengdeng\ndengdeng520\ndengdong\nDengDP1976\nDENGFANG\ndengfeng\ndenggang\ndenghong\ndenghuan\ndengjian\ndengjing\ndengjuan\ndengliang\ndenglijun\ndenglili\nDENGLINFENG1221@\ndengling\ndenglong\ndenglumima\ndengmeng\ndengming\ndengni1314\ndengniaiwo\ndengpeng\nDENGPING\ndengqian\ndengqiang\ndengqing\ndengshan\ndengshixiang\ndengsong\ndengting\ndengwang\ndengxiang\ndengxiao\ndengxiaoping\ndengxuan\ndengxvyang\nDengYang\ndengyanting\ndengyaqin321\ndengying\ndengyong\ndengyuan\ndengzhou\ndengzr778083\ndenilson\nDEnis123\ndennis123\ndeno1980\ndenphonebo879180\ndenzh617\ndepechertoi\nder12345\nderek011302433\ndesigned\ndesigner\ndesoft666\ndesperado\nDESTROYER\ndesyngjg\ndesyngjghsh\nDETECTIVE\nDetectiveconan\ndeutsche\ndeutschland\ndeutschland01\ndeveloper\ndevil119\ndevil123\ndevil_du\ndevildevil\ndevilmaycry\ndevjgef108\ndevkeg999\ndeyetown\ndeyygybj\ndezheng0710\ndf123456\ndf760311\nDFBB.DFBB\ndfbbdfbb\ndfc1988224\ndfdf0833\ndfdter3e\ndfg673673\ndfgauu958\ndfgDFGDFG\ndfgeedogf1er\ndfgrert4\ndfh363465\ndfh5348rfd\ndfhfjttr\ndfhgrhadfhfdjfj@\ndfhh3452\ndfhoncom\ndfjjjkkk\ndfkc88com\ndfmnyy007mi\ndforeverm\ndfxz212717\ndg021117\ndg08079255\ndg123654\ndg199978\ndg529951\ndg812838217\ndg888888\ndg8fvb9tky\ndg951800\ndgcbi8088\nDGDHHJJ@qq.com\ndggog88392469\ndgrsdddese\ndgrsdese\ndgwhukkg\ndgy123456\ndh110283\ndh123456\ndh19451225\ndh2629mj\ndh74-*64&blzj-*\ndh760511\ndhdhdhdh\ndhhcadcca\ndhj7218d\ndhl12345\ndhl123456\ndhm7682666\ndhr890715\ndhs196811\ndhs6590168\ndhtpwwfnh\ndhxzyzfh\ndhyhappy\ndi123456\ndi1988di\ndi789789\ndiablo1023\ndiablo123\ndiabloii\ndiamond7\ndian3000\ndian77mj\ndiana77yan\ndianchang\ndiandeng\ndiandian11\ndiandianyi\ndianfeng\ndianjiang\ndiank123\ndiankee111\ndiannaobao\ndianqian\ndianqiupiqusi\ndianshiji\ndianying\ndianying007\ndianzi08\ndiao7nia\ndiaochan\ndiaodiao\ndiaoliming\ndiaoling\ndiaonilaomu\ndiaonima\ndiaonimaxi\ndiaosini\ndiaoxi167\ndick1004\ndick123456\ndickdick\ndickmmmmmm\ndidadida\ndidiaozuoren\ndididada\ndididadi\ndidididi\ndidilovelim2046\ndie292duck089\ndielianhua\ndieqifly\nDIERJIAN\ndiet334210\ndiffcult\ndifference\ndifferent\ndiguoshidai\ndiji123456\ndijiutianchang\nDijkstra\ndiligence\ndiligent\ndilimic520\ndimension\nDimple82\nding1218\nding1234\nding12345\nding1981\nding19810511\nding1984cai122\nding1986\nding1987\nding520kong\nding8qin\nding_x@fm365.com\ndingbing\ndingchao\ndingchen\ndingcheng\ndingdandan\ndingdang\ndingdian\ndingding520\ndingdingdang\ndingdingdangdang\ndingdingding\ndingee2153\ndingfeng\ndinghong\ndingjian\ndingjiang\ndingjing\ndingju520\ndingjuan\ndingjunjie2008\ndingkang\ndinglian\nDingLiang\ndinglin211121\ndingling\ndinglong\ndinglu1016\ndinglu114\ndingmeng\ndingming\ndingning\ndingpeng\ndingping\ndingqian\ndingqiang\ndingqing\ndingrong\ndingsheng\ndingshuai\nDINGSONG\ndingtian\ndingting\ndingxiang\ndingxiao\ndingxiaoxia1203\ndingxiaoyan\ndingxing\ndingyang\ndingying\ndingyong\ndingyuan\ndingyuzi19981229\ndingzhen\ndingzhou\ndinkyjia1014\ndinshu8260130\ndion7902\ndionysos\nDionysus\ndiordior\ndipingxian\ndir.bat.\ndir12345lotus\ndir17951\ndirallgzy\ndirection\ndirector\ndirectory\ndirengrey\ndirtyjerry\ndirucdos\ndirwindows\ndisappear\ndiscover\ndiscovery\ndisen888\ndishitian\ndiskcopy\ndiskdisk\ndiskedit\ndisparity\ndistance\ndistence\ndiu85018\ndiuphoto\nDIVINITY\ndiyajun118\ndiyiciTY\ndiyiming\ndiyizhibi\ndiyu61758965\ndiyutianshi\ndizhirihuo\ndj099000\ndj1314520\ndj871125\ndjbyy1103\ndjdgrsjh\ndjdqltjqgflrw\ndjiloveu\ndjj19830415\ndjj781203\ndjl68783788\ndjl881005\ndjqs811226\ndjs123bd\ndjs202181\ndjy251314\ndjzong123\ndk123456\ndk986532\ndkceo21223344\ndkd12512\ndkdkdkdk\ndkf549dsfa\ndkf7107cxf\ndkfgoske\ndking12345\ndklibrary\ndkm050302\ndl1016025\ndl123456\ndl123456789\ndl141520\ndl233232\nDL5201314\ndl546784dl\nDL870929\ndlg751221\ndlh123456\nDLH820821\ndlheppdl\ndlktwdyl\ndll820117\ndlqm2009qmd\ndlt123456\ndlxok62532\ndlygyydlygyy\ndm123456\ndm1923726272\ndm19780905\ndmba8898\ndmgyzchlry\ndmiloveqyc\ndmrhdmrh\ndmrhdmrhdmrh\ndmsqdr0813\ndn123456\ndning1994\ndnv5201314\nDO2010do\ndobest100\ndobest891652\ndoctordoctor\ndocument\ndodo34011\ndodododo\ndodolook\ndoernet123\ndog821005\ndogandcat\ndogdogdog\ndoing8218669\ndoita789\ndoitmyself\ndoityourself\ndoityouself\ndolikeme\ndollarok\ndolphinxdf\ndominate\ndomybest\ndomyself\ndomyself16\ndonald1088\ndong020066666\nDONG1010\ndong1221\ndong1234\ndong12dong\nDong1314\ndong1977\ndong1980\ndong1981\ndong1982\ndong1983\ndong1984\ndong1985\ndong1986\ndong1987\ndong1989\nDong199968\ndong2005\ndong2008\ndong2009\ndong2588\ndong5201314\ndong58tie93\ndong6229980\ndong72386\ndong820210\ndongao0429\nDONGBANG\ndongbeiqishi\ndongbeiren\ndongbing\ndongchao\ndongchen\ndongcheng\ndongchong163\ndongchongxiacao\ndongding\ndongdong2008\ndongdongdong\ndongdongli\ndongfangbubai\ndongfanghong\ndongfangshenqi\ndongfeng\ndongfeng87\ndongfengpo\ndonggang\ndongge449\ndongguaboli\ndongguan\ndonghang\ndongheng\ndonghong\ndonghongyang000\ndonghuan\ndonghui111\ndongjian\ndongjiang\ndongjing\ndongjuan\ndongkoulwh\ndonglian\ndongliang\ndonglili\nDONGLIN123456\ndongling\ndonglingling\ndonglong\ndongmei201\ndongmeng\ndongni110\ndongning\ndongning0620\ndongocome\ndongpeng\ndongping\ndongqian\ndongqiang\ndongqiao\ndongqing\ndongquan\ndongs129\ndongshan\ndongSHAO\ndongsheng\ndongshuai\ndongsibatiao\ndongsiqu\ndongtian\ndongting\ndongwang\ndongwei521\ndongweiwei\ndongwenhui\ndongxiang\ndongxiao\ndongxie19890323\ndongxing\nDONGXUAN\ndongxuefei\ndongyang\ndongyi714\ndongying\ndongyong\ndongyuan\nDONGyuan92WO\ndongzhang\ndongzhen\ndongzheng\ndongzhenhu\ndongzhimen\ndongzi123\ndonnadonna\ndonotcry\ndonotloveme\ndontcare\ndontknow\ndontstop\nDoolpppp\nDoomsday\ndoordoor\ndooyuan520\ndoremi123\ndoremifa\ndorisdoris\ndorisibm\ndortmund\ndospass_wenpher\ndostoevsk1\ndothebest\ndou123456\ndou15856189065\ndoublefish\ndoublemint\ndoublewei\ndoudizhu\ndoudou0801\ndoudou1021\ndoudou123\ndoudou1314\nDoudou168\ndoudou2009\ndoudou520\ndoudou521\ndoudoudou\ndoudoudoudoudou\ndoudoulong\ndoudouwansui\ndoujiang\ndouloveme\ndouniwan\ndouwentao\ndouzi660\ndovedove\ndow356983\nDowjones\ndoyenooo\ndoyouknow\ndoyouloveme\ndoyourbest\ndoyouwant\ndp123456\ndp821118\ndpbg123.\ndpsa516317575\ndq123456\ndq851021\ndqc7087009\ndqccs50486\ndqga8060333\ndqhm2468\ndql771126\ndqs3271595137\nDR131420ok\ndr56hjks36k\ndra891109\ndragon007\ndragon11\ndragon123\ndragon1976\ndragon1988\ndragon2000\ndragon50\ndragon518\ndragon520\ndragon999\ndragoncat\nDragondearbook\ndragondragon\ndragonet\ndragonking\ndragonlong\ndragonquest\ndragonraja\ndragonsky\ndragonson\ndragonworld\ndrdl3221786\ndream123\ndream2000\ndream2003\nDream2005\ndream2008\ndream2009\ndream2010\nDream520\nDREAM520LJC\ndreamboy\ndreamcast\ndreamcometrue\ndreamdream\ndreamfly\ndreamgirl\ndreamhouse\nDREAMLAND\ndreamliu\ndreamlover\ndreamscometrue\ndreamsea\ndreamsky\ndrgoo520\ndrhdhdghthsh@126\ndrinking\ndrmfslcd\ndrmfslxd\nDrmVrtQ954\nDrmVssQ955\nDrmVstQa54\nDRV62SJ7HXEL8SKB\nds123456\nds50125012\nds888888\ndsa123456\ndsa123456789\ndsa61090\ndsadsadsa\ndsaewq321\ndsafw123\ndsah0828\ndsasdasa\ndsc1988928\ndsds19890820\ndsf33fdsft\ndsf87290696\ndsh123456\nDSJ4R9bskh\ndsjh0801\nDSK4R9bskh\ndsm345828501\ndsmiaofu\nDsmVssQ955\nDsmVssR955\nDsmWssR955\nDsmWstRa54\nDsnWssR955\nDsnWstRa54\nDsnWstRa55\nDsnWttRa55\nDsnWttRa65\ndswan666\ndsx810613\ndsz19861023\ndszy8876\ndt123456\ndt12345678\ndt19830209\ndt5201314\ndt991231\ndtaxy102x\ndthkdsy0214\nDTK4R9bskh\nDTK4S9bskh\nDTK4S9btkh\nDTK4Sabtkh\nDTK4Sabtmh\ndtmtwasccataf\nDtt123456\ndtwhsk1512\ndty153580\ndu198800\ndu198819\nduaibaobao\nduan1234\nduan123456\nduan1980\nduan1981\nduan1982\nduan1983\nduan1986\nduan801024\nduan927001\nduanchao\nduanchen\nduandawn\nduandian\nduanduan\nduanfeng\nduanjian\nduanjiang\nduanjing\nduanleni\nduanlian\nduanpeng\nduanqiang\nduanqing\nduanruwang\nduanwujie\nduanxian\nduanxiang\nduanxiao\nduanxl198702120\nduanxuan\nduanyang\nduanying\nduanyong\nduanyu004\nduanzheng\nduba2009kfcnba\ndubai123\ndubing0618\ndubing123\nduboalex\nduck1984\nduckarale\nduckduck\nduckling\nduckweed\nduddo265\nDudu1201\ndudududu\ndudula456\ndudulang\nduduniao\ndudunini\ndugu9jian\nduguiting\ndugujian\ndugujiujian\nduguqiubai\nduibuqi007\nDUIBUQI521\nduizhang\ndujiajiyi\ndujiandj\ndujianfeng\ndujiangyan\ndujiaoshou\ndujiaoxi\ndujinghua\ndujingwenhaoyun\ndujuandemima\ndulin258\ndumbledore\ndumpling\ndun20040704\nduncan21\ndundao1975\nDUNHUANG\nduoduo123\nduoduo123456\nduoduo128\nduoduo520\nduoduo521\nduoduo91555\nduoduoduo\nduoduojo9oo9\nduoergun\nduolaameng\nduolaimi\nduoluotianshi\nduomaxwell\nduomitu159\nduongkien\nduoqingdaoke\nduoshaoshao2009\nduoyixie\ndupengfei\nduqingyu\nduqiyaner\ndushadusha\ndushangxilou\ndushijie\ndushuang\ndushuyan\ndusiyuan\ndust1031\ndust112358?!\ndutao0215\ndutemimaanhi\nduwei123\nduxiaodong\nduxiaoming\nduxiaowei\nduxiaoyu\nduxingxia\nduyanboD0\nduyarui87117\nduyiwuer\nduyonghang\nduzheshiwo\nduzidengdai\nduziyiren\nDv2238001\ndvl050117\ndw111111\ndw123123\ndwgyt729\ndwm74901982\ndwn198210\ndwp52906\ndws34gbe\ndwt123456\ndwtdwtdwt\ndww286001\ndwxf6077\ndwxhhy1234\ndwyanewade\ndwyou116\ndwysnlyliu\ndx020109\ndx123456\ndx2395202\ndx268160\ndx348566882\nDx365412\ndx5211314\ndx987654\ndxfdysscjyie\ndxfuflong\ndxh13787614396\nDxj4ever\ndxl17629\ndxm19851013\ndxshuo325\ndxtz123456\nDXx_880201\nDY123456\ndy197649\ndy19791010\ndy198816\ndy422823\ndy5201314\ndy7073498\nDY720904\ndyf0774119\ndyf123456\nDYH123456\ndyj123456\ndyjhaode425\ndykhmily\nDYkiller\ndyn5875858617dyn\ndyp800611\ndyrcjqlgcj\ndys8813672\ndyxc0204\ndyy19860131\ndyzhb123\ndyzyuhongbnu\ndz123456\ndz27530704\ndzadweiwei\ndzd2667617\ndzd800214\ndzf666123\ndzgdzgdzg\ndzh123456\ndzjtxldby\ndzm72168\ndzq1987723\ndzs67501\ndzy8239104\ndzz19830126\ne0s7p1r7it\ne1057409\ne11235813\ne1234567\ne123456789\ne1d2i3t4h5\ne226eMde\ne23456789\ne258e258\ne28383si\ne2XevhlCvq\ne2XevhlCvr\ne2XevhlDvr\ne3u7i8t5\ne3XevhlDvr\ne3YevhlDvr\ne3YevhlDwr\ne54p72lnj2\ne54q72lnj2\ne5d4c3b2a1\ne5FhxkqIAw\ne5FhxkqIBw\ne5FhyjqIAw\ne5FhykqIAw\ne5FixkqIBw\ne5FixkrIBw\ne5y7e45ye\ne64q72lnj2\ne64q72lok3\ne64q72mok3\ne64q83mok3\nE65351656\ne65q82knix\ne65r82knix\ne65r82mni2\ne65r82mnj2\ne65r82mpj2\ne65r83mok3\ne65s82mpj2\ne65s83mpj2\ne65s83mpj3\ne6i8r8d4\ne71fe71f\ne89120d9dfeb\ne8i2j2b6\ne9n1j1n5\nEa62758802\neager997\neagle123\neagleeagle\neagles..\nearlhaig\nearthman\nearthmar\nearthquake\nearthworm\neasftasegqsrd@12\nEason727\neasonchan\neasouman\neast1234\neast2003\neastlxgzr\neastwest\neastwood\neasy1234\neasy2get\neasyboss\neasyeasy\neasylife\neasylove\neatapple\nEBAYQIJINGYAN\nEBNWQP4n\nec123456\nec820716\necbf416u\necdance123\necho0798\necho10411695\necho1234\necho1981\necho1984\necho821128\necho_19831205\nechochen\nechoecho\nechoking\nechoohce\necolyecoly\neconometrics\neconomic\neconomics\neconomist\necsi0135\necvv123456\ned123456\nedc123456\nedcnnanaw\nedcrfvtgb\nedcwsxqaz\neddyeddy\nedelweiss\neden79rain\nedeng1234\nedenpeng\nedian2009\nedison1007\nedison123\nedison241\nedison520\nedisonchan\nedisonchen\nedisonzl\nedit2000\neditedit\nedmund28\nednapall\nedward12\nedward123\nee123456\nEE960923EE\needwoai440\neeee1234\neeeeeeeee\neeeeeeeeee\nEEEQXXTG\neer534tga\neett@743503\nef692jwz\nefabcoloretta\nefan1202\nefc199853\neffection\neffica5227\neffieting\nefgedfggh\nefonxhj885200\nefwrgtqrg@126.co\negeavgjf@#\negfjhytu\negg1122715\neggplant\nehhe0032\nehinan0898\nei321620\neileen0303\neileen2000\neillen880312\neimbzuo308\neinsunlxk\neiyue456\nejdfetjf@#\nejjj2007\nejrcc101\nekinandy\nekincheng\nekinekin\nekineyes\nekingigi\neknow2010\nekotreeabc\nelain890312\nelandn124\nelanso2050\nelectrolux\nelectron\nelectron98\nelectronic\nelegance\nelisabetter\nelite2009\nelitetse\nelivs8766\nElla807685\nella990325\nellaella\nelleinad\nello46589\nelong5930\neloupan708\nelva1025\nelva1087\nelva1987\nelva2000\nelvaelva\nElvia520\neM5xK7nRRRRR\nemailemail\nembrace1homo\nembsysdd\nemi^kinki1979\nemilchau\nemilly75\nEmily1981\nemily2045\nemily520\nemily920guo\nemilygu0203\nemilyjelly\nemilyliu\neminem520\nemituofo\nemlnengv\nemmaemma\nemmawatson\nemperor8341\nemperorxu\nen0u2289\nen134ever\nEN13EN13\nencourage\nendeavor\nendinthe\nendless123\nendless67\nendlesslove\nendzh111\nenergy912\nenergyhs\nenergyshow\nenglish1\nenglish123\nENGLISHBOOK\nenglishenglish\nenglishman\nenglishmen\nENGLISHTEACHER\nenigmavision.cn\nenilnola\nenjoy198412\nenjoylife\nenjoymyself\nenrollment\nenter000\nentER123\nenter2000\nenterenter\nenterprise\nENTERTAIN\nenthusiasm\nentrance\nenvironment\nenvision\neongg123\nepfst123456\nepryijwq\nepson001\nepson1970\neptrans19\nepwq1314\nepwqgdnvrh\neqaz2wsx\neqccd123\nequation\neqzsyb7f\ner123456\ner4e45r3\nerate4trae4\nerbao316\nerchu8150\nercun204213\nerete4df\nerfh1982\nERI3Q9arjg\neric1234\neric1979\neric1983\neric2118\neric443625\neric69ming\neric_wu1988\nericchen\nericeric\nericsong\nericwang\nericyang1969\nERJ3Q9arjg\nERJ3Q9arjh\nERJ3Q9arkh\nERJ3Q9askh\nERJ3Q9bskh\nERJ3R9bskh\nerkofer078510\nerlcfa520\nerma1319\nerma1913\nermangzi\nerosmail\nerse1732\nertbvhe28\nertgetyh\nerw5478d\nerwow1982\nerzi0627\nes123456\neshoot123456789\nESJ3R9bskh\nESJ4R9bskh\nEsnWstRa55\nEsnWstRa65\nEsnWttRa65\nEsnWtxRa65\nEsnWtxSa65\nEsnXs0Sa65\nesp521fy6\nespresso\nestar1258\nesun8866\nesv050210\nesxesxesx\net123456\net718718\net760221\netang.com\neternal520\nEternalFlame\neternite\nethernet\netian007\nEtnWtxSa65\nEtnXt0Sa65\nEtnXtxTa65\nEtnXuxTa65\nEtoXt0Sa65\nettorebassi\neu19821220\neucalyptus\neudifcuga\neva05660\neva123456\neva266971\neva821122\nevaevaeva\nevan554861563\nevangeline\nevansyoung\neven1234\nevengood\nEVENLOVER\neverfree\nevergreen\neverlast\neverlasting\neverlove\neveryday\neveryday1024\neveryone\neverything\nevilangel\newgegasegsg@126.\newjc45b8\newqdsacxz\newqewqewq\nexcalibur\nexcelily\nexcellence\nexcellent\nexchange\nexciting\nexcuseme\nexhibition\nexitenter\nexitexit\nexitmenu\nexpecting\nexperience\nexpo2010\neyes0nme\neyesonhim\neyou.com\nezorro5217\nf00tba11\nf0restwow\nf1111111\nf117f117\nf1234567\nf123456f\nf1314520\nf18907651234\nf1912923935\nf1f1f1f1\nf1f2f3f4\nf1x0j2s5q\nf2002jdld\nf20082008\nf2WdwgkCuq\nf2WdwgkCvq\nf2XewglCvq\nf45kdfyi\nf4inlove\nf512m723\nf5201314\nf5211314\nf5FhyjqIAw\nf5GgyjpHAv\nf5GgzjpHAv\nf5GhyjpHAv\nf5GhyjqHAv\nf5GhyjqIAv\nf5GhyjqIAw\nf6142217\nf65r83mok3\nf65r83mpl3\nf65r83mpl4\nf65r83npl4\nf65s83mpj3\nf65s83mpk3\nf65s83npk3\nf6c3e5c3\nF6yYyb6d\nf75r83npl4\nf75r84npl4\nf75s83npk3\nf75s83nqk3\nf75s84nql4\nf75s84nqm4\nf75s93nqk3\nf76s93nqk3\nf76t93nqk4\nf76t94nqk4\nf76t94nqm4\nf76t94nrjg\nf76t94nrm4\nf76t94prm4\nf7766752\nf7777777\nf7ngvDgz\nf7u9nm3d\nf870504f\nF88888888\nf9600181\nf9703401\nf97168369\nf9810201a\nf999888f\nFa000108\nfa123456\nfa47040808\nfa67569685\nfa790213\nfabregas\nfabuzhe789\nfacai123\nfacai888\nface2face\nfaceface\nfacetoface\nfaemail177668\nfafafafa\nfafathan\nfafazhai\nfafentuqiang\nFAHRENHEIT\nfaifai5062\nfaint123\nfaintfaint\nfaintyou\nfairfree\nfairy1224\nfairy1985\nfairy520\nfairytale\nfaith0727\nfakefake\nfalcon100\nfalconer\nFallenangeL\nfallenleaves\nfallenstar\nfallinfall\nfallinlove\nfalllxnovember\nfallrain\nfalundafahao\nfamily123\nfamily520\nfamilyfamily\nfan1112825\nfan12310\nfan5201314\nfan666666\nfan851031\nfan_222350\nFan_hereme\nfanbing904706\nfanbingbing\nfanco006\nfancuofancuo\nfancy123\nfancy830308123\nfancyboy\nfancyfancy\nfancyue8z\nfanfan0927\nFANFAN123\nfanfan2010\nfanfan520\nfanfanfan\nfanfeng101\nfang0000\nfang1123\nfang1234\nfang12345\nfang123456789\nfang1314\nfang1314520\nfang1860\nfang1981\nfang1983\nfang1984\nfang1985\nfang1986\nfang1987\nfang1988\nfang19881103\nfang1989\nfang19890816\nfang2008\nfang2009\nfang2259797\nFang6241\nfang778899\nfang811007\nfang861015\nfang890929\nfangbian\nfangbianmian\nfangbing\nfangchan\nfangchao\nfangchen\nfangcheng\nfangchuan\nfangdan0104\nfangdong\nfangerlonglong\nfangfang00\nfangfang123\nfangfang521\nfangfangvalen\nfangfei131420\nfangfei3190\nfangfeixinqing\nfangfeng\nfanggang\nfanghong\nfangjian\nfangjing\nfangkan518\nfangliang\nfanglili\nfangling\nfanglong\nfangmei79\nfangmeng\nfangming\nfangming602\nfangning\nfangpeipei\nfangpeng\nfangpengfei\nfangping\nfangqian\nfangqiang\nfangqing\nfangqini\nfangrong\nfangshachem\nfangshan\nfangsheng\nfangshiyu\nfangshou\nfangshuai\nfangsong\nFANGTIANYA\nfangting\nfangtong\nfangwang\nfangwangxinlaw\nfangx1981\nFANGXIANG\nfangxiao\nfangxing\nfangxiong\nfangxu2006\nfangxu717\nfangyang\nfangying\nfangyong\nfangyuan123\nfangyuan851020\nfangyue420\nfangzhao\nfangzhen\nfangzheng\nfangzhou\nfangzong\nfangzongliang\nfanjiang\nfanjiawei\nfanjin123\nfanjinqi\nfanjunchao\nfanken1982\nfanl8006730\nfanliang\nfanlijun\nfanlin98520\nfanlv2010\nfannaf@7621\nfannwong\nfanny1225\nfanqiang\nfanqiang3329\nfanqinger\nfanruina\nfanslife39\nfanslove1\nfantao123\nfantasy123\nfantingting\nfanwen5u\nfanwenhua\nfanwenjun\nfanwenjun853898\nfanxiang\nfanxiaok46\nfanxinxin\nfanyi521\nfanyixin\nfanyixuan5257\nfanyongg\nfanyu1100\nfanyue717171\nfanyujie\nfanyuxiang\nfanze2003\nfanzhaolin\nfanzheng\nfarewell\nfarfarfar\nfarocean\nfashion@000\nfastasdf\nfastfast\nfathermother\nfatiao111\nfavorably\nfavorite\nfavourite\nfay7810025\nfaye1212\nfaye1989\nfaye33287885\nfayebest\nfayefaye\nfayewang\nfayewong\nfayeyy1860\nfaynet90\nfazai520\nfb123456\nfb1427sz\nfb19541983\nfb81e383\nfbbyzx2006\nfbiveck23\nfbkdsqtjq\nfc123456\nfc19741230***\nfc325111\nfc4ic6fm\nfc667788\nfc806167\nfcbayern\nFCECILIA\nfckgwrhqq2\nfclfcl78\nfcsh2208\nfcy001819yfc\nfcy1953lmy\nfd123456\nfd4hsftjisrt@126\nFD791112\nfd87654321fd\nfdf8g000ip7wgh5\nfdg494665\nfdhf2ug2\nFDHJHFG@qq.com\nfdiskeditor000\nfdiskfdisk\nfdjkfdjk\nfdrh99888\nfdsa1234\nfdsa123456\nfdsaasdf\nfdsafdsa123\nfdsafdsafdsa\nFDSAJKLг╗\nfdsajkl;\nfdsarewq\nfdv435DFsu\nfe123357\nfeather1314\nfebruary\nfeby1981\nfedi2006\nfedi2007\nfeel1152617\nfeel3921\nfeelgood\nfeeling.123\nFeeling123\nfeeling99\nfeelings\nfeelwell\nfei..782778\nFEI011014\nfei123321\nfei12345\nfei123498\nFEI13077869285\nfei1314520\nfei321620\nfei3252298\nfei7758521\nfei80888\nfei@0918\nfeichang\nfeidajdia\nfeidear710\nfeidegenggao\nfeier123\nfeifan123\nfeifan88\nfeifei0313\nfeifei111\nfeifei123456\nfeifei1314\nfeifei168\nfeifei1982\nfeifei1988\nfeifei2006\nfeifei2008\nfeifei66\nfeifei761943\nfeifei871117\nfeifei88\nfeifei99\nfeifeifeifei\nfeifeihu\nfeifeili\nfeifeilong\nfeifeilove\nfeifeiS11\nFeiFeiwoaini\nfeifeiyu\nfeiguoqu\nfeihaojiu\nfeihu2000\nfeihuazhuyue\nfeihusky\nfeihuxia\nfeihuxialmmll\nfeijge876h\nfeiji123\nfeijiqifei\nfeilin520\nfeilunhai\nfeimail828\nfeinibuke\nfeinimoshu\nfeitian123\nFeitian2\nfeitianwu\nfeitianzhu\nfeiwenli\nfeixiang123\nfeixiang1991\nfeixiong\nfeixue99\nfeiyang241510\nfeiyang8802\nfeiyu520\nfeiyue123\nfeiyue1256\nfeiyue2008\nfeiyue456\nfeizhai000\nfeizhuliu\nfeizilin620\nfeizilin620WJH\nfelix!QAZ\nfelix80113\nfelixfelix\nfelixiran\nfelixqqq\nfellatio\nfen123456\nfen5201314\nfendou123\nfendou1314\nfendou2007\nfendou2008\nfendou2009\nfendou2010\nfendouba\nfendoubahejun\nfendouhejunbin\nfenfenfen\nfeng0911\nfeng1001\nfeng1010\nfeng1017\nfeng1024\nfeng102437\nfeng1126\nfeng1129\nfeng1209\nfeng121685\nfeng1234\nfeng12345\nfeng123456789\nfeng1314\nfeng1314520\nfeng136123\nfeng16t603\nfeng1978\nfeng197806\nfeng1979\nfeng1980\nfeng1981\nfeng1982\nfeng1983\nfeng1984\nfeng1984228\nfeng1985\nfeng1986\nfeng19860504\nfeng1987\nfeng1988\nFeng1989\nfeng198yu\nfeng1990\nfeng1991\nfeng2000\nfeng2005\nfeng2007\nFENG20070605\nfeng2008\nfeng2009\nfeng2010\nfeng221723\nfeng441622\nfeng451210\nfeng5678\nfeng80263\nfeng8211\nfeng885466\nfengabao\nfengaishiyueye\nfengbaobao\nfengbing\nfengbuxiao\nfengchao\nfengchen\nfengcheng\nfengchuan\nfengchui\nfengchun\nfengd002\nfengdeyse\nfengdian\nfengdiguan587868\nfengding\nfengdong\nfengdugy\nfenger130\nfengermei\nfengfang\nfengfanzhong1986\nfengfeifei\nfengfeng520\nfengfeng6938\nfenggang\nfenggege\nfengguang\nFENGHE11\nfenghong\nfenghua13\nfenghuan\nfenghuang\nfenghuang8\nfenghuaxueyue\nfenghuishu\nfengj625\nFENGjia1997\nfengjiajia\nfengjiang\nfengjiao\nfengjie520\nfengjing\nFENGJUAN\nfengjuan198039\nFENGJUNJIE\nfengkang\nfengking\nfengkuang\nfenglanaibama\nfenglang\nfengleng\nfenglian\nfengliang\nfenglijuan\nfenglile\nfengliming\nfenglin511800\nfenglina\nfengliutitang\nfengllng\nfenglong\nFENGLOVE\nfengmeng\nfengming\nfengpass2006\nfengping\nfengqian\nfengqiang\nfengqiao\nfengqing\nfengqingyang\nfengqiuting\nfengquan\nfengsan3\nfengse22\nfengshan\nfengshang\nfengshao\nfengshen\nfengsheng\nfengshengbang\nfengshou\nfengshuai\nfengshuang\nfengshui\nfengshun\nfengsong\nfengtian\nfengting\nfengtong\nfengwang\nfengweiwei\nfengwg1982\nfengwu011\nfengwuhui\nfengwujiutian\nfengxi19860521\nfengxia0906\nfengxian\nfengxiang\nfengxiao\nfengxiaoli\nfengxiaoxiao\nfengxing\nfengxinzi\nfengxiong\nfengxuan\nfengyang\nfengyatou\nfengying\nfengyingmei\nfengyinhong\nfengyinhua\nfengyiyang\nfengyong\nfengyu25\nfengyuan\nfengyuen\nfengyujian\nfengyujiancheng\nfengyun123\nfengyun2\nfengyun299\nfengyutongzhou\nfengyuwuzu\nfengyuzhe\nfengzhen\nfengzheng\nfengzhengzzz\nfengzhizi\nfengzhong\nfengzhou\nfengzhuang\nfengzi123\nfenshoukuaile\nfenxiang\nfenxinyihuo\nFerrenLee\nferrero0906\nFERRO186\nfestival\nfewfasdf\nff110112\nff111111\nff114110\nff123123\nff123456789\nff12982046\nff131420\nff147258\nff5201314\nff520520\nff522zs620\nff575876\nff7758521\nff870106\nff960401\nffbi5161\nffd123456789\nffdd112233\nffdz1234\nfff012013\nfff111111\nfff123456\nfff198211\nffff1111\nffff4444\nffff8888\nffffaaaa\nffffcccc\nffffdddd\nffffff123\nfffffffff\nfffffffffff\nffffffffffff\nfffffffffffff\nffffffffffffff\nffffgggg\nffffjjjj\nffffxxxx\nfffqqq123\nffg761049\nffjjffjj\nffkch12345\nfftq2007\nfg123456\nfger22dw\nfgfthttr5\nfgh123456\nfgh1314520\nfghfghfgh\nfghjfghj\nfghjjhgf\nfghjvbnm\nfgy022882\nfh123456\nfh19860822\nfhdg4356\nfhg700803\nFHJ19911001\nfhl515890\nfhm13460\nfhmilyjing9\nfhn513613\nfho381974\nfhq587681\nfhqjmhncq\nfhqjugtahn\nfhwhg291\nfhwrepwq\nfhxf7291\nFIBERHOME\nficowxw101\nfidodido\nfifa2000\nfifa2001\nfifa2002\nfifa2003\nFIFA2004\nfifa2005\nfifa2006\nfifa2008\nfifa2009\nfifafifa\nfifagary\nfighters\nfightfight\nfighting123\nfigofigo\nfigolee123321\nfilefile\nfilezhen511422\nfilip8493\nfinal123\nfinalfancy\nfinancial\nfindfind\nfindlove\nfindmyway\nfindtheway\nfine.rain\nfine1204\nfinefine\nfinzaghi\nfiona123\nfionamoore\nfionazheng\nfiorentina\nfipctrgie\nfireandice\nfirearmy\nfirearmy2006\nFireBird\nfirefire\nfireking\nfireshow\nfirestone\nfirewind\nfirewolf\nfirework\nfirst111\nfirst123\nfirstfirst\nFIRSTjava123\nfirstone\nfirsttime\nfish0303\nfish0616\nfish1234\nfish123456\nfish1985\nfish2000\nfish2008\nfish4444\nfishbaba\nfishbird\nfishbone\nFISHCHEN\nfisherman\nfishfishfish\nfishhead\nfishking\nfishkiss\nfishleon\nfishleong\nfishrabbit\nfishwater\nfivestar\nfiywxj0821\nfj112888\nfj123456\nfj123456789\nfj12349876\nfj147258\nfj19861101\nfj256811\nfj5228285\nfj770613\nfj810209jf\nfjcy2689\nfjf781114\nfjfhlnfm\nfjfhqkqp\nfjfjfjfj\nfjfjfjfjfj\nfjfjxlxl\nfjh0295584126\nfjh78wd3@#\nfjh7hyd3@#\nfjhstsex\nfjianxin\nfjn0620400129\nfjpnwolf\nfjqrviqv\nfjs3207705\nfjw123000\nfjw2zmz=1314\nfjy710730\nfk110110\nfk123456\nfk19811015\nfk600108\nfkegmyapwk\nfkn070401\nfkuefkue\nfkuejyiuapsu\nfkuekhgm\nfkueyin909909\nfkukpyaw\nfl100800\nfl112122\nfl123456\nfl13900675800\nfl5201314\nfl654321\nfl789456\nfl88012015\nfl_pku77\nflash123\nflash5153311\nflashflash\nflashget\nFlextronics\nflf72116\nflfsoyam\nflip194466\nflmn830725\nfloating\nflora123\nflora1983\nflora530\nfloraecho\nfloraflora\nflower1225\nflower123\nflower666\nflower929\nflowerflower\nflowertree\nflowhizz\nflowofsand\nfluently\nfluffybaby\nfly123456\nfly1980516\nfly19870915\nfly20011106\nfly55555\nfly850209\nflybirds\nflyblade\nflydance\nflydeng201847\nflydragon\nflydream\nFlyeagle\nflyflyfly\nflyforever\nflyheart\nflyhorse\nflyindance\nflying123\nflying2000\nFlying2008\nflying99\nFlying_zyz\nflyingbird\nflyingclr\nflyingfish\nflyingfox\nFlyingmyfish\nflyingPIG\nflyingpig123\nflyingsky\nflyingsnow\nflyingworm\nflyinthesky\nflylovesyy\nflype.160153\nflysword\nflytiger\nflytosky\nflytothesky\nFlzx3000c\nflzx3qcysyhl9t\nflzxsqcysyhljt\nfm123456\nfm3484in\nfm801222\nfmjfmj!@#123\nfmnyzzzz\nfnazllywn\nfnwfn104\nfocifoci\nfollowme\nfoodkiss\nfoolfish\nfoolishman\nfooluold\nforanother\nforbidden\nforcobol\nforest0505\nforester\nforestgun\nforever.\nforever123\nforever1314\nforever20\nforever2002\nforever327\nforever520\nforever521\nforever619\nforever6629\nforever7\nforever99\nforever_yh\nforeverforever\nforeverhot\nforeverlove1314\nforeverloveyou\nforeverme\nforevermedia\nforevery\nforeveryoung\nforfreedom\nforfuture\nforget123\nForget2757\nforgetall\nforgetit\nforgetlove\nforgetme\nforgetmenot\nforgetyou\nforgiveme\nforgodan\nforgotten\nforhappy\nforlove2009\nformat1094\nformat32\nformatedit\nformoney\nformula1\nformylove\nformyself\nfornever\nforrestgump\nfortheking\nfortianya\nfortitude\nfortunate\nfortune88\nforumkey\nforzagang\nforzainter\nforzamilan\nfotosay123\nfoundbrain8\nfounder123\nfountain\nfourfour\nfourinlove\nfourseven\nfox123456\nfox12n64\nfox225537\nfox5201314\nfox820121\nfoxcavity\nfoxconn$88\nFoxconn123\nfoxconn168\nFoxconn88\nfoxfoxfox\nfoxhound\nfoxhunter\nfoxking007\nfoxkwell\nfp123456\nfp325808\nfpc2882200\nFPE95230\nfpjzxq123\nfq123456\nfq123456789\nfq3691413\nFQI3P8arjg\nFQI3P9arjg\nFQI3Q9arjg\nFQJLB1981\nfqqk1315\nfqshking0016414\nfqw0660abc123\nfqxmg123\nfr123456\nfr19890324\nfr824520\nfragrance\nfragrant\nfran0110\nfran0127\nfrancais\nfrancesco\nFrank123\nfrank1986\nfrank741203\nfrank880328\nfrankfrank\nfrankieee\nfrankietan\nfrankliu\nfrankwang\nfrankwing214\nfrankzjp\nfrederic\nfredmango\nfree1234\nfree123456\nfree1314\nfree2006\nfree2008\nfree2rhyme\nfree8280\nfreedom123\nfreedown\nfreefish\nfreefree\nFREEGIRL\nfreehand\nfreehata\nfreeheart\nfreehuman\nfreelance\nfreelancer\nfreelife\nfreemail\nfreemind\nfreesoft\nfreesoul\nfreestone\nfreetalk\nfreetime\nfreewill\nfreewind\nfreewolf\nfreezing\nfresh4223\nfreshair\nfreshman\nFRI3Q9arjg\nfriday13\nfriend1130\nfriend123\nfriend1314\nfriendfriend\nfrogfrog\nfrom1127\nfromchina\nfromhell\nfromnowon\nfromyiyang\nfronaldoy\nfrphoenix\nFRQ226R2\nfruit123\nfruitfruit\nfs111111\nfs123456\nfs123456789\nfs19810414\nfs3212615\nFS4591290\nfs666666\nfsc128315\nfsdi1229\nfsecxl823557\nfsh19620826lyf\nfsh2321642\nfshidesong\nfsm198592\nfsq123123\nfst123456\nfsx123456\nfsx870121\nfsxysfbi\nfsy730182\nft123456\nft152637\nft1746527\nft2726451\nft3619375\nftf123000\nftihqepwq\nftjy1357\nftld20008535a\nftlisiwen\nFtnXuxTa65\nFtnYuxTa65\nftotttff\nFtoXt0Sa65\nFtoYt0Tb65\nFtpYuxTa65\nftyzgs14\nfu121172\nfu5577zhang\nfu803170\nfu810131\nfubaba488\nfubo37592\nfuchen333\nfuck11223344\nfuck1234\nfuck123456\nfuck1278\nfuck1314\nfuck131553\nFUCK2000\nfuck2007\nfuck2008\nfuck4444\nfuck911usa\nfuckable\nfuckcsdn\nfuckfuckfuck\nfuckgame\nfuckGIRL\nfuckingyou\nfuckjapan\nfucklanyun\nfuckmeman\nfucknima\nFUCKSHIT\nfucktheworld\nFUCKTIANYA\nfuckufucku\nfuckyou00\nfuckyou008\nFuckyou1\nfuckyou100\nfuckyou110\nFUCKyou1314\nfuckyou520\nfuckyou521\nfuckyou88\nfuckyou888\nfuckyouall\nfuckyouass\nfuckyoubaby\nfuckyoufuckyou\nfuckyouman\nfuckyour\nfuckyourmother\nfuckyouyou\nfudan2000\nfudandaxue\nfudanfinance\nfudefengjing\nfuermosi\nfufangfree\nfufudezheng\nfugaoyang\nfuhongxue\nfuhui123\nfuhuojie\nfuji0229\nfuji3420\nfujiaminbca\nfujifilm\nfujifuji\nfujingjing\nfujinlong\nfujisaki\nfujisyusuke\nFujiwara\nfujixerox\nfujunqiang\nfujunsex\nfujunyan\nfuleilei\nfuli0215\nfulian303\nfuliming\nfulinfeng\nfullhouse\nfun520520\nfunction\nfunnyface\nfunshane520\nfunshion\nFuoYu0Tb65\nFupYuxTa65\nFupYuxTa66\nFupYuxTb66\nFupYuxUb66\nFupZuxUb66\nfuqin661126\nfurongjiejie\nFURUIDA000816\nfushiwei\nfushizhoukan\nfutingting\nfuture76\nfuwengwang\nfuwenjun\nfuwufuwu123\nfuxiao0701\nfuxiaobao\nfuxiaoli\nfuxinbo0305\nFUXINBO2008\nfuxinbo35\nfuxinbo520\nfuxuankai\nfuxueranshao\nfuyanchao\nfuyanfuyan\nfuyang429\nfuyanmin8888\nfuyufuyu\nfuyun6060\nfuzamima\nfuzhiwei\nfuzhuang\nfvbsdgdgdbd@126.\nfvcfvcdd\nfvsergtwsthw@126\nfvvv1827\nfw123456\nfw123coler\nfw19851111\nfwf5684256\nfwj060122\nfwsrtdsyttyfdy@1\nfwxueinng\nfwy843012\nfwyswan123\nfwywoaini\nfx820824\nfxb19870305\nfxb520520\nfxcljftfzj\nfxdilk4e\nfxf@hieway\nfxlevi0083\nfxm520fxm\nfxtxzcdj\nfxy123456\nfxy970509\nFY06P46327\nfy123456789\nfy18955867527\nfy200632\nfy440asd\nfy5201314\nfy819700\nfy83178688\nfy840101\nfyc8572306\nfycslove\nfyfyfy83\nfyh152535755\nfyj198793\nfyjhcfjg\nfyoufyou\nfyq711026\nfyt111111\nfytx9i8wsz\nfyue1167\nfywmh####@\nfywnaner\nfyx19780222\nfyygxnjd\nfyytw163\nfz123456\nfz282109\nfz5814390\nfzdcaojie978209\nfzdjii5h\nfzj810611\nfzjlfb50\nfzqkxeqm\nfzs900505\nfzx835123\nfzydlfll\nfzydyzdy\nfzyz3435\nfzz550709871103\nG00DLUCK\ng1234567\ng12345678\ng123456g\ng1314520\ng13916055158\ng147258369\ng19860320\ng1989212sd\ng19941203452g\ng1VdxgkBup\ng1y9z6j9\ng2e1dqwas21\ng2q8i9u8\ng2VdxgkBup\ng2WdwgkBuq\ng2WdwgkCuq\ng2WdxgkBuq\ng3030535\ng412j412p\ng462791q\ng483z567g\ng4HgzjpGzu\ng4HgzjpGzv\ng4HgzjpHzv\ng4jw9z6l17\ng50268fj\nG5201314\ng5GgzjpHAv\ng5GgzjpHzv\ng5HgzjpHzv\ng75s94ntm5\ng75s94otm5\ng76t94otm5\ng76t94prm4\ng76t95otn5\ng76u94prm4\ng7777777\ng86t95otn5\ng86t95otn6\ng86t95ptn6\ng86u94prm4\ng86u94prn4\ng86u94psn4\ng86u94psn5\ng86u94qsn5\ng86u95qsn5\ng87ua5qsn5\ng87va5qsn5\ng978213ui\nga123456\ngacktgackt\ngadabout\ngagagaga\ngaibianba\ngaibianziji\ngaimimale\ngaishanmingyun\ngaiwodeai\ngalechan\ngallardo\ngame123456\ngame2001\ngamegame\ngamegirl\ngamegogo\ngamehelp\ngameking\ngamelazy\ngamelife\ngamemaster\ngameplay\ngametradeking\ngamin8275\ngan123456\ngan328329\ngan6630792\nganegane\nganendexin\nganfei202\ngang123456\ngang2008\ngangchen\ngangjian\ngangjun521\ngangqiang\ngangzi6360\nganjiachao\ngankai021\nganlanshu\ngannianshien\nganniniang\nganqi5745.\nganshenme\ngantianaiziji\nganwomei\nganxieshen\nganyang13\nganyu123\ngao*/*/985wei\ngao080107\ngao1103fei\nGAO11BAN\ngao123123\ngao12345\ngao12345678\ngao2158650\ngao2huashi\ngao338688\ngao34643448\ngao36ban\ngao5201314\ngao582433\ngao8jian\ngao960328\ngao9706041\ngaobo2009\ngaobosong\ngaochang\ngaochao431\ngaocheng\ngaochong\ngaochuan\ngaodabing\ngaodanxuan\ngaofei123\ngaofeng123\ngaogaigar\ngaogao123\ngaogao520\ngaogaogao\ngaogaoxingxing\ngaohaibo\ngaohaitao\ngaohongbo\ngaohongyan\ngaohui619916\ngaojiang\ngaojianhg\ngaojianing\ngaojie1986\ngaojiehelu\ngaojing123\ngaojing521\ngaojinhui\ngaojufang\ngaojunjie\ngaokanxu\ngaolegao\ngaoli111\ngaoliang\ngaolijuan\nGaolingling\ngaoming123\ngaonaihan\ngaopeng003\ngaopengfei\ngaopogaopo\ngaoqiong\ngaoshan123\ngaoshang\ngaoshanke585770\ngaoshanliushui\ngaosheng\ngaoshijie\ngaoshuai\ngaoshuang\ngaosuhong\ngaowei0923\ngaowei520\ngaowei547025005\ngaoweiwei\ngaowentao123456\ngaoxiaofei\ngaoxiaoyu\ngaoxiong\ngaoyan123\ngaoyan1979\nGAOYAN520\ngaoyanan\ngaoyang123\ngaoyayuan\ngaoyifan\ngaoyiren\ngaoyuan6647503\ngaoyuanyuan\ngaoyunfeng\ngaozheng\ngaozhijun\ngaozhiping\ngaozhiqiang\ngaozhiwei\ngaozhong\ngarden7094\ngardenia\ngarnett21\ngary791106\ngarygary\ngascoigne\ngatekeeper\ngathering\ngavid807\ngavin2009\ngb123456\ngb206mvpccc\ngb980834\ngba123456\ngbd288322\ngbj51329669\ngblkkkka\ngbxlyf21\ngbyh1029\ngbzhugbzhu\ngc123456\ngc28399285\ngc710325\ngc8396168\ngcb418983\ngcb99105017\ngcc123456\ngccdalian\ngcdbiwang\ngchild99\ngcsys3102\ngd123456\ngd20036508\ngd241568\nGD3487828\ngd529640g529d\ngd61249522\ngdah197874\ngdb1207gdb\ngdcqysgdcqys\ngdd@1991\ngddpc808\ngddrskcd\ngdgdgany\ngdgdmqc123\ngdgdshnwq\ngdghfqcc\ngdgqj0763\ngdid19741129\ngdidpyaq\ngdivsnod\nGDJ750918\ngdrfds820118\ngdsgsadgse@126.c\ngdwb798200\ngdweb888\ngdx801229\nge123456\nge500002\nge5454gjh\ngebenhagen\ngebin1982\ngedoujia\ngee012489\ngeefull522\nGeforce4\ngege123456\ngege520rong\ngege871228\ngegeaini\ngegegege\ngegemeimei\ngeguoqing\ngehuaghbn\ngehugang\ngehugang521367\ngeiwoganjue\ngeiwogun\nGEIWONIDEAI\ngejinrong\ngeld1686\ngeli12315\ngelianghao\ngemengying\ngemini0529\ngeminibonbon\ngeminisaga\ngene&yuyl\ngenerosity\ngeneyonyhudt\ngeng840209\ngengbiao\ngengchao\ngengchen\ngengchul69\nGENGGENG\ngengjian\ngengliang\nGENGMING\ngengpeng\ngengqiang\ngengqingping\ngengshaowei\ngengu5000\ngenius123\ngenius58\ngenius89\ngeniusboy\ngeniuses\ngeniusgenius\ngentleman\ngeography\ngeorge901109\ngerenbin\ngerenyinsi\ngerenyinsi007\ngerrygerry\ngeruhui1977\ngeshan123\ngeshuang\ngesoriti\ngessler38.\ngexiaopei\ngexiaoyan\ngf123456\ngf123456789\ngf19881112\ngf33326645\ngf87654321gf\ngfaaet634\ngfapple770929\ngfc610322\ngfdree71\ngfdsa123\ngfdsa1234\ngfdsa12345\ngfdsahjkl\ngfdsahjklm\ngff34513451\ngffgfgf33\ngfhuang2004\ngfitxidt\ngfjrghfjk\ngfq87963\ngfr189404\ngfs311264\ngft123456\ngfuk235486@qq.co\ngfzy5814280\ngg000000\ngg001618\ngg032520\ngg112233\ngg123123\ngg1234567\ngg123456789\nGG1985913\ngg23768568\ngg24632026\ngg5201314\ngg5211314\ngg611014858\ngg666666\ngg730305\ngg7758521\ngg841118\nggb427hf\nggfttyhgfgfr\nggg123456\ngggcffpgy\ngggfdfe103\ngggfengle\ngggg0316\ngggg1111\ngggg81116\nggggggggg\ngggggggggg\ngggggggggggg\ngggggggggggggggg\nggggghdyga\nGGGGHHHH\nggggmkkk\ngggguthpiw\nggggyyyy\ngggjjjgggjjj\ngggmcwxf\ngggmqj880116\ngggqbpiq\ngggwcwdgtg\ngggyniia\nggjjddmm\nggjjggjj\nggjjzhzz\ngglovejj\nggpm4qrf\nggpx123456\nGGQ15277178918\nggseomima\nggstddup\nggxia4060\nggyy123456\nggyy1314\nggyyggyy\nGH123456\ngh3952162\ngh525706\nghaiziji\nghb123456\nghb163sp\nghb780618452\nghb821219\nghcsqt11\nghh5446964*#gyf\nghj123456\nghj15935596788\nghlx4331\nghost007\nghost113\nghost123\nghost426\nghost520\nghost730\nghost911\nghostboy\nghostdestd\nghostghost\nghostkey\nghostking\nghostprince\nghostrose\nGHSGX719\nghtdgfg726\nghtyn123\nghw123456\nghx_lxzy\nghy123456\ngi3kemak\ngiancana\ngianluca\ngianluigibuffon\ngiant740\ngigabyte\ngigi0325\ngigi091020\ngigi87226jay\nGIGIGIGI\ngigijojo\ngigileung\ngigilove\ngigiwhay\ngiller12\ngillette\ngillgill\ngillian0121\nGillian520\ngillianchung\nginobili\nginwhite\ngiordano\ngirl1234\ngirl1985\ngirlGIRL\ngirllove\ngiselebbmio\ngivemeakey\ngivemeall\ngivemefive\ngivememoney\ngj112233\ngj123456\ngj126114\ngj5201314\ngj529311\ngj7991912\ngjg5201314\ngjggtutgyt\ngjhayf45\ngjhftijftjf\ngjhkl1980\ngji654123\ngjk4819551\ngjlztt123\ngjm5024975\ngjp8160954\ngjwgjwgjw\ngjya880815\ngjyhaohao\ngjz775168\ngk123456\ngklmswxz\ngl123123\ngl123456\ngl1818ga\ngl89puxz\ngladiator\ngladiola\ngladyser\nglcaofirst\nglf49239575\nglittering\ngll213000\ngllszsby\nglobalview\nglorious\nglorytogod\ngltt1234\ngly123456\ngly19681019\ngly6667115\nglycaonima\ngm123456\ngm126109\ngm5201314\ngm865017\ngmacrtwam\ngmagmd0606\ngmail.com\ngmailcom\ngmailgmail\ngmailok8551\ngmajgywg\ngmf19831212\ngmisadog\ngmj007007\ngn123456\ngndhjdtjruk@126.\ngnefaijuil\ngnet1234\ngniynehc\ngniyytterp\ngo123456\ngo2usa02aug04\ngo6120395\ngo810264\ngo95.com.cn\ngoabroad\ngoalgoal\ngoba1111\ngod19811013\ngod516538\ngod99999\ngodbless0227\ngodblessme\nGodblessme1989\ngodblessus\ngodblessyou\ngodchild\ngoddamnit\nGODGODGOD\ngodgundam\ngodisagirl\nGodisdog\ngodloveme\ngodsaveme\ngodspeed\ngodwithme\ngogio2003\ngogo1314\ngogocat2023080\ngogogo11\ngogogo123\ngogogoalalal\ngogogogogo\nGOGOJIAYOU\ngogopass\nGOGOsiji\ngogostudy\ngohu997391\ngojackie\ngold1234\ngold771160\ngoldapple\ngolddoor\ngoldeneye\ngoldengate\ngoldenox21\ngoldgemini\ngoldlion\ngoldsink\ngoldstar\ngoldtree\ngoldzccom\ngomeyangyi.com\nGoMorita\ngonewind\ngonewiththewind\ngonewithwind\ngong1111\ngong1234\ngong123456\ngong1982\ngong1983\ngongbin1001\ngongchandang\ngongchang\ngongchao\ngongchen\ngongcheng\ngongchengshi\ngonggong\ngonghang\ngongjian\ngongjing\ngongjuan\ngongliang\ngongling\ngongming\ngongpeng\ngongping\ngongqian\ngongqing\ngongshang\ngongshe2010\ngongsunwulou\nGONGteng\ngongtengxinyi\ngongting\ngongwuyuan\ngongxian\ngongxiang\ngongxini\ngongxuan\ngongyesheji\ngongying\nGONGYONG\ngongyuan\ngongzhen\ngongzheng\ngongzhu123\ngongziqiao\ngongzuo123\ngongzuo2009\ngongzuo520\ngongzuomima\ngongzuoshi\ngongzuoyong\ngonzoopera\ngoo10002\ngood000123\ngood0303\ngood1234\ngood12345\ngood123456\ngood1982\ngood2000\ngood2001\ngood2006\ngood2008\ngood2009\ngood2010\ngood2luck\ngood4now\ngood8683227\ngood9999\ngoodbaby\ngoodball\ngoodbetter\ngoodboy1\ngoodboyy\ngoodbyemylove\ngoodcrm2009\ngoodfriend\ngoodfuture\ngoodgame\ngoodgoodstudy\ngoodhome\ngoodhope\ngoodidea\ngoodlife\ngoodlike\ngoodlove\ngoodluck1\ngoodluck123\ngoodluck2008\ngoodluck2009\ngoodluck2010\ngoodluck99\ngoodluckme\ngoodlucktoyou\ngoodlucky\ngoodmood\ngOoDmOrInG\nGOODMORNING\ngoodname\ngoodness\ngoodness0211\ngoodnew1234\ngoodnews\ngoodnight\ngoodsoft\ngoodstudy\ngoodsystem\ngoodtime\ngoodtimes\ngooduser\ngoodwaysi\ngoodwell\ngoodwill\ngoodyear\nGoogle002\ngoogle123\ngoogle2008\ngoogle97\ngooglebai\ngooglebaidu\ngooglecamp\ngooglecat\ngooglegoogle\ngooglemath\ngoogless\ngoogletester\ngooglexjtu\ngoose805805\ngopassed\ngore2008\ngospursmanu20\ngossipgirl\ngoto2008\ngotoplay\ngotoschool\ngotoshop\ngototianya\ngou6220225\ngou79212\ngoudan520\ngougou520\ngougou9332\ngougougou\ngougourourou\ngoukawuyou\ngousheng\ngoushi123\ngouxiong\ngovernment\ngowest0325\nGOWITHMYSELF\ngowithwind\ngowithyou\ngozo8888\ngp123456\ngp123456789\ngp189888\ngp820109\ngpgmppmm\nGPH2N89qif\nGPH2N89qig\nGPH2P89qig\ngq123456\ngq211179\nGQH2P89qig\nGQH2P89qjg\nGQH2P8aqjg\nGQH2P8arjg\nGQI2P8arjg\nGQI3P8arjg\ngr523413\ngr5660884\ngr790808\ngrace123\ngrace1983\ngrace1988\ngrace20011114\ngracedandan\ngraceful\ngracegrace\ngracehua\ngracelady\ngracelee\ngraceliu\ngracewang\ngraduate\ngraphics\ngravitation\ngraygot912\ngreat1111\ngreat123\nGreat2003\ngreatchina\ngreatgreat\ngreatlife\ngreatman\ngreatyang\ngreatytt\ngreen123456\ngreen1979\ngreenapple\ngreenblue\nGreenday\ngreendream\ngreenforest\ngreengirl\ngreengrass\ngreengreen\ngreening\ngreenland\ngreenleaf\ngreenlight\ngreenme123\ngreenriver\ngreensea\ngreensnake\ngreenspan\ngreentea\ngrhsyghl\ngrosvenor\ngroupshoes\ngrsb613723\ngrthwrsrkjds@126\ngryan114\ngs.7867553\ngs123321\ngs123456\ngs19811013\ngs2516zh\ngs6804060\ngsau0059\ngsbergsber\ngsdf3252\ngslove0409\ngsn926476wan\ngss542856\ngssdf3252\ngssh2008\ngsy232317\ngsyps123\ngszj7271\ngt123456\ngt141314\ngt5929282\nGT5URET6E\ngtgggggggg\ngtj_904759\ngtszylcd\ngtt841343\ngu123456\ngu730630\nguaibaobao\nguaidandan\nguaigmao7706\nguaiguai2\nguaiguai520\nguaiguai521\nguaishou\nguan1111\nguan1234\nguan123456\nguan1987\nguanaochao\nguanbin999\nguanbinbin\nguanchao\nguancheng\nguancong\nguanda123\nguanda456\nguanda456789\nguandong\nguanfeng\nguang123\nguang123456\nguang1986\nguang1987\nguang2008\nguang520\nguang521\nGuang8288\nguangdong\nguangfeng\nguanggao\nguanggun\nguanghua\nGUANGHUA1TY\nguanghuas\nguanghui\nguanghuisuiyue\nguanghxy0863jing\nguangjian\nguangjiao\nguangjun\nguangliang\nguanglong\nguanglun\nguangmang\nguangmei\nguangming\nguangming09\nGUANGping\nguangrong\nguangrui\nguangsha\nguangshan\nguangsheng\nguangsu168\nguangtou\nguanguan\nguanguan19860822\nguangwei\nguangxian\nguangxin\nguangyang\nguangyi4466\nguangyin\nguangying\nguangyuan\nguangzhou\nguangzhouhuixia\nguangzhouyuer\nguanhua917\nguanjian\nguanjing\nguanliang\nguanlijuan\nguanling\nguanmiao\nguanping\nguanquan\nguanshan\nguansheng\nguanshijie1280\nguanshiyin\nguanshuai\nguanshui\nguanshui123\nguanta3721\nguantang\nguanting\nguanxian\nguanxiao\nguanxinbaggio\nguanyang\nguanying\nguanyong\nguanyuan\nguanyunru\nguanzhong\ngudan1314\ngudanbalei\ngudubuku\ngududeren\ngudujian\ngudujianke\nguerlain\nguessguess\nguessing\nguessnone\nguesswhat\nguestguest\nguestyes123\ngufeiyan\ngugepinyin\nguguan1010\nguguibin\nguhfcufnhc\nguhongliang\ngui1$aiGUI\ngui12345\ngui123456\nguide986\nguidongxi\nguigui123\nguigui66\nguiguigui\nguijiamaoyi\nguikai5900486\nguiliheye\nguilin0773\nguiqiang\nguiqulai\nGuitar06\nguixi197752\nGUIXIANG\nguizhong\nGuiZi2008\ngujiajia\ngujiangang\ngujicuowu\ngujishouji\ngukai025\ngulestaiwan\nguliang19861011\nguliguli\ngumuxiyang\ngunba007\ngundam00\ngundam0079\ngundam0083\ngundam123\nGUNDAMGUNDAM\ngundamseed\ngundamwing\ngundan0412\nGUNNIMADE\ngunramp6\ngunsnroses\nguo.001225\nguo12345\nguo123456789\nguo198921\nguo2007abc\nguo50222\nguo860818\nguobaojian\nguobiaoli\nguochan007\nguochang\nguochen627\nguocheng\nguochuan\nguochucan\nguodanni\nguodanpi\nguodegang\nguodong520\nguofen1988\nguofucheng\nguoguang\nguoguo123\nguoguo1988\nguoguo22\nguoguo520\nguoguo521\nguoguo88\nGUOguoGUO\nguoguolige\nguohaibo\nguohaiyan\nguohanjun\nguohongbo\nguohongyan\nguohua123\nguohua520\nguohuijun\nguohuimin\nguojhgogo\nguojia123\nguojia520\nguojialin\nguojian123\nguojianbo\nguojiang\nguojianhua\nguojimilan\nguojinan\nguojing123\nguojing520\nguojingjing\nguojingming\nguojiwei\nguojj1112\nguojun1980\nGUOJUN520\nGUOjunjie\nGuojunxian001gjx\nguoke73151025\nguokeeryi\nguokeyzg\nguolicheng\nguolizhen\nguolong849\nGUOLUGUOLU\nguoluren\nguolv1314\nguomeili\nGUOMINGFENG\nguoqi123\nguoqihaoda\nguorui123\nguoshanshan\nguosheng\nguoshijie\nguoshijun\nguoshuai\nguoshuang\nguotao123\nguowei123\nguoweiwei\nguowenjing\nguoxiang\nguoxiaodong\nguoxiaoke\nguoxiaoyu\nguoxiliang\nGuoxin123\nguoxinad\nguoxiong\nguoxuguang\nguoyanan\nguoyanyan\nguoyuehong\nguozheng\nguozhenyou\nguozhilongalon\nguozhiqiang\nguozhong\nguozhouwind\nGuoZu0tb65\nGuoZu0tb75\nguozx21389ASD\ngupiaosimu\nGupZu0tb75\nGupZu0tb76\nGupZuxUb66\nGupZuxUb76\nGupZvxUb76\nguqiang007\nGuqZvxUb76\ngushiheima\ngutentag\ngutianle\nguxi1986210\nguxiang1989\nguxinghan1226\nguxinglei\nguyanyoulan\nguyingliansi123\nguyuxiali\nguzhengqi\nguzhihua\ngvdfg48789\nGvpAv0tc76\nGvqJvxVb76\nGvqZvxUb76\nGvqZvxVb76\ngvwuogfa\ngw123456\ngw4277815\ngw640618\ngwendoline\ngwrek430\ngwvtvvfb\ngww830811\ngwwyd1029\ngwxing123\ngx123456\nGX1314520\ngx543200\ngx619617\ngxau1eyd\ngxcmyrb2007\ngxd510510\ngxf5081011015\ngxfc2009\ngxl123456\ngxnuhuyi\ngxp554364946\ngxphgxphgxph\nGXQS15807012858\ngxtdh3658\ngxy111111\ngxy741741\ngxy861214\ngxy890721\ngy111111\ngy123456\ngy123456789\ngy1314520\ngy1666666\ngy198614\ngy198693\ngy19960125\ngy19960125GY\ngy222222\ngy810304\ngyb123456\ngyc123456\ngyc520627\ngyc571213\ngycxdbtx\ngyf123456\ngyfylys0105\nGyfyy0321\ngyh0inging\ngyl01252\ngyl123456\ngyl54321\ngyn549527\ngyq123456\ngysbw12345\ngyt780527\ngytlh123\ngyw13976308586\ngyx123456\ngyy101081\ngyy5689305\ngz111111\nGZ123456\nGZ123456789\ngz123654\ngz987654321\ngzc105105\ngzfgamfe\ngzfgd196300\ngzgigzgi\ngzgzgzgz\ngzmscctv168\ngzs82983826\ngzslwddhjx\ngzwnmn05291008\ngzx040485229\ngzxwhcct\ngzy123456\ngzy2966375\ngzzps888\ngzzz1138\nh072245e\nh1111111\nh123123123\nh123456h\nh1234b1234\nh123698745\nh1314520\nh1653210591115\nH19711971\nh1977g819\nh197900s\nh19830627\nh19830825\nh19860212\nh1987103\nh1990316\nh1e0n2g4\nh1h2h3h4\nh1i5t0n3\nh1UcyfjAtp\nh1VcxfjBup\nh1VcyfjAtp\nh1VcyfjBtp\nh1VdxgkBup\nh209425y\nh23698745\nh2oloveice\nH319xykq\nh3385918\nh4HgAinGzu\nh4HgAipGzu\nh4HgzipGzu\nh4HgzjpGzu\nh4IfAinGyu\nh4IfAinGzu\nh4IgAinGzu\nh5211314\nh56yh56y\nh5706355\nh616926g\nh6s5q4543\nh721120f\nh761120h\nH7758258\nh7777777\nh78hr6d4\nh86t95ptn6\nh86u95ptn6\nh86ua5pto6\nh86ua6ptot\nh86ua6qtot\nh87va5qsn5\nh87va5qtn5\nh87va5qtp5\nh87va5qtp6\nh87va5rtp6\nh88888888\nh89647426\nh8u7a9y2a5\nh8y40012\nh963852741\nh97va5rtp6\nh97va6rtp6\nh97wa6rtp6\nh97wa6rup6\nh97wa6ruq6\nh987654321\nh99999999\nha123456\nhaaping66\nhaby1366\nhack123456\nhackbase\nhacker001\nhacker007\nhacker008\nhacker123\nhacker2008\nhacker520\nhackergh\nHACKERHACKER\nHackingToolz\nhackkuang\nhades123\nhadesjun\nhadiyeye\nhagendasi\nhaggangin\nhagongda\nhaha0713\nhaha123123\nHAHA1234\nhaha12345\nhaha2008\nhaha2009\nhaha8024\nhahadaxiao\nhahaha123\nHAHAHAHAHA\nhahahehe\nhahahuhu\nhahajing\nHAHAKING\nhahalala\nhahalong\nhahawang\nhahawoaini\nhahaxiao\nhahaxixi\nhahayuyu\nhai1wen2\nhai5201314\nhai5211314\nhai654321\nhai800120zyj\nhai897897\nhaibaraai\nhaiBO123\nhaicheng\nhaichong\nhaichong00.\nhaichuan\nhaidaopaopao\nhaidenver\nhaier123\nhaier990818\nhaierhaier\nHAIFEISI\nhaifeng0\nhaifeng123\nhaifeng3\nhaiguang\nhaihaihai\nhaihaoma\nhaihuang\nhaihun19871228\nhaijiang\nhaijun123\nhaikediguo\nhaikuotiankong\nhailan..\nhailang123\nhailanlan\nhailanse\nhailiang\nhailin123456\nHaiLing715\nhailiu19690126\nhailong123\nhaimei521\nhaimenwuzhi\nhaimianbaobao\nhaimo315\nhaina8712\nhainabaichuan\nhainan0898\nhainan123\nhainan123456\nhainan200\nhainan23a\nhainan66277268\nhainan888\nhainanchangjiang\nhainandao\nhainanhuatian\nhainanren\nhaiqiang\nhaisea99\nhaishang\nhaisheng\nhaishiaini\nhaishiainijiao\nhaishiwo\nHAISHIzhaofei1.\nhaitao123\nhaitao1986\nhaitian0\nhaitianccm\nhaiwei123\nhaiweisijia\nhaixia.com\nhaixia123\nhaixia521\nhaixiang\nhaixiong\nhaiyan123\nhaiyan520\nhaiyang123\nHAIYANG198781\nhaiyang521\nhaiyangzhixin\nhaiyantt\nHaiyieyan\nhaiyue520\nhaizeiwang\nhaizhilian\nhaizhizi\nhaizhong\nhaizhongs\nhaizhuang3631\nhakkinen\nhakulamatata\nhakunamatata\nhalaolao\nhaleyhyp\nhalf8012\nhalflife\nhalfmoon\nhalibote\nhaliluya\nhalingna\nhalisicarol\nhalleluja\nhallelujah\nhalou007\nhaloua1234\nhamasaki\nhamburger\nhame548586\nhan071025\nhan12345\nhan123456789\nhan125263\nhan1965812\nhan19821013\nhan198911\nhan5201314\nhan7758521\nhan810109\nhan8633629\nhan8838107\nhan968508\nhanaili425\nhanamichi\nhanbaobao\nhanbijun_06\nhanbing083\nhanbing33\nhanbing520\nhanchang\nhanchao123\nhanchen1987\nhancheng\nhanchuan\nhandanct\nhandandm\nhandanwoaini\nhandaojushi\nhandawei\nhandhand\nhandinhand\nhandong1\nhanDONG123\nHANDSAME\nhandshow\nhandsomeboy\nhandsomenie\nhaneck13\nhanew12345\nhanfeizi\nhanfeng123\nHang9zhou\nhangcheng\nhangeng0209\nhangeng19840209\nhangeng2007\nhangeng520\nhangeng521\nhangenuk\nhanghaijia\nhanghang123\nhangtian\nhangtian8\nhanguang\nhanguo612\nhanguowawa753\nhangzhou2009\nhanhan0121\nhanhan123\nhanhan123456\nhanhan520\nhanhan521\nHANhan918\nhanhanhan\nhanhanlove\nhanhanyan\nhanhaoniao\nhanhua004\nhanjianan\nhanjiang\nhanjiangxue\nhanjiaqi\nhanjingjing\nhanjun123\nhanjuzaixian\nhankyung\nhanliang\nhanlimin\nhanlin123\nhanlint123\nhanliping\nhanmengaa\nHANNIBAL\nhanqiang\nhanqiang123\nHANQIAO111\nhanrui3699\nhans1006\nhansha829\nhansheng\nhanshuai\nhanshuang\nhanwei123\nhanweiwei\nhanwudadi\nhanxb001\nhanxi2003\nhanxiang\nhanxiangyuan\nhanxiao123\nhanxiaohua\nhanxiaohui\nhanxiaoyu\nhanxintong\nhanxinyu\nhanxiucao\nhanxu123\nhanxy626\nhany2008\nhanyang123\nhanyu123\nhanzaixi\nhanzhen123\nhanzheng\nhanzhong\nhao1111111\nhao123123\nhao123321\nhao123com\nhao123hao\nhao123hao123\nhao13456\nhao14378457\nhao147258\nHao1Peng5Y\nHao1Peng5You\nhao258369\nhao4444hao\nhao456789\nhao518890\nhao527349\nhao527388\nHao7758521\nhao841218\nHAO880880\nhao971215\nhaoareyou\nhaobao888\nhaobaobao\nHAOBUHAO\nhaocheng\nHAODE123\nhaoer520\nhaohaidong\nhaohao111\nhaohao520\nhaohao521\nhaohaoai\nHAOHAOAINI\nhaohaoaiwo\nhaohaoaiwo1018\nhaohaochi\nhaohaode\nhaohaogongzuo\nhaohaoguo\nhaohaohuo\nhaohaohuozhe\nhaohaonuli\nhaohaoshenghuo\nhaohaoxue\nhaohaoxuexi123\nhaohaozuoren\nhaojia0828\nhaojiang\nhaojiejie\nhaojiubujian\nhaokan123\nhaoku268268\nhaolaiwu\nhaolaogong\nhaolaopo\nhaoliang\nhaomafan\nhaomeidemama\nhaomeimei\nhaoming1114\nhaonan520\nhaonaner\nhaonaner07\nhaonanren\nhaonvhai\nhaonvren\nhaoqiang\nhaoqibaobaomay\nhaoqiujunziwmzy\nhaor200808\nhaoren123\nhaoren2009\nhaoren888\nhaorenhao\nhaorenpingan\nhaorenyige\nhaoshi777\nhaoshijie\nhaoshuai\nhaoshuang\nhaotaoyou\nhaotianqi\nhaotianya\nhaotingo\nhaowan123\nhaowangg\nhaowen22\nhaowuliao\nhaoxiang\nhaoxiaozi\nhaoxinqing\nhaoxiongdi\nhaoxuesheng\nhaoyangmao\nhaoyanli\nhaoyouduo\nHAOYUE840302\nhaoyuhui19701226\nhaoyumen\nhaoyun167\nhaoyun2008\nhaoyun2009\nhaoyun2010\nhaoyun99\nhaoyunlai\nhaoyunqi\nhaoyuping\nhaoyutou1314\nhaozhang\nhaozhu1986\nhaozi123\nhaozi520\nhaozi521\nhaozihaozi\nhapaworld\nhapp2002\nhappiness82\nhappy000\nhappy001\nhappy007\nhappy0505\nhappy100\nhappy1013\nhappy109504\nhappy110\nhappy111\nHAPPY1123\nhappy121\nhappy1210\nhappy1216\nhappy1234\nhappy123456\nhappy125\nhappy1314184\nhappy13579\nhappy147\nhappy1622\nhappy168\nhappy1974\nhappy1978\nhappy1979\nhappy1981\nhappy1982\nhappy1983\nhappy1984\nhappy1985\nhappy1986\nhappy1987\nhappy1988\nhappy1989\nHappy2001\nhappy2002\nhappy2003\nhappy2004\nhappy2005\nhappy2006\nhappy2007\nhappy201358\nhappy333\nhappy365\nhappy366\nhappy4012\nhappy4ever\nhappy5201314\nhappy521\nhappy612\nhappy666\nhappy7210\nhappy777\nhappy789\nhappy828\nhappy888\nhappy895\nhappy911\nhappy923\nhappy999\nhappy9999\nhappyANGEL\nhappyapple\nhappybaby\nhappybear\nhappybird\nhappybirthday\nHAPPYBOY\nhappycat\nhappychen\nhappyday123\nhappyday1437\nhappydearbook\nhappydog\nhappydream\nhappyending\nhappyever\nhappyfamily\nhappyfantokel\nhappyfirst\nhappyfish\nhappyfly\nhappyforever\nhappyhour\nhappyhours\nhappyhrs\nhappyhrx\nhappying\nhappyjeery\nhappyjia\nhappyjoy\nhappyking\nhappylee\nhappyleilei\nhappylife\nhappyling\nhappylisa\nhappylove\nhappyluck\nhappylucky\nhappymajia\nhappyman\nhappymore\nhappyness\nhappynew\nhappyone\nhappypig\nhappysky\nHappysmile\nhappystar\nhappysun\nhappysun0909\nhappytianya\nhappytiger\nhappytim\nHappytime\nhappytoday\nhappytogether\nhappywen\nhappywmw\nhappywxy\nhappyxie\nhappyyan\nhappyyang\nhappyyeti\nhappyyou\nhappyzd161984\nharas8848\nhardaway\nhardship\nhardwork\nhare1120\nhare1301\nharebird\nharecn110\nhareluya\nharp1983\nharpgua02\nharry123\nharryharry\nhartmonk1980126\nharveyzhou\nhashida1994\nhatehate\nhatelove\nhattle0729\nhaveaniceday\nhaveatry\nhavy.6671817\nhawk2linai\nhawkhawk\nhaze1160\nhb131209\nhb8997913\nhbc218wjm\nhbj123456\nhbjltter\nhblovedjs\nhbq75187181\nhbq79337620\nhbsz8888\nhby123456\nhby19820905\nhby5201314\nhbzh2003\nhc006986853\nhc00850417\nhc123456\nhc401520\nhcd73828tsdl\nhcf1987122\nhch123456\nhch13312879028\nhchchchc\nhchwxjtiwns33321\nhcj123456\nhcj197938\nhcl123456\nhcl690828\nhcl9103251212\nhcm55755575\nhcxqazwsx\nhcy123456\nhcy13140915\nhcy971101\nhd122156\nhd123456\nHD198846\nhd5201314\nhdcs123456\nHDDJ12334\nhdf7264662\nhdgcxf780630\nhdj6024370\nhdjhdjhdj\nhdjhhdjh\nhdjysoft\nhdkj13452\nhdljdylzsx\nhdsngclfjz\nhdwlh159\nhdx761226\nhdy2571314\nhdzlywysxk\nhdzxs1982\nhe20060214\nHe333yan\nhe5201314\nhe655600\nhe8450518\nhe860310\nhe_751229\nheadshot\nheaiqian1314\nheart9999\nHEARTdiky549\nheaven123\nheaven916\nhebaodan\nhebe830330\nhebehebe\nhebei123\nhebeisheng\nHEBIANCAO\nheboquan\nheckerbo\nHECKLE521\nhedgehog\nhedyhedy\nheechul0710\nheejun23\nheejunmoon\nHEEROYUY\nhefan123\nhefei123\nhehaijun\nhehailong\nhehe1234\nhehe123456\nhehe1986\nhehe3172\nhehehaha\nheheyouhou\nhehongbo\nhehongyan0611\nheidan270\nheiguafu512\nheihei123\nheiheiha\nheiheihaha\nheiheihei\nheike3600\nheike5656\nheikediguo\nheilongjiang\nheimawangzi\nheimukai\nheineken\nheisehuiyi\nHEISEYOUMO\nheishehui\nheitianshi\nheitianshinana\nheixiaoff\nheizhizhu\nhejiabei\nhejiahuan\nhejiahuanle\nhejiajun\nhejialin\nhejian123\nhejianbo\nhejianfeng\nhejianhua\nhejianjun\nhejianwei\nhejie123\nhejie520\nhejiehejie\nhejingwei\nhejingyu\nhejinhua\nhejinlong\nhejunfeng\nhejunjie\nhejunxiang\nhekou777\nhekui850620\nhekun432928\nHELaure0706\nHELEN0155\nhelen123\nhelen2008\nhelen321\nhelen520\nhelen_1226\nhelenhelen\nhelenwang\nhelicopter\nheling1985\nhelinglei\nhelinling125\nhelipeng\nheliping\nhell12hell\nhell1984\nhellangel\nhellgate\nhellhell\nhello000\nhello001\nhello007\nhello110\nhello116\nhello12345\nhello123456\nhello168\nhello1984\nhello2000\nhello2002\nhello2006\nhello2007\nhello2008\nhello2009\nhello2010\nhello46589\nhello520\nhello5791\nhello8107\nhelloangel\nhellobaby\nhelloboy\nhellochina\nhellocsdn\nhellodearbook\nhellogirl\nhellogod\nhellojack\nhellojenny\nhelloketty\nhellokity\nHellolily1234\nhelloman\nhellonihao\nhelloooo\nhellorabby\nhellotianya\nhellowing\nHELLOWORD\nhelloyang\nhelloyou\nhellozplx120\nhellsing\nhellvien\nhellwolf\nhelly1982\nhelp1234\nhelpyourself\nhelu0824\nhelu3773\nheluohou\nhema940813\nheman2002\nhemei123\nhemingway\nhen111111\nhenaihenai\nhenan123\nhenanren\nhenansheng\nhenanxcren\nhenduoqian\nheng0703\nheng987104YUAN79\nhengcomt\nhengcomy\nHENGheguinan\nhenghua375267969\nhengshan\nhengsheng\nhengshui\nhengtian\nhengxing\nhengxinhai\nHENGyang\nhengyuan\nhenhao1999\nhenhenai\nhenhenhen\nhenianfu\nheniyiqi\nheniyiyang\nhenizaiyiqi\nhenjiandan\nhenkaixin\nhenmeili\nHennessy\nhenry#790725\nhenry1214\nhenry123\nhenry520\nhenry777\nhenryhenry\nHENXIANGNI\nhenxingfu\nheper1234\nheqingfeng\nhequan19830125\nhequhecong\nherat8210\nherbalife\nhere8901104\nhereisme\nherewego\nhereyouare\nhero0126\nhero1234\nhero123456\nhero1981\nhero1986\nhero19860126\nhero2000\nhero2009\nhero2613145\nhero5201314\nhero520an\nherobar1\nherohero\nherohome\nheroisme\nherolvhe\nherongxin\nheroruxpin\nherosong\nherotime\nherufeng\nheshangtou\nheshanshan\nheshuang\nhesitate\nhetao123\nhetao883721\nhetaoren\nhetherhu1978\nheut2008\nheven123\nhewego11\nhewei007\nhewei123\nhewei520\nhewei7826836\nheweidong\nheweihewei\nheweihua\nheweiwei\nheweiycl\nhewenjing\nhewenjun\nhewernever\nhewittandi\nhewubaisha\nhewuulan\nhexi1982\nhexiaobo\nhexiaodong\nhexiaogang\nhexiaohua\nhexiaolu\nhexiaoyu\nhexieshehui\nhexin123\nhexinhexin\nhexinyuan\nhexue8086\nhexuejie\nhey781110\nheyan520\nheyanheyan\nheyanhua\nheying123\nheyingying\nheyiyang\nheyoh10060go\nheyuanhua520\nheyuanman\nheyuanyuan\nheyufeng\nheyuheyu\nheyujiehlfwp2222\nheyuqing\nheyuxuan\nheyuying\nhezhihua\nhezhijun\nhezhiqiang\nhezilong\nhezixiao\nhezuqing\nhf123456\nhf13384332\nhf644023\nhf998602\nhfb123456\nhfdsh2101\nHfh7909817\nhfj056600\nhfnjqrvbw2\nhfp5503116\nhftyuma4hytjkyio\nhfyyalhy\nhg123456\nhg123456789\nhg19840209\nhg516888\nhg5201314\nhgaidflka\nhgbrush2009\nhgdbfgdhbdc\nhgdymnjxs\nhgfedcba\nhgg123456\nhgg1234567\nhggbkhgjhg@126.c\nhgh11603\nhgh123456\nhgj8839600\nhgkupqtd\nhgl1161639\nhglkicky\nhgq123456\nhgsthrytrhuu\nhgwzzlyc\nhgy123456\nhgz200361\nhh000000\nhh111222\nhh123123\nhh123321\nhh1314520\nhh19750107\nhh19881010\nhh3712381\nhh5201314\nhh520520\nhh562353111\nhh654321\nhh780708\nhh888888\nhh88king\nhh989999\nhhbb6812\nhhd33025251\nhhghq094167\nhhh12345\nhhh123456789\nhhh987ttcnscz\nhhhgxmz888\nhhhh8888\nhhhhhhhhh\nhhhhhhhhhhhhhhhh\nhhhhyyyy\nhhhlgq1026\nhhj123456\nhhj7758521\nhhj780806\nhhl19630905\nhhm721015\nhhp100100\nhhp805926\nhhrhhrhhr\nhhtdhome\nhhxxhhxx\nhhxxttxs1981\nhhxxttxsh\nhhxxttxx\nhhy12345\nhhy5201314\nhhy530530\nhhy741227\nhi123456\nhi28827j9\nhi654321\nhi794pub457\nhibarikyoya\nhibiscus\nhic92mcc\nhicom300\nhide1213\nhide2323\nhide9852\nhidehide\nhidetoshi\nhieepass\nhighhigh\nhighland\nHighlight\nhihi19870312\nhihihihi\nhihimine\nhihitaxi\nhiiqvt521\nhikari1826\nhikarunogo\nhikyoaaa\nhill123456\nhillhill\nHilllili\nhilllily\nhimalaya\nhiman222\nhimawari\nhin#11913\nhinet2006\nhingis930\nhinscheung\nhinter21\nhio81hs8\nhirainbow\nhit123456\nhit99control\nhitler1945\nhitravel\nhiwayyjy\nhiyan228\nhiyouhzg3*#\nhj000000\nhj11040208гб\nhj11040208\nhj111111\nhj123123\nhj123456789\nhj5201314\nhj647746hj\nhjb740313\nhjbb963852741\nhjc123456\nhjdnssdmm\nhjf123456\nhjgandlp\nhjh123456\nhjh19850911\nhjh6519878\nhjhj9988\nhjiaying\nhjj123456\nhjj65440616\nhjjhbbbb\nhjjpyg520\nhjk123456\nHJKL1234\nhjkl123456\nhjklh159\nhjklhjkl\nhjl123456\nhjm060184\nhjpfqkxw9c\nhjqlnhjqln\nhjr19850116\nhjs5533851\nhjsys1234\nhjt00000\nhjtsqfish\nhju22636\nhjx19851013\nhjx19870320\nhjx701106\nhjy123456\nhjy198200\nhjy60012891\nhjyy6681\nhjyz20031140062\nhjz123456\nhk123456\nhk123456789\nhk169hk169\nhk195888abc123\nhk1982727\nhk199771\nHk336699\nhk774307\nhk833981\nhk8464698\nhk987654\nhkg3t4l42e\nhkhk998998\nhkhzqsm12189510\nhklzlhkl\nhkny0229\nhkqy1210\nhkswyhwqaywc\nhktyzybwmxnq\nhky1987322\nhkyule30\nhl033798\nhl0411043\nhl111111\nhl1314520\nHl5201314\nhl770725\nhl780809\nhl8332910\nhl8520802\nhl88386275\nhl963712\nhlj123456\nHLL00000\nhll123456\nhll198589\nhlptangwen\nhlq123456\nhlx052585\nhly1111`\nhm123456\nHM123456789\nhm701026\nhm8682522\nhm871114\nhm880911\nhmh123456\nhmily0046\nhmily123\nhmily1314\nhmily1984\nhmily520\nhmily521\nhmilyhmily\nhmilymx1984m\nhmilyyang\nhmlovexx\nhmq881211\nhmyxzxhqny2009\nhmz1681001\nhn09gs26\nhn123123\nHn123456\nhn123456789\nhn197552hn\nhn2354679\nhn3495187\nhn432255\nhn67822605\nhna10175\nhnaqkdx123\nhnbcyrnd\nhnce123456\nhnchy5234477\nhnczjtyrbl\nhndlxh0214\nhndtfaps\nHNG2M89pif\nHNG2N89pif\nHNG2N89qif\nhngwghngwg\nHNGxM89pif\nhnj1234560\nhnjfr2009\nhnldxxee\nhnlgdx001\nhnlgdxllf\nHnlyee88\nhnuycc0102\nhnwltc332339\nhnxtulyj\nhnxvzheng\nhnym711201\nhnzjjsls123\nhohohoho\nhol3spot\nholdmyown\nholidays\nholiland\nHOLLYWOOD1017\nholyshit\nhome1234\nhome123456\nhome1985\nhome2008\nhome5211\nHOMEALONE\nhomehome\nhomeland\nhomeland12345\nhomepage\nhomerplayman\nhomesick\nhometown\nhomeworld\nhomo810812\nhonehone\nhoney123\nhoney1314\nhoney325738\nhoney520\nhoney521\nhoney7688\nhoneybaby\nHONEYHONEY\nhoneymoon\nhoneyMOONMOON\nhoneywell\nhong.hong\nhong023023\nhong11223344\nhong1234\nhong1314\nhong1314520\nhong1314521\nhong13233\nhong1982\nhong1983\nhong1984\nhong1985\nhong1986\nhong1987\nhong2007\nhong2008\nhong2009\nhong22yan\nhong2597758\nhong340510\nhong3453126\nhong3590150\nhong6344\nhong9090\nhonganczh\nhongbage\nhongbing\nHONGchao\nhongchen\nhongcheng\nhongchun\nhongdeng\nhongdong\nhongdounv\nhongfeng\nhonggang\nhongguang\nhonghaier\nhonghe123\nhonghegu\nhonghong123\nhonghu888\nhonghuige\nhongjian\nhongjiang\nhongjing\nhongjinlong\nhongkang\nhongkong1997\nhonglabi930\nhonglang\nhonglian\nhongliang\nhongling\nhonglong\nhongloumeng\nhongloumeng0301\nhongmeigui\nhongmeng\nhongmian\nhongmiao\nhongming\nhongnong\nhongpeng\nHONGPING\nhongpingguo\nhongqian\nhongqianbi456\nhongqiang\nhongqiao\nhongqing\nhongquan\nhongshan\nhongshang860407\nhongshao\nhongshaorou\nhongshen\nhongsheng\nhongshuangxi\nhongsong\nhongtai1233\nhongtashan\nhongtian\nhongting\nhongtong\nhongwang\nhongwei123\nhongwenfushi\nhongxian\nhongxiang\nHONGXIAO\nhongxing\nhongxing8\nhongxuan\nhongyang\nhongyang0515\nhongyanlao\nhongyi2010\nhongyi58\nhongying\nhongyisi\nhongyong\nhongyuan\nhongzhen\nHONGZHI=\nhongzhong\nhonolulu\nhony2511787\nhoodoozhang886\nhooligan\nhoopchina\nhop828ivy213\nhope2008\nhope2009\nhope7333\nhopefree\nhopehope\nhopeisgoodthing\nhopeless\nhopeness\nhorseman\nhospital\nhot123456\nHOT4ever\nhotel119\nhotforever\nhothot12\nhothothot\nhotkangta\nhotmail123\nhotmailcom\nhotnrgses\nhotwater\nhou123456\nhou19810930\nhou8872185\nhou9c98r\nhoudezaiwu\nhouhou0306\nhouhouhou\nhoujibofa\nhouliang\nhoulipeng\nhouqiang\nhousehao\nhoushuai\nhouxiang\nhouxiaoli\nhouxubest841121\nhouyanbing\nhouzhenzhong\nhouzi123\nhover520\nhow123456\nhow98woh\nhowareyou1\nhowareyou123\nHowbuy2007\nhowbuyjack\nhowcanido\nhowdoyou\nhowdoyoudo\nhowmissyou\nhowmuchiloveyou\nHp123456\nhp20081226\nhp5201314\nhp654321\nhp67327291\nhpcc1218\nhpdv2409\nHPG2N89qif\nHPH2N89qif\nhphw7675\nhpihpdhpihpd\nhplenovo\nhpprince\nHPronaldo\nhpwc3ta65g\nHpzntzen\nhq123456\nhq123456789\nhq8211991\nhqb5554433\nhqd76118\nhqm4239602\nhqm707365152\nhqnndqhhcczzxy\nhqtc2009\nhqy123456\nhr123456\nHr134rUi\nhr13974952453\nhr564413128\nhrggtlh159\nhrl19890527\nHRQ051929p\nhrs6983616\nhryhrtyujuwhu@12\nhs10248529\nhs12341234\nHs123456\nhS13908312567\nhs1ii2hu3ue4\nhs25856744\nhs410524\nhs4r956gg\nhs5201314\nhs619306\nhsbc1234\nHSC123456\nhsdwc007\nhseandhse\nhsgdkxkg$#\nhshouly1015\nhshshshs\nhsj123456\nhsj19871201\nhsjandlt\nhsnxuebin\nhsq123456\nhss911th\nhss911ty\nhsslxd721022\nhssmytygcs\nhsstd8kk\nhsw123456\nhsw159357\nhsw201284\nhsxy5290\nhsypty618\nhsyy27791111\nhsyycomcn\nht198402ht\nht31415926\nHT3605002\nht5201314\nhtaiao72\nhtbenet100\nhtc040511\nhTJL$BISuat%\nhtrgfhfs\nhtsz1234\nHTTJUNsoul\nhttp123456\nhttp19831010774\nhttp://blog.tian\nhttp://id.tianya\nhttp://www\nhttp://www.ruito\nhttp://www.tiany\nhttptianya\nhtxx19641234\nhtyrkshjly@126.c\nhu-5612690\nhu000000\nhu030714\nhu083716\nhu123123\nhu1314520\nhu1982xj\nhu19870808\nhu19911212\nhu222333\nhu429801\nhu5201314\nhu666666\nhu6862050\nhu690540067\nhu821125\nHu8875711\nhu915101\nhua111111\nhua12345\nHUA1314520\nhua199111250\nhua5217051\nhua8$79656\nhua84625\nhuabanxuan8385\nhuabi1982\nhuacaoqing170\nhuachang\nhuacheng\nhuadongligong\nhuaer84650\nhuafang123\nhuafeihua\nhuafeng796\nhuafengjiao\nhuaguang\nhuahao815\nhuahaoyueyuan\nhuaheshang\nhuahua123\nhuahua1234\nhuahua123456\nhuahua520\nhuahua521\nhuahuafei\nhuahuagongzi\nhuahuajia\nhuahuashijie\nhuahudie\nhuaigeaini\nhuaihaizi\nhuaihua0797\nhuailian\nhuainanhai\nhuainian\nhuaixiaozi\nhuaixuan1004\nhuaiyuan\nhuaizhong\nhuajia125310\nhuajia212\nhuajian0101\nhuajiandao\nhuajiang\nhuakaihualuo\nhuakaile\nhualiang\nhualingli7\nhuall198410\nhuamanlou\nhuamulan\nhuan123456\nhuan1987\nHUAN5201314\nhuanbing\nhuanbing18\nhuancai1973219\nhuancheng\nhuanfeng\nhuang000\nhuang0000\nHUANG001\nhuang007\nhuang009\nhuang0594\nhuang100\nhuang1013\nhuang1020\nhuang1026\nhuang110\nhuang111\nhuang1121\nhuang119\nhuang1212\nhuang1230\nHUANG12345\nhuang1314\nhuang1314xu\nhuang159\nhuang163\nhuang168\nhuang1977\nHUANG1978\nhuang1979\nHuang1980\nhuang1981\nhuang1982\nhuang1983\nhuang1984\nhuang1985\nhuang1986\nhuang1987\nhuang1988\nhuang1989\nhuang1990\nhuang2000\nhuang2001\nhuang2005\nhuang2006\nhuang2008\nhuang2009\nhuang2010\nhuang227\nhuang230\nHuang2718\nhuang321\nhuang369\nhuang456\nhuang485179\nhuang521\nhuang701\nhuang75585267\nhuang77102\nhuang789\nhuang8292\nhuang88671151\nhuang888\nhuang919\nhuang923\nhuang999\nhuangbao\nhuangbiao\nhuangbin\nhuangbinG\nhuangcan\nhuangchang\nhuangchen\nhuangcheng\nhuangcheng1614\nhuangchi\nhuangchong\nhuangchuan\nhuangchun\nhuangcong\nhuangcun\nhuangdai\nhuangdan\nhuangdearbook\nhuangdefeng\nhuangdh693\nhuangding\nhuangdong\nhuangdou\nhuangfan\nhuangfang\nhuangfei\nhuangfeifei\nHuangfen\nhuangfeng\nhuanggang\nhuanggua\nhuangguan\nhuangguang\nhuangguo\nhuanghai575887\nhuanghaibo\nhuanghaii\nhuanghaijun\nhuanghaiyan\nhuanghan\nhuanghang\nhuanghe123\nhuanghe520\nhuanghelou\nhuangheng\nhuanghong\nhuanghou\nhuanghuan\nhuanghuanghuang\nHUANGHUIQ\nhuanghun\nhuangjia\nhuangjiabin\nhuangjiagan\nhuangjiahui\nhuangjiaju\nhuangjiali\nhuangjian1\nhuangjiang\nhuangjianping\nhuangjiao\nhuangjiaqi\nhuangjiaxin\nhuangjiayi\nhuangjie59\nhuangjing520\nhuangjingjing\nhuangjinhua\nhuangjinJIA\nhuangjinrui\nhuangjinsheng\nhuangjinxin\nhuangjinzhu\nhuangjiu1990\nhuangjl520\nhuangjuan\nhuangjunkun\nHuangKan\nhuangkang\nhuangkedong\nhuangkui\nhuangkun\nhuanglan\nhuanglang\nhuanglei123\nhuangli123\nHUANGLI520\nhuangli86\nhuanglian\nhuangliang\nhuangliang520\nhuanglihua\nHUANGLIJUAN\nhuanglili\nhuanglin\nhuanglina\nhuangling\nhuangling0610\nhuanglini\nHuangLinLin\nhuangliping\nhuangliu\nhuangliwei\nhuangliwen\nhuangliying\nhuanglong\nhuangma50\nHUANGMAO\nhuangmei\nhuangmeiying\nhuangmeng\nhuangmiao\nhuangming\nhuangna871028\nHuangNan\nhuangnihao\nhuangning\nhuangniu\nhuangpan\nhuangpei\nhuangpeng\nhuangpengfei\nhuangping\nhuangqi1121\nhuangqi520\nhuangqian\nhuangqiang\nhuangqiao\nhuangqiao526\nhuangqilin\nhuangqin\nhuangqing\nhuangqiong\nhuangqiu\nhuangquan\nhuangqun\nhuangran\nhuangrihua\nhuangrong\nhuangrui\nhuangsan\nhuangsang\nhuangsanye\nhuangsen\nhuangsha\nhuangshan\nhuangshang\nhuangshao\nhuangsheng\nhuangshi\nhuangshiyu\nhuangshu\nhuangshuai\nhuangshuang\nhuangshufen\nhuangshun\nhuangshuo\nhuangsisi\nhuangsiyu\nhuangsong\nhuangtang\nhuangtian\nhuangting\nhuangtong\nhuangwang\nhuangwei520\nhuangweibin\nhuangweihua\nhuangwen\nhuangwenxu\nhuangxia\nhuangxian\nhuangxiang\nhuangxianzhi\nhuangxiao\nhuangxiaofeng\nhuangxiaohua\nhuangxiaojun\nhuangxiaomei\nhuangxiaoming\nhuangxiaoyan\nhuangxiaoying\nhuangxiaoyu\nhuangxijing\nhuangxing\nhuangxing1984\nhuangxiong\nhuangxixi\nhuangxuan\nhuangxue\nhuangxun\nhuangyajun\nhuangyali\nhuangyan123\nhuangyang\nhuangyang1314\nhuangyanhui\nhuangyao\nhuangyi123\nhuangyifan\nhuangyimin\nhuangyin\nhuangyity\nhuangyiyi\nhuangyou\nhuangyuan\nhuangyuanyuan\nhuangyue\nHUANGyueRONG17\nHUANGyueRONG3217\nhuangyuhua\nhuangyujie\nhuangyumao\nhuangyun\nhuangyunming\nhuangyuxia\nhuangyuyu\nhuangzhan\nhuangzhang\nhuangzhao\nhuangzhe\nhuangzhen\nhuangzheng\nhuangzhi\nhuangzhiming\nhuangzhiwei\nhuangzhong\nhuangzhou\nHUANGZHUO\nhuangzijie\nhuangzijin\nhuanhe458\nHuanhuan\nhuanhuan11\nhuanhuan123\nhuanhuan82\nhuanjian\nhuanjiea\nhuanjing\nhuanlegu\nhuanleyuan\nhuanling\nhuanlong\nhuanmeng\nhuanmima\nhuanpeng\nhuanpopo001\nhuanqian\nhuanqing\nhuanqiuof\nhuanting\nhuantong\nhuanxi789\nhuanxiao\nhuanxing\nhuanxiong\nhuanyingni\nhuanyoushijie\nhuanzi66\nhuanzi66.\nhuaqiang\nhuaqingqitue\nhuaqizhi\nhuashao19890412\nhuasheng\nhuashengmi\nhuashida\nhuatugou\nhuatujiaoyu\nhuawei1982\nhuawei2007\nHuawei2008\nhuawuque\nhuaxia123\nhuaxiang\nhuaxianzi\nhuayang123\nhuayangnianhua\nhuayicch\nhuayin2009\nhuayu01235\nhuayugs888\nhuayugs8888\nhuazaizai\nhuazelei\nHUAZHANG\nhuazheng\nhuazhong\nhuazi123\nhuazi2002\nhuazi520\nhubeicjh\nhubeidaxue\nhubeiren\nhubeiwuhan\nhubin1225\nhubin3101426\nhuchun1978\nhudan520\nhudandan\nhudeibufei\nhudie520\nhudiefei\nhudiehua\nhudiehudie\nhudx0508\nHUERJING119\nhufen0103\nhufenga0\nhufuqi0709\nhug123456\nhugoboss\nhuguohui\nhuha2006\nhuha945132068\nhuhailong\nhuhainan\nhuhaitao\nhuhaiyan\nhuhaiyang\nhuhang520\nhuhehaote\nhuhufree\nhui123456789\nhui1980peng\nhui19870924\nhui19930720\nhui37740240\nhui77hui\nhui815976\nhuibao88\nhuibo2010bbb\nhuicheng\nhuichufang\nhuidaoguoqu\nhuifeideyu\nhuifeiyanmie\nhuiguniang\nhuiguorou\nhuihaode\nhuihaohulian\nHUIHAOQILAIDE\nhuihuang\nhuihuang2008\nhuihui11\nhuihui123\nhuihui1234\nhuihui1314\nhuihui1983\nHUIHUI521\nhuihui727\nhuihuihui\nhuihuxidetong\nhuijia123\nhuijiale\nhuijiale999\nhuijkgtf10\nhuili123\nhuiliang\nhuilongguan\nhuiqiang\nhuiqiang512\nhuiseguiji\nhuisheng\nhuitailang\nhuitonghw\nhuixiang\nhuixie3379\nhuixiong\nhuiyiguoqu\nhuiyinglei\nhuiyongluo\nhuiyuewu\nhuizhang\nhuizhong\nhuizihuizi\nhujia123\nhujia1314520\nhujia520\nhujiacheng\nhujiahuwei\nhujian520\nhujianfeng\nhujianhua\nhujianhua1978\nhujianhuji\nhujianjia\nhujianling\nhujianping\nhujiawei\nhujie123\nhujie520\nhujieqiong\nhujingjing\nhujingtao\nhujingyu\nhujinhua\nhujinhuan\nhujintao\nhujun123\nhujunhao\nhujunjie\nhujunzou\nhukai123\nhulaquan\nhulayi23\nhuleizi137\nhuli123456\nhulijing\nhulijuan0811\nhuliming\nhulinbing\nhuling1104\nhulingbo\nhulk031too737\nhuluo007\nhuly123456\nhuman1026\nhuman123\nhumanman\nhumeiqiao\nhuminde1987\nhuming198669\nhumingming110423\nhunan123\nHUNAN98gl\nhunandaxue\nhunanpan\nhunanren\nHunDan123\nhundanhundan\nhunk107723\nhunt1128\nhunter001\nhunter119\nhunter123\nhunter751\nhunterhunter\nHUNZIYUHT\nhuo0080129012\nhuo123456\nhuodejingcai\nhuoguang\nhuojian520\nhuojianhua\nhuoliang\nhuolieqing\nhuoniao405\nhuoshangke\nhuoxingren\nhuoyan20\nhuoying1013\nhuoyingrenzhe\nhuoyuanjia\nhupengfei\nhuping123\nhuqingqing\nhuqinqin\nhushanshan\nhushanwen\nhushijie\nhushiwei\nhushuang\nhushuobadao\nhusong520\nhusthust\nhuting5241\nhutingting\nhuty1231\nhuwangbeibei5438\nhuwei123\nhuwei520\nhuwei521\nhuweijie\nhuweiwei\nhuwenbin\nhuwenjie\nhuwenjing\nhuwenjuan\nhuwenjun\nhuxianming\nhuxiaobo\nhuxiaodong\nhuxiaofei\nhuxiaofeng\nhuxiaohui\nhuxiaojun\nhuxiaolei\nhuxiaolong\nhuxiaoming\nhuxiaoping\nhuxiaoqing\nhuxiaowasa\nhuxiaowei\nhuxiaoyan\nHUXIAOYU\nhuxiaoyun\nhuxingwei\nhuxueyan\nhuxuwen19901112\nhuyan520\nhuyan770103\nHUYANBIN\nhuyang123\nhuyanhua\nhuyanyan\nhuyinghua\nhuyishun\nhuyou80832\nhuyoukuma\nhuyuan1990121\nhuyuanyuan\nhuyuefeng\nhuyujuan\nhuyunfei\nhuyunfeng\nhuyunyun\nhuyuting\nhuzhenhua\nhuzhigang\nhuzhihong\nhuzhijie\nhuzhijun\nhuzhiqiang\nhuzhiwei\nhuzihuzi\nhvivi6679\nHvpAv0tc76\nHvqAv0tc76\nHvqJvxVb76\nHvqJwxVb76\nHvqJwxVc76\nHvqJwxWc76\nHvqzv0tc76\nhw123456\nhw127127\nhw19821223\nhw19860903\nhw19870524\nhw19880517\nhw5201314\nhw580213\nhw810810\nhw810829\nhw828184813\nhwamwofn\nHwaNsung\nhwb159753\nhwf123456\nhwh83721\nhwinwy7f\nhwj217718\nhwjiang1125\nhwl123123\nhwmimi1021\nhwq25419971\nHwqIwxWc76\nHwqzv1tc76\nHwrIwxWc76\nHwrIwxWc77\nhwsangsi\nhwt1025dhw\nhwx123456\nhwy116929\nhwy123456\nhwy6812160\nhx123456123456\nhx123456789\nhxall52166\nhxd123456\nhxf123456\nhxf750118\nhxh123456\nhxh15854243002\nhxh1982727\nhxj1357908642\nhxj191516\nhxl123456\nhxm123456\nhxm19771113\nhxm2zsl'\nhxm771113\nhxm830213\nhxmludingj\nhxmnicholas\nhxp123456\nhxq123456\nhxqndszgffyy\nhxw123456\nhxw831026\nhxx020310\nhxx123456\nhxy123456\nhxy751224\nhxz1001q\nhy010304\nhy111111\nhy123123\nhy1234567\nhy123456789\nhy198687\nhy1987324\nhy2065223\nhy2858184\nhy3674716\nhy459421\nhy466310706\nhy513902\nHY5201314\nhy731222\nhy741105\nhy87011530\nhy884848\nhyacinth\nhyanby123\nhyb123456\nhyb19820208\nhyC095140\nhychhych\nhyde1234\nhyde1314\nhyde1969\nhyde19690129\nhyde69129\nhydehyde\nhydemylove666\nhydetetsu\nhydraulic\nhydrogen\nhyds0984\nhyesung19791127\nhyesung791127\nhyf123456\nhyf5215131\nhyf54321\nhyg87731354\nhygd2008\nhyh12172\nhyh123456\nHYHHYHHYH\nhyix3113\nhyj121315\nhyj123456\nhyj19811116\nhyj1987592006\nhyjqt1213\nhyl1029168\nhyl123456\nhyn123456\nhynh2046\nhyp123456\nhyp263957\nhyperion\nhyq123456\nHYQ19770727001\nhys720401\nhyself828\nhyswallow\nhyt333666\nhywjczcdmx\nhyx123000\nhyx123456\nHYXX0327\nhyy123456\nhyy1985062711\nhyy5111989\nhyz123456\nhyz2191957\nhz000000\nhzb8622521\nhzbheddh\nhzc082603\nhzems2009\nhzf258963\nhzf380721\nhzgjadmin\nhzh123456\nhzh5yybz.\nhzhaitian\nhzhhaotu\nhzins618\nhzj123456\nhzj88521\nhzjd777777\nhzjnbtnt711212\nhzl1234560\nhzl331982\nhzljh771101\nhzllovekxp520\nhzq980129\nhzqsunshine\nhzw770525\nhzwyf090726\nhzx999999\nhzxjjhgd\nhzy123456\nI'm@.110\ni10vejuventu5\ni123456789\ni19617i19617\ni1UbzfiAso\ni1Ubzfizso\ni1UcyfjAtp\ni1UczfjAto\ni2u13huzf6\ni32wj1982\ni3547vgotone\ni3a5e9i9\ni3JfBinFyt\ni3lverson\ni4IfAinFyu\ni4IfAinGyu\ni4IfBinFyt\ni4IfBinFyu\ni4JfBinFyt\ni5884172\ni5j7y8r2jaq\ni7758521i\ni7k1g6y8\nI8023U4ever\ni8023you\ni8ijjmk7\ni8n34heg92\ni97va6qtpt\ni97va7rtpt\ni97vb7rtpt\ni97wb6ruq6\ni97wb6ruq7\ni97wb6rxq7\ni97wb7r0qt\ni97wb7rtqt\ni97xb6sxq7\ni98xb6sxq7\ni98xb7sxr7\ni@fuckyou\nia8xb7sxr7\nia8xb7sxr8\nia8xb7txr8\niadore911\niaihchah\niaiwojia\niajliaah\niam123456\nIam1girl\niam91bbc\nIama100tc\niamababy\niamabird\niamadmin\niamafish\niamafool\nIAMAGENIUS\niamagirl\nIamagoodboy\niamagoodman\niamagreatman\niamahacker\nIamahero\niamakiller\niamaking\niamalawyer\niamalen1\niamaliar\niamalone\nIamamouse\niamanangel\niamangel\niamangela\niamannie\niamapple\niamaries\niamassi27\niamastudent\niamatalent\niamateacher\niamatiger\niamatree7822\niamawinner\niamawolf\niambest1\niambutter\niamcarol\niamchenjin\nIamChina\niamchinahacker\niamchinaren\niamchinese\nIamcoming\niamcrazy\niamdaisy\niamdavid\niamdevil\niamdoris\niamechoh\niamfirst\niamflying\niamfrank\nIamgenie\niamgenius\niamghost\niamgreat\niamguest\niamhacker\niamhandsome\niamhappy\niamhelen\nIAMHENRY\niamhewei\niaminmontreal\niamintianya\niamjacky\niamjerry\niamjulia\niamkanjian\niamkevin\niamkiller\niamlanier\niamlemon\niamliwei\niamlucky\niamluyes\niammyself\niamnotfool\niamnothing\niamnumber1\niamoktoday\niamonnet\niampanda\niampanyan\nIAMPANZER\niampigwenwen\niampkrushblue\niampower\niamprince\niamrabbit\niamready\nIamsailing\niamsavage\niamsherry\niamshine\niamsimon\niamsogua\niamsorry\nIamsosad\niamsososo\niamstone\niamsun1984\niamsunny\niamsuper\niamsuperman\niamtangchuan\niamthegod\niamtheking\niamtheone\niamtiancai\nIamtiger\niamwaiting\niamwanghui\niamwangxs\niamwater\niamwhatiam\niamwhoiam\niamwinner\niamyou23\niamyourfather\niamyours\niamzhiying\niamzxjx168\nianthorpe\niavlplmo\niawgivff520\niaxyiyqjt\nibalance\nibelieve\nIBELIEVE1\nibelieveican\nibelieveicanfly\nibmformat\nibr543289\nic123456\nic59um39\nicanfly1130\nicanfly13\nicanfree\nicanican\nICANMAKEIT\nicanpass\nicanplay\nicanremember\nicbc1111\nicbc1234\nICDADMIN\nice12345\nice123456\nice850324\nICECREAM\nicecream111\niceiceice\nicepoint\niceprince\nicerain11\niceriver\nicewater\niceworld\nichbinklee\nichliebe\nicipourlec\nicipourleche\niclsarah\nicrosoft\nics810725\nicy19861009\nicy252731374\nid.tianya.cn\nid123456\nid198463\nidcps123456\nidealist\nido1212ido\nidoitforyou\nidoloveyou\nidonotknow\nidonotloveyou\nidontcare\nidownload\nidreg@hainan.net\nidszdsga\nidWriter\nie123456\nieee1394\nieee8023\nieeefellow\nieeetpds\nieloveyou\nIEs_051695\niesss008\nievtk288\nifconfig\nifeelgood\nifeelyou\nifiamagirl\nifindyou\nifuckeyou\nifuckyou\nifuleyou\nifuns1028\nifyouloveme\nifytycyc\nigceludng\nigegqkqp\nIGNORE00\nigoodluck\nigowei123\nIhate123\nihatehim\nihateilove1983\nihatemyself\nihateyouforever\nihaveadream\nihaveyou\nihcat510126\nihcccihcc\nihdmhsgh\nihecec02\nihgyg0523\nihihsiqbb\nIHOPEIHOLD\nihsmgk20061102\nihssiuwj\nihuge920\nIhyIlysz\nii123098\niI123456\nii13141314\niiioookl\niiloveyou\nIINCHINAondemand\nIIOVEYOU\niipciipc\niirabbit\niisman37\niitiit521\nijoinnow\nike780219\nikillyou\nikissyou\niknowyou\niKrp3014\nikxukx4yy\nIL0VESTEF\nil0vey0u\nil0veyou\nilcocolee\nilhanmansiz\nIlhermione8\nilhj1314\nilikeapple\nilikeblue\nilikecat\nilikefly\nilikeher\nilikeido\nilikeilike\nilikejay\nilikemoney\nilikemusic\nilikesex\nIliketianya\niliketony\niliveyou\nill12345\nilles5145\nillusion\nilmf525j\nilmmilmm\nilmu42ilmu42\niloevyou\niloueyou\nILOVE007\nilove123\nilove12345\nilove1314\nilove163\nilove1981\nilove1983\nilove1985\nilove2005\nilove2008\nILOVE2HCX\nilove364712\nilove520\nilove555\nIlove777\nILOVE8114366\nilove888\nilove911\nilove925\nilove998\niloveabao\niloveada\niloveakira\niloveallen\niloveamy\niloveandihate\niloveandy\niloveangel\niloveann\niloveannie\niloveapple\nilovebaby\nilovebaobao\nilovebbs\nilovebear\nilovebibi\niloveblue\nilovebmw\niloveboa\nilovebobo\niloveboy\nilovebsb\nilovebsb210\nILOVECANDY\nilovecat\nilovechen\nilovecherry\nilovechida\nilovechu\nilovecici\nilovecloud\nilovecoco\nilovecoffee\nilovecomic\niloveconan\nilovedandan\nilovedepp\nilovedog\nilovedog77\nilovedollars\nilovedream\niloveduozi\nilovedyou\niloveecho\niloveelva\niloveemily\niloveeric\niloveeva\nilovefaye\nilovefei\nilovefeifei\nilovefeng\nilovefish\nilovefive\nilovefootball\nilovefox\nilovefree\nIlovegame\nilovegege\nilovegigi\nilovegirl\nilovegzwy\niloveher\nilovehere\nilovehong\nilovehot\nilovehua\nilovehui\nilovehxy\nilovehyde\niloveice\niloveilove\niloveinter\niloveivy\nilovejack\nilovejacky\nilovejaluo\nilovejane\nilovejanet\nilovejava\nilovejeff\nilovejenny\nilovejerry\nilovejia\nilovejiajia\nilovejie\nilovejin\nilovejing\nilovejingjuwoai3\nilovejolin\nilovejolin99\nilovejoy\nilovejuan\nilovejudy\nilovejun\nilovejun1314\nilovekangta\nilovekeita\niloveken\nilovekevin\nilovekiki\nilovekimi\nilovekitty\nilovekobe\nilovekun\nilovekx9880166\nilovelan\nilovelaopo\niloveleaf\nilovelee\niloveleehom\nilovelei\niloveleo\niloveleslie\nilovelife\nilovelili\nilovelily\nilovelin\nilovelina\nilovelinda\niloveling\nilovelinux\nilovelion\nilovelisa\niloveliu\nilovelois\nilovelondon\nilovelong\nilovelulu\nilovelyx\nilovemama\nilovemaomao\nilovemary\nilovemay\niloveme896120\nilovemei\nilovemelo\nilovemeng\nilovemilan\nilovemimi\nilovemin\nilovemoney\nilovemoon\nilovemovie\nilovemqf\nilovemsn\nILOVEMUM\nilovemusic\nilovemybaby\nilovemycat\nilovemyhome\nilovemyparents\nilovemyson\nilovenana\nilovenancy\nilovenba\nilovenesta\nilovenet\nilovenic\niloveniuniu\nilovenrg\niloveoov\niloveowen\niloveparis\nilovepeng\nilovepig\niloveping\nilovepsl\niloveqiqi\niloveqiu\niloveqsr\niloverain\niloveraul\nIlovericki\niloverigri\niloverock\niloverong\niloverose\niloverui\niloveryou\nilovesafin\nilovesainio\nilovesakura\nilovesammi\nilovesea\niloveshe\niloveshi\niloveshiho\nilovesky\nilovesnow\nilovessshin\nilovestar\nilovestone\nILOVESUMMER\nilovesun\nilovetan\nilovetang123!\nilovetao\niLOVEthis\nilovetianya\nilovetianyu\nilovetina\niloveting\nilovetom\nilovetotti\nilovetutu\nilovetvxq\nilovetwins\niloveu123\niloveu1314\niloveu2002\niloveu20070513\niloveu520\niloveu521\niloveu82\niloveu88\niloveu99\niloveubb0124\niloveucn\niloveudearbook\niloveujustso\niloveusa\nilovevic\nilovewang\nilovewei\nilovewen\nilovewho\nilovewife\nilovewin2k\niloveworld\nilovewqp\nILoveWyh\nilovexia\nilovexiao\nilovexin\nIlovexing\nilovexixi\nilovexue\nilovexuyi\nIlovey0u\niloveyan\niloveyang\niloveyanzi\niloveyao\niloveyaya\niloveyhm\niloveyin\niloveying\niloveyoni\nILOVEYOU.\niloveyou0\niloveyou00\niloveyou007\niloveyou0201\niloveyou100\niloveyou10000\niloveyou11\nIloveyou12\niloveyou1234\nIloveyou12345\niloveyou123456\niloveyou12345678\niloveyou125\niloveyou13\niloveyou1314520\niloveyou1978\nIloveyou1982\niloveyou1986\niloveyou1987\niloveyou2006\niloveyou2007\niloveyou2008\nILOVEYOU2009\niloveyou22\niloveyou23\niloveyou2410\niloveyou33\niloveyou5\niloveyou77\niloveyou79\niloveyou8\niloveyou81\niloveyou82\niloveyou828\niloveyou83\niloveyou86\niloveyou88\niloveyou888\niloveyou9\niloveyou959595\niloveyou99\niloveyou999\niloveyou?\niloveyou@\niloveyoubaby\niloveyoubb\niloveyouchina\niloveyouhebelv\niloveyouiloveyou\niloveyouli\niloveyoulily\niloveyoumm\niloveyoumore\niloveyouok\niloveyouqiuqiu\niloveyour\niloveyouso\niloveyouto\niloveyoutoo\niloveyoutt\niloveyouty\niloveyouu\niloveyouyu\niloveyouzc\niloveyouzj\niloveyoyo\niloveyuan\niloveyue\niloveyuki\niloveyun\niloveyuo\niloveyuyu\niloveyxl\nilovezhang\nilovezhao\nilovezhen\nilovezhi\nilovezhou\nilovezhu\nIloveZHUZHU\niloveziji\nilovezxh\nilovezxj\nILQQ19881114\nILSars01\nilsports\niltomato\nilu19820417\nilvcf0214\nilvqcmcp302\nilxjfeazqy\nilxx1207\nily123456\nily1314520\nily19830923\nily5201314\nily701138\nily9191723\nilycfl72\nilyforever\nilyiyeqingons\nilyliouyan\nilymtics\nilypjhm5211314\nilywanlz0910\nilyzj13141314\nilzhaoqing\nilzlyilzly\nim2bz2cu\nimagination\nimdewftc\nimdragon\nimfriend\nIMFxM78phe\nIMFxM78phf\nimissingyou\nimissyou1314\nimissyou1999\nimlovinit\nimmanuel\nimmglnow\nimmortality\nimonoyama\nimportant\nimpossible\nimthelaw\nimustwin\nimwinner\nincentive\nincestuous\nincoming\nindependence\nindividual\nineedmoney\nineedtoknow\ninetinet\ninevergiveup\ninfinite\ninfinitytech\ninfo1234\ninfotech\ninfrasys\ninfuture\nINFxM78phf\ning10086\ning100ing100\ninginging\ningodwetrust\nINGxM78phf\nINGxM79phf\nINGxM89phf\nINGxM89pif\ningzhang\ninhechao\ninheil4ever\ninhere0412999\ninin2000\ninit1234\ninitiald\nINMYHEART\ninmylife\ninnocence\nINNOCENT\ninnovation\ninnovision\ninsist373\ninsomnia\nInspiration\ninspiron\ninstinct\ninsularity\ninsurance\nintasect\nintel123\nintel1234\nintel@123\nintelamd\nintelinside\nintelligent\ninter123\ninter1908\nINTER1919\ninterest\ninteresting\ninterests\ninterface\nintermilan\ninternational\ninternet1\ninternet123\nintertek\nintheend\ninthesky\ninthesun\nintimate\nintranet\nintruder\nintuition\nInuyasha\nINUYASHA0105\ninventec\ninventor\nINVINCIBLE\ninvisible\ninzaghi777\nINZAGHI9\niojiayan\niop000lm\niop123456\niopiopiop\niopjkl12\niopjklbnm\niopjklnm\niopkl1902\nioribbly\nioriiori\nioriyagami\niotawing\niouforever\niouiouiou\niouyzy34\nip332211\nipconfig\nIPGXIIVTHDXKJ14\nipipipip\nipkhytyhwkfa\nipodnano\nipq0809ipq08091\nipqmfk123\nipqwwfn88\nipromise\niptmsamu\nirene19810127\nirenefun\nireneirene\niricochbl\niris1220712\nironfish52\nIronlion@sz\nisbn2870\nisdnadsl\niseeemi22.\niseekyou\nishemleIt.\nishidaakira\nishizitong\nisis1027\nisolation\nisp13net\nissaballa\nissn1005\nistic2000\nisyouwu.33\nit123456\nitcastflx\nitfmddip\nIthink14\nithinkican\nithinkso\nitisholmes\nitisme43\nitisme55\nitismine\nitismylife\nitismymail\nitjisiwen120\nitok5678\nitolfjfh\nitskydesk\nitsmylife\nitxau1220\nitxgdqty\niu810709\niuew84fkd\niugo2006\niunbeliever\nivan1982\nivanchen\nivanivan\nivanwang\nIverson03\niverson123\niverson333\niverson76\niverson88921\niviczdyy\nivnckg5n\nivory981\nivrog112233\nivv52088\nivwjdwfn\nivwnuieud\nIVY820313\nivytongxiaoji\niw9603505\niwaityou\niwannafly\niwantfly\niwantit69\niwanttodie\niwanttofly\niwanttowin\niwantyou\niwbfree217\niwillback\niwillbe1realhero\niwillbeback\niwillbefine\niwillberealhero\niwilldoit\nIwillfly\niwillgetit\niwillgoon\niwillican\niwillkillyou\niwillrockyou\niwillsuccess\niwillwin\niwillwin138\niwjfkcjd\niwjun1978\nIwqyw10c86\nIwqyw10d86\nIwqzv1tc76\nIwqzw10c86\nIwqzw1tc86\nIwrHw2Xc87\nIwrHx2Xc87\nIwrIw2Wc87\nIwrIw2Xc87\nIwrIwxWc77\nIwrIwxWc87\nIwryw10d86\nIwryw10d87\nIxrHx2Xc87\nIxsHx2Xc87\nixukcixukc\niy330008\niy960607\niyachi123\niyachi2010\niyachi920\niyachi99\niyipihcox\nj001x803\nj0803994\nj0TbAeizso\nJ0yce71o\nj12345678\nj19700426s\nj1978628\nj19830425\nj19850404\nj1Tbzeizso\nj1Tbzfizso\nj20000214z\nj314l159\nj3JeBhmFyt\nj3JeChmExt\nj3JeChmFxt\nj3JfBhmFyt\nj3JfBimFyt\nj3JfBinFyt\nj3ZeChmExt\nj4361116\nj5201314\nj5z8e5r5\nj62187200\nj62717758\nj6623709\nj6t5uytt\nj790103n\nj8781942\nj8a0c6k12\nj8g7WEy0\nj9620012\nj97wb7r0qt\nj98ojmju\nj9dbddkk\nja123456\nja7wb7r0qt\nja7wb7s0qt\nja8wb8s0rt\nja8xb7txr8\nja8xb8s0rt\nja8xc8s0rt\nja8yb7txr8\nja8yb7txs8\nja8yc7txs8\nja8yc8txs8\nja8yc8txsx\nJabil123\njack0753168\njack1234\nJACK12345\njack1978\njack1981\njack1982\njack1983\njack1985\njack2000\njack2002\njack2008\njack2009\njack413026\njack6983\njack76543210bean\njackchen\njackecheng\njacket9527\njackey789zhy\njackeyljy\njackeyqiu\njackie123\njackie1983\njackie1985\nJACKIE2008\njackie203\njackiechan\njackiechen\njackjackjack\njackjiang\njackjones\njackkathy\njackking\njacklove\njackrose\nJACKRYAN\njacksong\njackstraw\njackwang\njacky007\njacky00hai\njacky123\njacky123456\njacky126\njacky2000\njacky520\njacky888\njackyang\njackyboy\njackychen\njackycheng\njackycheung\njackyjacky\njackylau\njackylee\njackywang\njackyyang\njackyzhang\njackyzhao\njackzeng\njackzhang\njackzhou\njade1987\njade8512\njadejade\njae198045\njaejoong\njaesuk83\nJaimehoon\njajajaja\njakejake\njalenlee\njamboree\njameokxmj110\njames007\njames1978\njames1982\njames1985\njames520\njames925\njameschen\njamesjames\njamesjayon\njamesking\njameslee\njamesliu\njameszhang\njamin2008\njanathan\njane1011\njane1234\njane123456\nJane2222\nJane686758\njane700422\nJane8235\nJane85429\njane9101\njaneeyre\njanejane\njanelove\njanetjanet\njanezhang\njangnara\njangwoohyuk\njanmonyuky\njanny1214\nJanskein\njapdudes\njarjinlee\njaserring\njasilo12\njasion1004\nJasmine123\njasmine2007\njasmine56\njasmines\njason007\njason0107\njason0124\njason021\njason1018\njason1220\njason1234\njason123456\nJASON1981\njason1983\nJASON1987\njason3721\njason4585\nJason520\njason520ma\njason888\njasonchen\njasonfashion\njasonhuang\njasonjason\njasonkid\njasonkidd\njasonking\njasonlee\njasonliu\njasonlove\njasonlu111\njasonwang\njasonwood\njasonyang\njasonzhang\njassica3573\nJaszd2009\n\"java\"\"1023\"\njava1234\njava123456\njava2010\njavabean\njavacfxx\njavalove\njay123456\njay19790118\njay1979118\njay5201314\njay790118\njay7991608\njay8230005\njay86fast\njayangel\njaychou0118\njaychou520\njaycncom\njaycool!\njayjayjay\njayjolin\njazzysong\njb123456\njb151712\njb88fwt2q3\njb8yc8uxsx\njb9yc8uxsx\njb9zc8uxsx\njb9zc8uxtx\njbgsnjbgsn\njbj112131\njbjhhzstsl\njbldzswb2009\njbond007\njbrjbr123\njbsishou\njbuilder\njbwanglei\njc123654\njc176b911\nJC19800212\njc19865292229\njc19880206\njc5220861\njccjccjcc\njcferrero\njcg86108812\njchan420\njcq835261\njcszjswk\njcwl0000\njczg64353382\njd123456\nJd200901\nJd3LL8oF\njdd716159\njdl788105czq\njdyou8899\nje640715\njean1763\njean906272\njeanjean\njeanne123\njeansecool\njeanswest\njediknight\njedyviking\njeeRj1688\njeetkunedo\njeff0326\njeff1984\nJeff670326\njeffchang\njefferjeffer\njeffhsia\njeffjeff\njeffrey0210\njejetdut\njekki198071\nJELLY966\njellyfish\njemanwong\njenjen521\njennali428\njennifer123\njenny-860222\njenny0117\njenny1211\njenny123\njenny520\njenny760229\njennyjenny\njerilelva\nJerry0101\njerry123\njerry1984\njerry520\njerrychen\njerryjerry\njerryjia\njerryliangda\nJerrymouse\njerrytom\njerryyan\njerseyasa\njerusalem\njesi07545168998\nJESLEYHEJING\njess4ever\njesse520\njessi123ca\njessic4455\njessica123\njessica1981\njessica320\njessica520\njessicasun\njessie123\njessie930602\njessielee\njesuisunepomme\njesusloveme\njeteaime\njeveancn\njevin2004\njevousaime\njey0129jey\njf123456\njf13974408729\njf520318\njf601028\njf666666\njf770422iou\njf880421\njf888999\njfjfjfjf\njfpslh00\njfss1111\njfss9999\njg123456\njgchun5039\njggaiwrl\njgqgyws13\njh123456789\njh131824\njh5201314\njh6063dcl8806jy\njh981118\njhd123456\njhdhyeyhthe@126.\njhgy1308\njhj741121\njhj761019\njhk661818\njhkv7n78\njhkyygydq\njhl781201\njhohy12345\njhrcgl2000\njhs*2***01\njhwujian234\njhy123456\njhy192929\njhyaa6688\nJI1984mmy\nJI810115\njia11068525\njia12345\njia123456789\njia20010916\njia4734287\njia5211314\njia6087511\njia811003\njia820610\njia86035536\njiabao2121\njiabao520\njiabao77\njiabaoyu\njiacheng\njiackjia\njiade1234\njiafeimao\njiageiwoba\njiageweb\njiahewanshixing\njiahui123\njiaiziji\njiaji1981\njiajia&ice\njiajia00\njiajia000\njiajia06\njiajia0705\njiajia1012\njiajia1025\njiajia12\njiajia1234\njiajia1314\njiajia1982\njiajia1983\njiajia1984\njiajia1985\njiajia2008\njiajia2009\njiajia66\njiajia88\njiajiade\njiajiajiajia\njiajiajing\njiajiale\njiajialiu\njiajiao2010\njiajiaxiong222\njiajiazhu1106\njiajieshi\njiajin510\njiajingwen\njiajinming\njiajinsan123123\njiaju123\njiaju20000\njiakechong\njiakejuan521\njialaolian\njialeyan\njiali123\njialiang\njialihui\njialiming\njialin123456\njialing@123\njialovejia309313\njiame427\njian.123\njian0201\njian0739\njian1000\njian1111\njian1234\nJIAN123456\njian1314\njian1980\njian1981\njian19830415\njian1984\njian1986\njian1988\njian1989\njian2002\njian2006\njian333888\njian5201314\njian624122\njian7700\njian99qmwn99\njianbing\njianbing121\njianchao\njianchen\njiancheng\njianchengqmwn\njianchi123\njianchibuxie\njianchidaodi\njianchun\njiancong\njiandan123\njiandan520\njiandanqinxin\njiandanshenghuo\njianding\njianding0304\njiandong\njianeite\njianfang\njianfei123\njianfei423\njiang000\njiang001\njiang007\njiang1011\njiang1020\njiang110\njiang111\njiang1206\njiang1234\njiang12345\nJIANG123456\njiang123456789\njiang125\njiang1314\nJIANG1314520\njiang159@li\njiang168\njiang1978\njiang1979\njiang1980\njiang1981\njiang1982\njiang1983\njiang1984\njiang1985\njiang1986\njiang1987\njiang1988\njiang1989\njiang1990\nJIANG2008\njiang2009\njiang2010\njiang2484\njiang321\njiang414925\njiang456\njiang521\njiang541500\njiang630\njiang6741\njiang85901386\njiang888\njiang999\njiangafu\njiangang\njiangbao\njiangbei\njiangbei1\njiangbiao\njiangbing\njiangbobo\njiangcai\njiangchang\njiangchao\njiangchen\njiangcheng\njiangchu\njiangchuan\njiangchun\njiangcong\njiangdan\njiangdawei\njiangding\njiangdong\njiangfan\njiangfang\njiangfei\njiangguang\njianghai\njianghaiyan\njianghan\njianghang\njianghao107\njiangheng\njianghong\nJIANGHU11\njianghuan\njianghuang\njianghuchuan\njianghuo12688\njiangjia\njiangjiang123\njiangjiaqi\njiangjin\njiangjing\njiangjing191505\njiangjintao\njiangjuan\njiangjun1234\njiangjunjie\njiangjunling\njiangkai\njiangkang\njiangkun\njianglai\njianglan\njianglbin\njiangli520\njiangliang\njianglihua\njianglijun\njianglili\njianglin\njiangling\nJIANGLIPING\njiangliu\njianglulu\njiangman\njiangman891127\njiangmei\njiangmen\njiangmeng\njiangmiao\njiangmin\nJIANGMING\njiangnan123\njiangnanyu\njiangning\njiangong\njiangpan\njiangpei\njiangpeng\njiangpengfei\njiangping\njiangqi0215\nJIANGQIAN\njiangqiang\njiangqiao\njiangqin\njiangqing\njiangqinqin\njiangqiong\njiangquan\njiangran\njiangren\njiangrong\njiangrui\njiangsan\njiangsha\njiangshang\njiangshanshan\njiangshaomin\njiangshasha\njiangshen\njiangsheng\njiangshi\njiangshu\njiangshuai\njiangshui\njiangsong\njiangsu0523\njiangsun\njiangtao123\njiangteng\njiangtian\njiangting\njianguan\njianguang\nJiangWan\njiangwang\njiangweiwei\njiangwen\njiangwenjun\njiangwoai\njiangxi123\njiangxia\njiangxian\njiangxiang\njiangxiao\njiangxiaohui\njiangxiaolan\njiangxiaoyu\njiangxing\njiangxinyan\njiangxiong\njiangxiuli\njiangxuan\njiangxue\njiangxun\njiangyang\njiangyanhua\njiangyao\njiangyin\njiangying\njiangyong\njiangyou\njiangyu3039\njiangyuan\njiangyue\njiangyun\njiangyuting\njiangzemin\njiangzhang\njiangzhao\njiangzhe\njiangzhen\njiangzheng\nJIANGZHI\njiangzhiguo\njiangzhong\njiangzhou\njiangzhu\njianhang\njianhong\njianhua123\njianhuang\njianhuo77\njianianhua\njianjian123\njianjian520\njianjiang\njianjiao\njianjuan\njiankang\nJIANKANGkuaile\njianki99\njianlei1982\njianlian\njianliang\njianlibao\njianling\njianlong\njianmian\njianming\njianning\njianning0626\njianpeiqq\njianpeng\njianping\njianqian\njianqing\njianquan\njianren123\njianren88\njianrong\njiansenlin\njianshan\njianshao\njianshen\njiansheng\njiansong\njiantao741852963\njiantian\njianting\njianwang\njianxian\njianxiang\njianxiao\njianxing\njianxiong\njianyang\njianying\njianyong\njianyu998\njianyuan\njianyulin520\njianyun1974\njianzhang\njianzhao\njianzhen\njianzhen521\njianzheng\njianzhong\njianzhou\njiao120120\njiao1234\njiao123456\njiao1986\njIAO1988\njiao237311\njiao519503\njiao5201314\njiao7089764\njiao7192838\njiaodian\njiaoenjun\njiaohong\njiaohuan\njiaohuang\njiaojian\njiaojiao12\njiaojiao123\njiaojiao20\njiaojing\nJIAOlian\njiaoling\njiaolong\njiaoming\njiaopeng\njiaoshou\njiaotong\njiaowuchu\njiaoxiao\njiaoyang\njiaoying\njiaoyue19860504\njiaozhou\nJIAOZIPI221\njiaqi123\njiaqiang\njiaqiong\njiaqisha\njiaruiping\njiarutamen\njias2388\njiasheng\njiashexia\njiashijie\njiatianjun\njiatianjun13\njiatianxia\njiating123\njiawei521\njiawenjun\njiaxiang\njiaxiaodong\njiaxiaozi1.7\njiaxinpinpai\njiayi520\njiayibingding\njiayijiayi\njiayingzi\njiayou123\njiayou13\njiayou1314\njiayou2008\njiayou2009\njiayou2010\njiayouba\njiayouff\njiayoujiayou\njiayounuli\njiayu520\njiayuguan\njiayunzhe\njiazhang\njiazheng\njiazhilei\njiazhiwei\njiazhuang\njiaziccjoy\njibajiba\njibuzhumima\njick123456\njidewangji\njidewoaini\njideyaowangji\njidianjidian\njidongxuanlan\njidushan\njidushanbojue\njie000000\njie1999914\njie834882\njie88340579\njie886170\nJIE9576285\njieaijing\njieaixia\njiebaobao\njiecheng\njiefangjun\njiege521\njieguoma712301\njiehuang\njiehun2008\njiehunle\njiejayjay\njiejie0429\njiejie1314\njiejie1982\njiejie521\njiejie5493\njiejie686\njiejie77\njiejie880506\njiejiejiejie\njiejiemeimei\njiejietou\njiejunhu\njieli1021\njielunjay\njielunxizi\njieluoshi\njiemanabcd\njieneng12345\njieneng123456\njienihaoha\njieqiong\njieshule\njiewoaini\njieyanbbs\njieyibao999\nJIFENG999\njige1000\njihui1022\njihuomimaba\njijiangwei888\njijianhua\njijibaba\njijidaojia\njijingjing\njijiniao\njijiwaiwai\njijunfeng\njikachong\njilengli\njiliang3230237\njiligulu\njilindaxue\njill1986\njill7kong\njillian5t1\njilljill\njillwang\njILOLVm6\njim123456\njimei123\njimeidaxue\njimgreen\njimijimi\njimjimjim\njimmy1113\njimmy123\njimmy123456\njimmy12345649\njimmy1983\njimmy2008\njimmy520\njimmyjimmy\njimmylee\njimmylin\njimmyqian\njimodejijie\njimohuashi\njimusoft123\njin12345\njin19780210\njin19840704\njin1guang\njin5201314\njin59421\nJIN968pan857\njinakanishi\njinandaxue\njinanjinan\njinanren\njinanshi\njinbangtushu2008\njinbao0088\njinbuhuan\njinchang\njincheng\nJINCHENG9061ying\njinchengwu\njinchuan\njincyliu\njindao119\njine2356\njinfbjinfb\njinfuming\njing0419\njing08210713\njing1010\njing1011\njing1024\njing1028\nJING1122\njing1127\njing1129\njing1230\njing1234\njing1314\njing1404\njing1980\njing1981\njing1984\njing1985\njing1986\njing1987\njing1988\njing1989\njing2002\njing2008\njing2009\njing20chun\nJing525956\njing841118\njing870627\njing891117\njingA23927\njingA97300\njingangjing\njingbao419\njingbao521\njingbaobao\njingboran\njingcha110\njingchang\njingchao\njingchen\njingcheng\njingchun\njingdian\nJINGDIANJF123\njingdong\njinger09\njingfang\njingfeng\njinggang\njinggege\nJINGhong\njinghuang\njingjian\njingjiang\njingjifa\nJINGJING1\njingjing111\njingjing1314\njingjing1986\njingjing2\njingjing2008\njingjing2009\njingjing76\njingjing77\njingjingde\njingjingguai\njingjingjing\njingjiniao\njingjixue\njingjuan\njingkang\njingkangxmz\njingking\njinglebell\njingleXU53\njingliang\njinglili\njinglilijing\njinglong\njinglove\njingmei88\njingmeng\njingming\njingning\njingpeng\njingping\njingqing\njingqiyuhong\njingquan\njingrong\njingsa1987\njingshan\njingshen\njingsheng\njingshuang\njingshui\njingshui123\njingsong\nJINGTAO123\njingtian\njingting\njingtong\njinguang\njinguangxin\njingwang\njingxian\njingxiang\njingxiao\njingxing\njingxiong\njingxuan\nJINGyang\njingyanjie156\njingyanming\njingying\njingyingju\njingyong\njingyuan\njingzhang\njingzhong\nJingzhou\njingzhu25\njinhaiyan\njinianri\njinjian513\njinjiang\njinjie123\njinjifan\njinjin111\njinjin1124\njinjin123\njinjin520\njinjin521\njinjintin\njinjinyici\njinjun000\njinjunxiu\njinlan4679630\nJINLIANG\njinlihua\njinlijun\njinling520\njinmingm\njinniujinyu\njinniuxiaof\njinpingguo\njinqian123\njinqiang\njinruifeng\njinsaijie\njinsanshun\njinsenianhua\njinshanyu\njinshihua\njinshouzhi\njinshuai\njinshuxian\njinsihou\njinsiling\njintai789\njintaidasha\njintanyuan\njintao123\njintian123\njintianbuleng\njintianhao\njintiantianqihao\njintomie\njinuy1021\njinuy1108\njinwanshuanguozi\njinway985526\njinwusheng\njinxiang\njinxiche\njinxin123\njinxin1988\njinxin3399\njinxinshime\njinxiong\njinxishan\njinxiu092\njinyedede\njinyingb\njinyisituo123\njinyoushan\njinzaiyuan\njinzaizhong\njinzhang\njinzhao245\njinzhen911\njinzheng\njinzhengbang\njinzhong\njinzhou321\njiongjiong\njionvsjoin\njiouguan\njipi0214\njishi1234\njishiben\njishuerbu\njisiyuan\njisu123456\njisuanai\njisuanji1\njisuqiche\njitashou\njitong511\njiuan816313\njiubugaosuni6666\njiubushuo\njiugenmao\njiujiang\njiujiu123\njiujiu123456\njiujiu99\njiujiuguiy\njiushi110\njiushiai\njiushiaini521\njiushiaishang\njiushibugaosuni\njiushihao\njiushimima\njiushiniu66\njiushita\nJIUSHIWO\njiushiwo1\njiushizhu\njiuwenlong\njiuwozhidao\njiuyechu\njiuyue&11\njiuzhaigou\njiuzhang\njiuzheyang\njiuzheyangba\njiuzhong\njiuzhou001\nJIWEI123\njiweiwei\njixiangruyi\njixiaobo\njixiaochong\njixiaofeng\njixiaoli\njixiaowei860119\njixiaoyi\njixiaoyu\njixuesong\njiyae000\njiyb2541\njiyuniou\nJiZhang110\njizhangshuang\njizhumima\njj121212\nJj123123\nJJ123321\njj1234567\njj1314520\njj15150809556\njj201314\njj20736531\njj226688\njj3djj3d\njj520520\njj520530\njj5211314\njj521521\njj623520\njj751018\njj778899\njj8485285\njj860123\njj860421\njj986224\nJj999999\njjangnara\njjhahajb\njjhxwd1018\njjj123456\njjj123456789\njjj659410\njjj887513821\njjjhhh00\njjjj0000\njjjjffff\njjjjjjjjj\njjjjjjjjjj\njjjjkkkk\njjk663886\njjlinjunjie\njjlovejj\njjlovemm\njjqlcgmyt\njjqq820428\njjs01992\njjwoaini\njjwwdren\njjwwjjww\njjxiaoyan\njjy123456789\nJJYY7788\njjyyJJYY\njk000000\njk103896\njk1108jlad\njk123456789\njk2jk2jk2\njk5201314\njk526847\nJK78nx7818\njkch831217\njkcool25tal\njkear555\njkfd525758\njkij68jk\njkjianxin\njkl12345\njkl147258\njkl562709256\njkl666888jkl\njklhg4892201\njklotebdq\njkluio789\njkxs2006\njkxz00741\njl123456\njl12345678\njl1986415\njl2jh520\njldxzwx86wxzy\nJLEmL78nhe\nJLEnL78nge\nJLEnL78nhe\njlgm660326\njlgmyx00\njljl123123\njlsxj97517\njlt1029918\njlwcgg359\njlyjlyjly\nJm123456\njm1982520\njm198852\njm503066\njm666888\njmd2120514\nJMEmL78nhe\nJMFmL78nhe\nJMFxL78nhe\nJMFxL78phe\nJMFxM78phe\njmj123456\njmj7jjkj\njml82978986\njmsyy3456\njmx071231\njmxbl123456\njn123456\njn181168\njnk7758521\njnknsjnkns\njnkswkyzmjfc\njnsr8288\njnsxiang\njo123456\njo1ko2lo3\njoan0628\njoan1234\njoan2380\njoan8899920\nJoanJoan\njoanne77\njoanwang\njob1pufgee\njoca3331\njocelyn76\njoe123456\njoe654321\njoejoe1028\njoejoejoe\nJOEY.GALLERY\nJoey90171\njoeyjoey\njoeyyee7416\njoezhang\njohn081899\njohn1071\nJOHN1234\nJOHN123456\njohn1978\njohnchan\njohnlennon\nJOHNNY123\njohnny2008\njohnnyonline\njohnshao\njohon3590150\njojo1234\njojo1982\njojochen\njojojojo\njokejoke\njoker123\njolin1019\njolin123\nJolin1317\njolin520\njolin521\njolinjay\njolinjolin\njollyroger\nJony3429\njordamleo\njordan123\njordan1985\njordan231288\njordan520\njordanjordan\njordankobe\njordansk\nJOSIE871106\njoteng123\njoule210\nJoun1234\njoungshen123\njovi1022\njoy1318hj\njoyce0723\njoyce122\njoyce123\njoyce317\njoycejoyce\njoycelee\njoyceming\njoyces0425\njoyful33\njoyjoyjoy\njoyo0628\njoytung2208\njp0792828\njp123456\nJp608251\njp991029\njplak888\njpp7vkgckv\njpsbjswzn\njpzhang28\njq050303\njq09180619\njq123456\njq19891019\njq5nxW9ta2qnQt\njqkajqka\njqkx1314\nJQm9L3UN\njqrrghdm\njqwjzy19850310\njr123456\njr525252\njrk123456\njruj68y7\njs000000\njs000302\njs0740841\nJS080811520\njs123456\njs1987js\njs606122\njs700323\njsbywsyr\njschp845\njsgllyxy133\njsh272939\njsj123456\njsjdjliu\njsjswaloo\njsk993505\njss195f170\njssz0512\njsth123456\njswshabi\njswz123456\njsxiefang\njsxrr3900384\njsygbxny\njt123456\njt19790130\njt19860214\njt654231\njt871014le\njtchs741852963\njtf2snow\njtljtljtl\njts20071114\njts7y18r\njtwmydtsgx\njtwsry2604884\njtybfm321\nju123456\nju123456789he\nju789olki\njuan123456\njuan1314520\njuan1985\njuanjuan123\njuanjuan521\njuanlian\njuanmei198578\njuanyong\njuanzi520\njubaobao\njudahcn123\njude791205\njudy139139\njudy7270\njudyjudy\njuejiang\njuejuebobo\njuesejuese8\njuesstury\njuhuatai\njuhuaxiang\njujijianpanshou\njujishou\njujube503\njujuya123\njukaizuoye\njulia123\njulia1979\njulia888\njuliajulia\njulianjulian\nJuliawang\njuliaxyz\njuliazhu\njuliet123\njuliette\njuly1112\njulyjuly\njumbohou\njun1314520\njun19870923\njun47125\nJun4ysby32\njun55555\njun789789\njun861122\njuncheng\njundu120\nJun-02\njunejune\njuneng2010\njuni1206\njunjen8065\njunjiang\njunjie123\njunjin19800819\njunjun1224915\njunjun123\njunjun1985\njunjun521\njunjun99\njunjunjun\njunkilee\njunli647309\njunliang\njunlin306\njunmingzh123\njunqiang\njunsheng\njunwei5301\njunxp2500\nJUNY3013\njunyan1234\njunyao123\njunzhang\njunzilan\njuojo520\njuqingtai\njurassic\njusen4346\njust2009\njust4fun\njust4u32\njust4you\njust789real\njustatest\njustbemyself\njustcause\njustdoit1\njustdoit123\njustdoit36\njustforfun\njustforlove\njustforme\njustforyou\njustgoforit\njustin02\njustin11\njustjust\njustlove\njustloveyou\njustplay\njustsmile\njusttest\njusttryit\njustwait\njustwendy\njut617499\njuve1897\njuventes\njuventus1897\njuventusnick60\njuwenjing\njuwewe1982\nJUXIEZUO\njuzijuzi\njvbjvbjvb\njw00000000\njw123456\njw201505\njw585888\nJW62771829\nJw_Prince\njwei2006\njwq948900\njwyshya99\njx100049\njx12345678\njx197572\njx586jxjx586jx\njx67427450\njx886068\njxc03220109\njxgjxg_001\njxgjxg_tysq\njxj012390\njxj123456\njxj123JXJ\njxj83131\njxk147258\njxl123456\njxm521023\njxmx3233\njxonline\njxr060604\nJxrxx10d87\nJxryw10d87\nJxryx10d87\nJxsGx2Yd87\nJxsHx2Xc87\nJxsHx2Yc87\nJxsHx2Yd87\njxuew9987\njxxl0@06\njxy123456\njxytz98081527@\njy02299561\njy02450535\njy123654\njy19840410\njy510xxw\njy5201314\njy800800\njy961016\njyc811112\njyf123456\njyh13957106320\njyh3894334\njyhf80215\njyhw1688\njyk9680386\njyouling\njyrf2009\nJysFy2xd87\nJysFy2Zd87\nJysGx2Yd87\nJysGy2Yd87\njyshaoran\njyu96ujj\njywzwx420\njyy009939\njyyan223\njyyz793026zwx\njyz101013qq\njyzy201206\njz123456\njz456123\njzb19821017\njzl123456\njzl801012\njzlg600896\njzmxxxyxm\njZr198757\nJzues198743\njzx19861031\njzxya1224\nk001k001\nk0SaAehyrn\nk0SaZehyrn\nk0SbAeiyrn\nk0SbAeizsn\nk0TbAeizso\nk1144889900\nk123456x\nk1314520\nk147258369\nk165596341\nk1984330n\nk1i2c3k4\nk1k2k3k4\nk290389333\nk2glacier\nk2j5fk9s2z\nK32vcW824\nk3YdDhkDws\nk3ZdDhkDws\nk3ZdDhkEws\nk3ZdDhkExs\nk3ZeChmExs\nk3ZeChmExt\nk3ZeDhkExs\nk3ZeDhmExs\nk403w62h\nk4hvdq9tj9\nk5201314\nk67a9315\nk6983723\nk69t6usx\nk700s700\nk7717877\nk7758521\nk7777777\nk7u8g2f6\nk8051661\nk885333229\nk8a3e95ze1\nk90l12y23\nk999999999\nka123456\nka666542\nka8xc8t0rt\nka8xc8t0st\nkabasiji\nkabujinuo\nkabuqinuo\nkaede1111\nkaedeanita\nKaedeRukawa\nKafeidou\nkafon2008\nkagome44\nkai111111\nkai123456\nkaichuangshiji\nkaidaotumi\nkaihan1314\nkaihu123\nkaihu123456\nkaijiang\nkaikai123\nkaikai2008\nkaikai520\nkaikai521\nkaikai8866\nkaikai900110\nkaikai912\nkaikaihao\nkaikaikai\nkaikaixinxin\nkaimenba\nkaishidongle\nkaishile\nkaite198295\nkaitokid\nkaiwanxiao\nkaixin.cn\nkaixin00\nkaixin001\nkaixin07\nkaixin100\nkaixin110\nkaixin123456\nkaixin1314\nkaixin2008\nkaixin2009\nkaixin2010\nkaixin520\nkaixin88\nKaixin99\nkaixindian\nkaixinguo\nkaixinkuaile\nkaixinmeiyitian\nkaixinwang\nkaixuanmen\nkaiyan484848\nkaizi8105423\nkajiniya\nkaka1022\nkaka123456\nkaka1983\nkaka19830818\nkaka2008\nkaka870421\nkakachen\nkakakaka\nkakaluote\nkakashi!!!\nkaku123456\nkaku987987\nkalan23119700\nkalaokok\nkalulinlan520\nkalusidsh\nkame0811\nkame7qixqxazdyy\nkamekame\nkamenashi\nkamenashi223\nkamenashikazuya\nkamengdeai\nkami421115\nkampcity17\nkan123456\nkanalty870325\nkanbujian\nKANCA1979\nkanekane\nkanezhou\nkang0405\nkang1113\nkang1234\nkang1985\nkang78ui\nkang821316\nkang8320\nkangcaijie\nkangdong\nkangfeng\nkanghong\nkanghong2010\nkanghong360\nkangjian\nkangjie1209\nkangjing\nkangjing198082\nkangkai1985\nkangkailiudan\nKANGKANG\nkangkang123\nKANGKUIZHE\nkangli312\nkanglian\nkangliang\nkangling\nkanglong\nkangmeng\nkangming\nkangnaixin\nkangning\nkangping\nkangqiang\nkangqiao\nkangshifu\nkangta10\nkangta1010\nkangta123\nkangta27\nkangta520\nkangta791010\nkangta829\nkangtahot\nkangtakangta\nkangtalove\nkangting\nkangwei33\nkangxinke00\nkangyanlin32\nKANGYB007\nkangying\nkangyong\nkangyuan\nkanisgod\nkanjani8\nkankan123\nkankankan\nkanmeinv\nkannimab\nkannyyan\nkanshijie\nkanshougan\nkanshuxuexi\nkanwo100bian\nkanyikan\nkaodaxue\nkaofudan\nkaojinwo\nkaokaode12\nkaokaokao\nkaola333\nkaolaXIONG\nkaonenma\nkaonima123\nkaonimabi\nKAONIMADE\nkaonimama\nkaonizui\nkaoshi2010\nkaoyan123\nkaoyan2008\nkaoyanjiayou\nkaqiusha\nKaren1210\nkaren123\nkaren520\nkarena511\nkarenkaren\nkarenmok\nkarllee8\nkarlmarx\nkasabulanka\nkasama1981\nkate3284\nkatharine\nKATHLEEN\nkathrine\nkathy123\nkathycai\nkathychu\nkathykathy\nkathylee\nkathylynn\nkatongabc1\nkattykatty\nkavin2009\nkawayiyi\nkaxfzsby\nkayongxin\nkazumasa\nkazuya223\nkb123456\nkb654321\nkb8yc8t0st\nkb8yc9t0st\nkb8yc9u0st\nkb9Ad9v2ux\nkb9Ad9vxux\nkb9yc9u0tt\nkb9zc8vxtx\nkb9zc9vxtx\nkb9zd9vxtx\nkb9zd9vxux\nkbitxsks\nkc123456\nkc29804628\nKC5201314\nkchjiang\nkd831243\nkdjucuer\nke123456\nke831228\nke991358\nkeai8023\nkeaideni\nkeaideren\nkeaidewo\nkeainvren\nkeanu945\nkeanureeves\nkeb8281036\nkedin521\nkedyuanzgh\nkeede2009\nkeelelvt\nkeepgoing\nkeepmoving\nkeepon1971\nkeepsmiling\nkeermajia\nkef007008\nkegumingxin\nkehu00000\nkeita1216\nkejin1978\nkejishidai\nkeke881216\nkekekeke\nkekelele\nkekenick560303\nkekexili\nkekoukele\nkele1985\nkelekele\nkelianren\nkelindun\nkelinsiman\nkelisibaoluo\nkellis55\nkelly123\nkelly424\nkelly520\nkelly913\nkellychen\nkellykelly\nkellylee\nkellylp123\nkellysammijoey\nkemixiaozi\nkemshin981618\nken123456\nken780716\nkenan6615\nkencandy\nkencheng\nkenexzfq\nkeney2002\nkeng1987\nkengkeng\nkenho998\nkenjifujima\nkenkenken\nkenny123\nkenpan791212\nkensunny\nkentyaoyao\nkerberos\nkerrigan\nkerry727\nkerryoil\nkesso1234\nkestudio123\nkety0519\nkevenya919\nkevin001022\nkevin007\nkevin1234\nkevin1983\nkevin1984\nkevin1987\nkevin2006\nkevin2007\nkevin2009\nkevin520\nkevin888\nkevinbingo\nkevinchen\nkevinfu19846\nkevingarnett\nkevinguo\nkevinkevin\nkevinlee\nkevinlin\nkevinLIU\nkevinsun\nkevintang\nkevinwang\nkevinyang\nkevinyao\nkevinyym2437\nkevinzhu\nkewu7991kewu\nkexibushini\nkexin5652288\nkexuefazhanguan\nkey()123\nkey123456\nkey7807270\nkeyannasui\nkeystone\nkf123456\nkf87085777\nkf98gogoq\nkf98kf98\nkfc123456\nkfj98nrg\nkfjjqqqq\nkftbkftb\nkg123456\nkgd4282007\nkgd97307wu\nkgdauvke\nkgddgtgej\nkgdqvewfn\nkgdtakuu\nkgdteitx520\nkgdxawgij\nkgdycevke\nkgmzyysa\nkhong125\nkhorkina\nkhtcnwaqpnf@126.\nkidconan\nkiddkidd\nkidkidkid\nkidnapper\nkiki1022\nkiki32788\nkiki58047835\nkikicoco\nkikiwang\nkikiwang12345\nkikumaru\nkill.bat\nkill1234\nkill2000\nkill2003\nkill2008\nkill5pig\nkillangel\nkillcmb38\nkilldoccs\nkiller001\nkiller007\nkiller01\nkiller11\nkiller12\nkiller21\nkiller888\nkiller99\nkillerkiller\nkillerking\nkillerman\nkillingme\nkilljapan\nkillkill\nkillking\nkillkiss\nkillmenow\nkillwell\nkillwolf\nkillyou123\nkim020745\nkimdongwan\nkimheechul\nkimheesun\nkimi1015\nkimi1017\nkimi1201\nkimi1216\nkimi1218\nkimi12345\nkimi19791017\nkimi19871015\nkimi6610\nkimikimi\nkimiraikkonen\nkimjaejoong\nkimkibum\nkimkimkim\nkimmy1126\nKIN7game\nKinda816\nkindaichi\nkindness\nking1023\nking1111\nking1234\nking12345\nking123456\nking1314\nking1979\nking1981\nking1982\nking1983\nking1984\nking1985\nking1986\nking1987\nking1988\nking1998\nking1999\nking2000\nking2002\nking2003\nking2005\nking2006\nking2008\nking2009\nking2010\nking3559\nking5257\nking5566\nking8888\nKING888king999\nking926168\nkingbaby\nkingback\nkingbird\nkingchen\nKingCheng\nkingfeng\nkingfish\nkingfisher\nkinggood\nkinghawk\nkinghi19871224\nkingisme\nkingjing\nkingkang\nkingkill\nkingkiller\nkingkiss\nKINGLAND\nkinglear\nkinglion\nkinglong\nkinglove\nkingmaki\nkingmax256\nkingofking\nkingoftime123\nkingping\nkingqueen\nkingscal\nkingshare\nkingskings\nkingsong\nkingstar\nkingstone\nkingsubdue\nkingvsking\nkingwang\nkingwolf\nkingwong\nkingyang\nkingzhang\nkingZHOU\nkingzoo135246\nkinki51244\nkinki6194\nKINKIKIDS\nkinomoto\nkinvenjung\nkiny1984\nkiosnf3014\nkirayamato\nkirinhgl\nkiroro123\nkishiking\nkiss1191\nkiss1234\nkiss12345\nkiss123456\nkiss1314\nkiss1982\nkiss2000\nKISS2001\nkiss2002\nkiss2008\nkiss238569\nkiss263154180\nkiss5201314\nkiss7758\nkiss951623\nkiss9999\nkissakey\nkissallgirls$\nkissangel\nkissbaby\nkissfire\nkissfish\nkissgoodbye\nkissinger\nkissjing\nkisskill\nkissking\nkisskt12315\nkisslong\nKISSLOVE\nkisslovefei\nkissme123\nkissme1320\nkissme324\nkissme520\nkissme521\nKissme8!\nkissmebaby\nkissmebye\nkissmeha\nkissmenow\nkissmeok\nkissmeto01\nkissmiss\nkissmygirls$@\nkissmylove\nkissnight\nkissrain\nkissrose\nkisstherain\nkissyang\nkissyou123\nkissyoukiss\nkissyynpg\nkisszhou\nkistylin\nkisyunnwu1982\nkita1007\nkittenlx\nkitty2008\nkitty2899\nkitty2leo\nkitty2leo$#\nkitty31147\nkitty520\nkitty521\nkitty720\nkittyilove\nkittykitty\nkittylove\nkittymao\nkiyoharu\nkj0o3y9ht\nkj123456\nKj172420\nkj88ff43\nkjdd6688\nkjhg88gf66k\nkji7lj9uo\nKJK858486\nkjkjkj159\nkjl119472\nkjrhfioq7f8w\nkk000000\nkk041227\nkk123123\nkk12345678\nkk147258\nkk19800820\nkk19860404\nkk222222\nkk321321\nkk321521\nkk345678\nkk5201314\nkk520520\nKK640603KK\nkk841228\nkk871101\nkk888888\nkk999999\nkkdhdstx521\nkkeevviinn81\nkkiinngg\nkkjjhh1223\nKKK123123\nkkk1986522\nkkk990715\nkkkabc000\nkkkk1234\nkkkk5588\nkkkk8888\nkkkk9999\nkkkkkkkkk\nkkkkkkkkkk\nkkkkllll\nkkkkmmmm\nKKLLKKLL\nkkloveqq\nkklovezz\nkkndkknd\nkkringkk\nkkxxkkxx\nkl110110\nkl123654\nkl19821025\nkl5201314\nkl686200\nklail888\nkldrsykj\nklfo13318\nklhb158com\nklhmashu\nklinsman\nklinsmann\nklj8122766\nklmklm241\nklmy1177\nkLOMSJVI\nkluivert\nklvzglovean\nklw03080502\nklwj198399\nklwpklwp\nklzd626490\nkm123456\nkmplwh1992\nkms029044336\nkmzct631030\nkndyjxzsj\nknhv68y3\nknight007\nKnight123\nknight123456\nknisoguys\nknldPcai\nknowledge\nknowledge6\nknzj0429\nko861002\nkoalading\nkoalakoala\nkoalarbear\nkoalp1124\nkobe0823\nKOBE0824\nKobe1989\nKOBE2000\nkobe24forever!\nkobebryant24\nkobebryant8\nkobee123\nkobekobe\nkodakmax\nkoeisan9\nkoemasaki\nkof99mtt\nkofab1818\nkofland1\nkoichi0908\nkoichi51\nkoko0099plpl\nkoko1983\nkokokoomoo\nkoller21\nkoma1126\nkong1227\nkong123456\nkong1987\nkongchao\nkongdong\nkongguyoulan\nkonghuan\nkongjian\nkongjing\nKONGKONG\nkongliang\nkongling\nkonglingbo\nkonglinghui\nkonglong\nkonglong79\nkongming\nkongning3333\nkongpeng\nkongqing\nkongqingyu\nkongshan\nKONGTIAO\nkongxiang\nkongxincai\nkongyang\nkongyiji\nkongyong\nKONGyuan\nkongzhong\nkongzhongmxj\nkongzi2560\nkooxoo123\nkopokopo\nkorida1111\nkou10zhong\nkou960811\nkournikova\nkouxiangtang\nkp111111\nkp123456\nkpawjfhjiuvu\nKpmg1234\nkpmg2007\nkq162516\nkqw7mp5m\nkrizalid\nks123456\nKS40200795HOP\nks48fn93f9i84\nks83nv833dc\nksghsnmfgghn@126\nksgj2008\nkshh_815\nksm123456\nksqlx2006\nksw005223\nksw123456789\nkt791010\nkting123\nktlshy5172\nktwm17998hm\nkuafu8848\nkuaidian\nkuaijishi\nkuaikuai\nkuaikuailele\nkuaile111\nkuaile1992625\nkuaile2008\nkuaile2009\nkuaile2010\nkuaile365\nkuaile520\nkuaile521\nkuaile88\nkuaile99\nkuaile999\nkuailebaobei\nkuailedewo\nkuailejiuhao\nkuailele\nkuailema\nkuailemeiyitian\nkuailenvhai\nkuaileshenghuo\nkuailetianshi\nkuaileyisheng\nkuandai520\nkuang123\nkuang850807\nKuang_ecjlb_2009\nkuangbiao\nkuangdao\nkuangfei\nkuangfeng\nkuanghaihua\nkuanghua\nkuangkuang\nkuanglan\nkuanglei\nkuanglong\nkuangquanshui\nkuangren\nkuangshan\nkuangsue\nkuangwei\nkuangxiang\nkuangxiang88\nkuangxiao\nkuangxuan\nkuankuan\nkuanrong\nkuboolai\nkudingcha\nkudoshinichi\nkuer1204\nkujinganlai\nkukumalu\nkukuxier\nkulankulan\nkulapika\nkulooooo\nkun123456\nkun84698\nkun98127\nkunlunshan\nkunmeng365\nkunnuo123456\nkunpeng0628\nkunzhilian\nKURAKIMAI\nkurokado\nkurtcobain\nkusanagi\nkuxun128\nkuykuykuy\nkuytkani\nkvov0609\nkwepthnn\nkwong1903\nkwwlkwwl\nkx123456\nkxbbc007\nkxkc84bnwf\nKxsxx10d97\nky123456\nkyj5201314\nkylinjie\nkym19891112\nkymlon@sina.com\nkyokofukada\nKysFy2xd87\nKysFy2xd97\nKyswx10d97\nKyswx10e97\nKyswy11e97\nKytEy2xd98\nKytFy2xd97\nKytFy2xd98\nkyzhongJOEY\nkz123456\nkzb8980052\nKztEy2xd98\nKztEy2xe98\nKztEz2xe98\nl0000000\nl00000000\nl020903gp113\nl06555586322\nl091nw1n\nl0k9j8h7\nl0RaYdhxrm\nl0RaYdhxrn\nl0RaYdhyrn\nl0RaZdhyrn\nl0SaZehyrn\nl0ve.sun\nl1111111\nl11111111\nl111333n\nl1120000\nl11f99s11\nL123123123\nL1234567890\nl123c456\nl123l123\nl12i2u5miao\nl1314521\nl19821024\nl19861228\nl19880126p\nl1c2j3s4c5l6\nl1l1l1l1\nl1m73659wo\nl1o2v3e4\nl1u2c3k4y5\nl20020404y\nL20030529JCH\nl200777z\nl2282258\nl2345678\nl23456789\nl23733331\nl2816360\nl301067f\nl31y36h41ilt\nl33230011\nl3396815\nl3831946\nl47852369\nl4k3e1j2\nl5211314\nl5861065\nl6189029\nl6224447\nl6352034\nl6606009\nL675391361\nl6y8lyljj\nl7025627\nl7205y8926h\nl7654321\nl7758258\nl7758521\nl77x06m27\nl7956815\nL80980510\nl81259544\nl828567b\nl8334613\nl83q0331\nl8401691\nl88888888\nl97w97wnet\nl984l688\nl987654321\nl98lO523\nl98lollw\nl_feng@))!\nla123456\nlabaicai\nLabDancer\nlabifenbi\nlachdanan\nlacrimosa\nladeng911\nlady7676\nladybaby\nladybird\nladyfirst\nladygaga\nladylady\nlafrance\nlai123456\nlai820221\nlai881600\nlaibagefei\nlaihao123\nlaijiaqia\nlaijie888\nlaikankan\nlailai123\nlailai521\nlailaiah\nlailailai\nlailaiququ\nlailiang\nlailixia\nLAINAS369\nlaiqiang\nlaisuo01402029\nlaix7007\nlaixiang\nlaiyinhate\nlajilaji\nlajiwang\nlake8008\nlakelake\nlakers24\nlala1234\nlala123456\nlalakers\nlalala123\nlalalalala\nlalashou\nLAM_qfzkbs56hjl\nlamarsoul\nlamia5582\nlamshijun\nlan19860126\nlan19871217\nlan2008611\nlan654012\nlan72527\nlanbaoshi\nlancaster\nlancelot\nlancheng\nlanchong\nland3000\nlandhope\nlandland\nlandlord\nlandscape\nlandwind\nlandy0819qjl\nlaner100\nlaner520\nlanewang\nlanfei0410\nlang1234\nlang237395617\nlang791130\nlang830329\nlangchao\nlangdang\nlangduhua\nlangfang\nlangfanyun\nlanghuan\nlangjing\nLangJiTianYa\nlangkejianxin\nlanglaile\nlanglong\nlangmanmanwu\nlangqing\nlangrisser\nlangrun717\nlangtuteng\nlanguage\nlanguang\nlanguann\nlangwang\nlangwith\nlangwojiaoyu\nlangxing\nlangyajun\nlangying\nlangyong\nlangyu68\nlangyuan\nlangzhong\nlangzi520\nlangzi8610\nlanhaisheji\nlanhaitun\nlanhaoming\nlanhua860912\nlanhuacao\nlanhuazhi22\nlanjian7790111\nlanjingling\nlanjinzuhe111\nlanjue881016\nlanlan123\nlanlan1314\nlanlan19840502\nLanlan1987\nlanlan521\nlanlan88\nlanlan99\nlanlanax891105\nlanlanlan\nlanlanlanlan\nlanlansu\nlanlantian\nlanlanwy1979\nlanlianhua\nlanlingyan\nlanmeigui\nlanmeimei\nlanmutouxn800618\nlanqiugongyuan\nlanse123\nlansetiankong\nlanseyangguang\nlanseyaoji\nlanseyouyu\nlanseyuyu\nlanshine\nlansidai\nLANTIAN123\nlantianbaiyun\nlanwei99\nlanxiang\nlanxin-428\nlanxin1234\nlanxinyu\nlanxueer\nlanxueren\nlanyangyang\nlanyanlei\nlanyechuan\nLANYU2008\nlanyu316\nlanyueliang\nlanyunuo369\nlanzhu1314520*\nlaobaixing\nlaobalaoma\nlaocheng\nlaoda123\nlaodu123\nlaofu888\nlaogong5211314\nlaogongailaopo\nlaogongaiwo\nlaogonglaopo\nlaohu123\nlaohu520\nlaohuang\nLAOHUJIAO\nlaojiang\nlaojintou\nlaojiu767\nlaoliang\nlaolilaoli\nlaolishi\nlaolvqusi\nlaonanren\nlaopan776320\nlaopf401\nlaopo123\nlaopo1314\nlaopo131421\nlaoPO5211314\nlaopo7758521\nlaopoaini\nlaopoaiwo\nlaopodaren\nlaopohao\nlaopolaog0ngaini\nlaopolaogong\nlaopolaopo\nlaopolaopowoaini\nlaopoWOAINI1314\nlaoqiang\nlaorenjia\nlaorenyuhai\nlaosan123\nlaoshiren\nlaoshu1981\nlaoshu3xiao\nlaoshuaidami\nlaosilaisi\nlaosun1409\nlaotaipo\nlaowu1110\nlaowu123\nlaoxiang\nlaoyang123\nlaozhang\nlaozheng\nlaozhuang\nlaozi007\nlaozi123\nlaozi124\nlaozi57124\nlaozidiyi\nlaozifan\nlaqiaodui\nlarcencial\nlarcenciel\nlaser8508\nlaserjet\nlassie0126\nlastdance\nlastsmiler\nlatitude\nLAuDz2xe98\nLAuDz3xe98\nlaughing\nlaughter\nlaure1222\nlaureshang\nLAVENDERJZ\nlavieenrose\nlaw123456\nlaw24802\nlaw4501866\nlaweryu123\nlawyer123\nlaxness133\nlazio0831\nlaziolazio\nlaziowin\nlazybones\nLB111111\nlb123321\nlb1234567\nlb123456789\nlb12520530\nlb3217508\nlb5201314\nlb540627\nlb738950426\nlb780805\nlb790828\nlb9yc9u0tt\nlb9zc9u0tt\nlb9zd9u0tt\nlb9zdau0tt\nlbb522522\nlbdzjzlzq\nlbf715891\nlbloveyy\nlc308308\nlc5201314\nlc520lzy\nlc565656\nlc57447457\nlc666666\nlc8320666\nlc881125hj\nlc9Adav1ut\nlc9zdau1tt\nlc9zdav1tt\nlc9zdav1ut\nlca19881219\nlcc123456\nlccloveu\nlcf123456\nlcfnsygdbl\nlch000715\nlch12345\nlch123456\nlch830726\nlchcmlhc\nlchi0128\nlcj123456\nlcl123456\nlcl21999\nlcl761220\nlclj100433\nLCM236524082\nlcm6524082\nlcnlcnlcn\nlcp1991.\nlcw123456\nlcx04041\nlcxlcxlcx\nlcxq518621\nlcy123456\nlcy5201314\nlcy69198000\nlcy740116\nlcylcylcy\nld135246\nld197197\nld197848\nld20060601\nld3789716\nld5201314\nld5225391\nld918823\nldc531960\nldg13717079697\nldg198788\nldh123456\nldj269[]\nldl164142\nldm55292045\nldq2002303\nlds123456\nldw123456\nldx123456\nldxswzjwb\nldy123456\nldylaoda\nldz1516124\nldzhyysjm\nle123456\nLEADER1226\nleafleaf\nleafwang817\nleahdizon\nLearninG\nleasa123\nleaslie529300\nleave3al\nleavenic\nlebaishi\nlebronjames\nlechengwang\nLECHEZHE\nLEdi7484\nlee0577505\nlee100187\nlee12345\nlee123456\nlee1983414\nlee770311\nlee7758521\nleeandlili\nleedonghae\nLEEHOM0517\nleehom123\nleehom517\nleehom520\nleehom76\nleehomwang\nleehyolee\nleejaewon\nleejaewood\nleejiping\nleejunghyun\nleejunki\nleekeshu\nleelazy1986\nLEELEELEE\nleeminwoo\nleesungjin\nleexh476819\nleeyoung\nleezeng168\nlefthand\nlegend123\nlegenddearbook\nlegendlegend\nlegendzhp\nlei11579\nlei123123\nlei198702\nlei30guang\nlei5201314\nlei53775\nleiaiwei\nleibaobao\nleida19830814\nleidakeji\nleidonghao\nleigaoping\nleihuang\nleijie520\nleijingjing\nleilacheng1983\nleile2009\nleilei1029\nleilei123\nleilei1986\nleilei1987\nleilei88\nleileilei\nleiliang\nleiming881223\nleipeng1989\nleiqiang\nleishenabq\nleishifei8349\nleisurely\nleiwoaini\nleixin02\nleixue81\nleiyu520\nleizhang\nlele115609\nlele123456\nlele2000\nlele2001\nlele2008\nlele5201314\nlele52069\nlele770103\nleleaini\nlelebendan\nLELEDENG\nlelehappy\nlelelele\nlemay780417\nlemon123\nlemon1314\nlemon515\nlemon520\nlemonkcc8\nlemonleaf\nlemonlemon\nlemontea\nlemontree\nlemontse\nlena8277\nlendlice\nlene1016\nlenemarlin\nleng1314520\nlengbing\nlengfeng\nlengjian\nlengjing\nlengkudaodi\nlengleng\nlengling\nlengqing\nlengshan\nlengsong\nlengyuleng\nlengyumk\nlengyuye\nlenorehu\nlenovo2008\nlenovo435ml\nlenovolenovo\nleo123456\nleo2kitty\nleo5674383\nleohh065184\nleoladeng\nleoleoleo\nleon058802\nleon0822\nleon1211\nleon123456\nleon1980\nleon1982\nleon198646\nleon2000\nleon2002\nleonbeyond\nleonchen\nleonchou\nleonhart\nleonia88\nleonleon\nleonlove\nleonmarkbijin\nleonshaw\nleontime\nleonwang\nleonyang\nleop123456\nleorenecho\nleozhang\nleprechaun\nleshang007\nLESley0915\nleslie0912\nleslie12956\nLESLIE1956\nleslie19560912\nleslie1956912\nleslie2003\nleslie520\nLeslie560912\nleslie912\nlesliecheung\nletiansong\nLetitbe.\nletmedie\nletmedo96301\nletmefly\nletmein123\nletmepass\nletmesee\nletsescape\nletup123\nlevili901203\nlevirlj1222\nlevy1892\nlexiaoyao\nleyiju135\nlf007626\nlf030305021\nlf111111\nlf123456789\nlf165570271\nlf19840823\nlf5201314\nlf622622\nlf780630\nlf7986625\nlf8023xy\nlf861223\nlf880501\nlf890218\nLFF520520\nlfgxp12345\nlfh123456789LFH\nlfjclnzfg\nlfl851003\nlflovehjzd\nlfprxone\nlfq123456\nlfrwmzssch\nlfsn96263\nlfx666666\nlfy123456\nlfy198451\nlfz12345\nlg000000\nLG123123\nLG123456\nlg123456789\nlg1314520\nlg194196\nlg2008qq\nLG5201314\nlg566624\nlg7758521\nlgb127810\nLGD6339726\nlgdsforu\nlgh123456\nlgh8850521\nlghxjjia\nlgj123456\nlgl8068045\nLGLGLGLG\nlgllovedsn\nlglovesm\nlglp1407\nlgls1981\nlgm84333\nlgm941641\nlgp123456\nlgp19680606\nlgp33320\nlgq123456\nlgqcdqcx\nlgs193700\nlgt210lgtcml\nlgwoaini\nlgx120906\nlgx876292\nlgy123456\nLGY18440\nlgy890528\nlh026636\nlh123123\nlh123456789\nlh19820212\nlh20092009\nlh5201314\nlh5541283\nlh556238\nlh666666\nlh880712\nlh880713\nlhb123456\nlhb490122\nlhbdjnyd\nlhbx256864036\nlhc123456\nlhc1314qyq\nlhclhclhc\nlhe07181219\nlhf801228\nlhf901709\nlhfsxl2005\nlhg770713\nlhj123456\nlhj74331\nlhl123456\nlhl202948\nlhl840620lxb\nlhm123456\nlhm19850823\nlhm83016\nlhongbin\nlhp123456\nlhp2305047\nlhq123456\nlhqhq01261206\nlhqlhq121\nlhrdlwyysf\nlhs123456\nlhs666666\nlhss1109\nlhsxiangnian\nlht123456\nlhw123456\nlhy123456\nlhy16s5q\nlhyy3461943\nlhz123456789\nLHZ197956\nlhz6357659\nli.15946032549.\nli000000\nli011006\nli109858713\nli111111\nli111222\nli112233\nli123321\nli1234560\nli123654\nli123789\nli123hong456\nli13133215288\nli13141516\nli1314521\nli147258\nli159357\nli197331\nli1981125\nli1984218\nli19860901\nli19860922\nli198649\nli19870308\nli198987king\nli1jia20\nli1neng2\nli20030623\nli20040303\nli211314\nli2891311\nli301078\nli321123\nli321321\nli3506790\nli405383583\nli51140951\nli520520\nli521521\nli521616\nli5951507\nli64157020\nli654321\nli660618\nli666666\nli666888\nli7180000\nli777879\nli778899\nli789456\nli798895\nli800318\nli81qin1\nli82520sha\nli8341ly\nli851227\nli870125\nli880418\nli881002\nli888888\nli8940001\nli999999\nliaijing\nlian04686971521\nlian123456\nlian1987\nlian456123\nlian4ever\nlian66192801\nlianaibaobao\nlianaiing\nlianbang\nlianbing\nlianchen\nliancheng\nliandong\nlianfang\nlianfeng\nliang000\nliang001\nliang007\nliang1234\nliang1237\nliang12489\nliang1314\nliang1974\nliang1980\nliang1982\nliang1983\nliang1984\nliang1985\nliang1986\nliang1987\nliang1988\nliang1989\nliang1990\nliang2000\nliang2008\nliang2009\nliang6881\nliang7643\nliang789\nliang888\nLiang999\nliang_3214\nliangall\nliangbao\nliangbin\nliangbing\nliangchao\nliangchaowei\nliangchen\nliangcheng\nliangdan\nliangdian\nliangdong\nliangfang\nliangfei\nliangfen\nliangfeng\nlianggang\nlianggeren\nliangguang\nlianghai\nlianghan\nlianghao\nlianghong\nlianghua\nlianghui\nliangjia\nliangjian\nliangjiaxu\nliangjie\nliangjiewei\nliangjin\nliangjing\nliangjingjing\nliangjingru\nliangjmh\nliangjuan\nliangjun\nliangkai\nliangkun\nlianglei\nliangli123\nliangliang123\nliangliang520\nlianglili\nlianglin\nliangling\nlianglong\nliangmei\nliangMENG\nliangmin\nliangming\nliangnan\nliangnba\nliangning\nliangpeng\nliangping\nliangqian\nliangqin\nliangQING\nliangquan\nliangren\nliangrong\nliangrui\nliangruteng\nliangshan\nliangsheng\nliangshi\nliangshiyu\nliangshu\nliangshuai\nliangshuang\nliangsong\nliangtao\nliangtian\nliangting\nliangwang\nliangwen\nliangwen8378616\nliangxia\nliangxiao\nliangxin\nliangxing\nliangxinyi\nliangxuan\nliangxue\nliangya2005\nliangyan\nliangyang\nLIANGYANHUA\nliangyao\nliangying\nliangyong\nliangyongqi\nliangyou\nliangyuan\nliangyue\nliangyun\nliangzai\nliangzhang\nliangzhao\nliangzhen\nliangzheng\nliangzhi\nliangzhilaohu\nliangzhu\nliangzi1213\nlianhequshi\nlianhuan\nlianjian\nlianjing\nlianlian\nlianling\nlianmeng\nlianming\nlianpeng\nlianping\nlianqing\nlianqu1990\nlianrenweiman\nliantian\nlianting\nliantong\nlianxiang\nlianxianglaji\nlianxiao\nLIANXING\nlianxini\nlianxuehan\nlianyi0613\nlianying\nlianyuan\nlianyungang\nlianzhan\nlianzhong\nlianzhou\nLiao0001\nliao1021\nliao1234\nliao123456789\nliao1979\nliao1986\nliao1988\nLiao19880406\nliao5201314\nliao5566\nliao747529\nliao88qmwn88\nliaocheng\nLIAODONG\nliaofeiyan\nliaofeng\nLIAOGANG\nliaohong\nliaohuan\nliaojian\nliaojiao\nliaojing\nliaojq1984\nliaojuan\nliaoliang\nliaoliao80\nliaoming\nliaoning\nLIAOPENG\nliaoping\nliaoqian\nliaoqing\nliaorong\nliaoshufa\nliaoshuo\nliaotian\nliaowang\nliaoxiang\nliaoxiao\nliaoxiaoqi\nliaoxuan\nliaoyang\nliaoying\nliaoyong\nliaoyuan\nliaozhen\nliauan007\nliawenli\nlibaibai8\nlibaitian\nlibamboo\nlibaolibao\nlibaosheng\nlibeibei\nliberate\nlibin-liu=88\nlibin123\nlibin19800818\nLIBIN521138\nlibinbin\nlibing123\nlibinlibin\nlibo1234\nlibo123456\nlibolibo\nlibra2010\nlibrasasa\nlicai800\nlicai800com\nLICAIXIA\nlichangjun\nlichangliang\nlichangqing\nlichangwei\nlichangyu\nlichao123\nlichao142519\nlichao520\nlichao521\nlichaoaini\nlichen123\nlichen520\nlichen619127\nlichenchen\nlichengjie\nlichenglong\nLICHENXI\nlichenyang\nlichking\nlichlich\nlichuang\nlichunhong\nlichunhua\nlichunlei\nlichunlin\nlichunming\nlichunqing\nlichunxu\nlichunyan\nlichunyang\nlichunyu\nlidalong\nlidan0229\nlidan123\nlidan520\nlidan521\nlidanlidan\nlidapeng\nlidayong\nlidd588520\nlidd695825\nlideqing\nlidesheng\nlidingyu\nlidong123\nlidong520\nlidong521\nlidongdong\nlidonghai\nlidonghua\nlidonghui\nlidongkai\nlidongming\nlidongxu\nliebedich\nliebeff578290\nlieberyan\nliebstmich\nlierenqiqi\nlieutenant\nlifan625116992\nlifanbin\nlifang520\nlifangfang\nlife1111\nlife2009\nlife2199\nlifeall1\nlifegoeson\nlifei1008\nlifei123\nlifei1234\nlifei520\nlifei521\nlifeifei\nlifeilifei\nlifeilifei3\nlifeisgood\nlifeixiang\nlifelife\nlifelive\nlifelover\nlifeng007zxc\nlifeng123\nlifeng520\nlifeng521\nlifeng97\nlifesgood\nlifestyle\nlifetime\nlifoc289\nlifung97\nlifuqiang\nLIGANG123\nligang1985\nligang229361\nligaofeng\nligenshui\nlight123\nlightblue\nlightframe\nlighting\nlightrain\nliguandong\nliguang18\nliguanghua\nliguanghui\nliguangming\nliguangyan\nliguangyu\nliguannan\nliguihong\nliguobin\nliguodong\nliguofeng\nliguohua\nliguojing\nLIGUOJUN\nLIGUOliang\nliguoping\nliguoqiang\nliguoqing\nliguowei\nliguoxin\nliguoyan\nlihai123\nlihaibao\nlihaibin\nlihaibing\nlihaifei\nlihaifeng\nlihaihong\nlihaijian\nlihaijun\nlihailiang\nlihailin\nlihailong\nlihaiming\nlihaiping\nlihaiqing\nlihaitao\nlihaixia\nlihaiyang\nlihaiying\nlihaiyun\nlihanguo78\nlihanxiao\nlihao123\nlihao19840508\nlihao520\nlihao541\nlihaocheng\nlihaojie\nlihaolihao\nlihaoran\nlihaotian\nlihaowen\nliheping\nlihong123\nlihong521\nlihongbo\nlihongchen\nLIHONGJI\nlihongjie\nlihongjun\nlihongli\nLIHONGliang\nlihonglin\nlihongqing\nlihongtao\nlihongwei\nlihongwu\nlihongyan\nlihongying\nlihongyu\nlihongzhi\nlihs8504030\nlihua121\nlihua123\nlihua163\nlihua1977\nlihua520\nlihua7498\nlihuahua\nlihuajie306\nlihuanhuan\nlihuawei\nlihui123\nlihui123456\nlihui131150\nlihui520\nlihui521\nlihuifang\nlihuifeng\nlihuihui\nlihuijie\nlihuijing\nlihuijun\nlihuilihui\nlihuimei\nlihuimin\nlihuiming\nlihuiting\nlihuiwoaini\nlihuixian\nlihuiying\nlihuiyong\nliil123456\nliji550225\nlijia-jun1942\nlijia123\nlijia1986\nlijia2318572\nlijia520\nlijia521\nlijiabin\nlijiacheng\nlijiadehao\nlijiafei\nlijiafeng\nlijiahao\nlijiahong\nlijiahui\nlijiajia\nlijiajian\nlijiajie\nlijiajun\nlijiali00\nlijialiang\nlijialijia\nlijialin\nlijialing\nlijialong\nlijiaming\nlijian001\nlijian0612\nlijian1021\nlijian123\nlijian520\nlijian521\nlijian@38\nlijianan\nlijianbin\nlijianbo\nlijianfeng\nlijianghua\nlijiangtao\nlijianhui\nlijianing\nLIJIANJUN\nlijianlin\nlijianlong\nlijianmin\nlijianming\nlijiannan\nlijianping\nlijianqi\nlijianwei\nlijianwen\nlijianxin\nlijianxun\nlijianyong\nlijianyu\nlijiarui\nlijiawei\nlijiawen\nlijiaxin\nlijiayuan\nlijichao\nlijie003429\nlijie023\nlijie123456\nlijie1982\nLIJIE2008\nlijie520\nlijie521\nlijielijie\nlijifeng\nlijiluob\nlijin123\nlijin520\nlijin86694815\nlijinchao\nlijincheng\nlijinfang\nlijinfeng\nlijing123456\nlijing1982\nlijing1987\nlijing315\nlijing520\nlijing521\nlijingbo\nlijinghui\nlijingjing\nlijinglei\nlijingli\nlijinglijing\nlijingtao\nlijingwei\nlijingwen\nlijingya\nlijingyi\nlijingyu\nlijingyuan\nlijingyun\nlijinhai\nlijinhong\nlijinhua\nlijinhui\nlijinjin\nlijinlijin\nlijinling\nlijinlong\nlijinping\nlijinquan\nlijinsong\nlijinwei\nlijinxin\nlijinxing\nlijitong\nlijiyuan\nlijl1109\nlijuan123\nlijuan520\nlijun0907\nlijun1981\nlijun19820717\nlijun1984\nlijun1985\nlijun520\nlijun521\nlijunfeng\nlijunhong\nlijunhua\nlijunhui\nlijunjie\nlijunjun\nlijunlijun\nlijunlong\nlijunnan\nlijunqing\nlijunwei\nlijunzhi\nlikai0211\nlikai123\nlikai96321\nlikaifeng\nLikaihua\nlikailikai\nlikaiwei\nlikaiyang\nlike123123\nlike123456\nLIKE1314\nlike1989\nlike730309\nlikebeer\nlikelove\nlikeming\nlikeqiang\nlikexing\nliko02102t\nlikuen1986\nlilac123\nlilacchan\nlilacjudy\nlilan3027\nlilanlan\nlilaoshi\nlilawang\nlilei123\nlilei520\nlilei521\nlilei789\nlilei92106356\nlileilei\nlileililei\nlili1202\nlili1234\nlili12345\nlili12li\nLILI1314\nlili19790909\nlili1981\nlili1983\nlili1984218\nlili1986\nlili1987\nlili1988\nlili2006\nlili2008\nlili2009\nlili520lili\nlili5211314\nlili6767\nlili840519\nlilian83\nliliang123\nliliang520\nliliangfei\nLILIANJIE\nlilichen\nlilicheng\nlilidong\nlilifeng\nlilihong\nlilijiayou\nlilijing\nlilijuan\nlilili0532\nlililove\nliliming\nlilin123\nlilin1982\nlilin228\nlilin520\nlilinfeng\nliling123\nliling520\nlilingen\nlilinghqg\nlilingling\nLILINGYAN\nlilinlin\nlilinno1\nliliping\nliliqiang\nliliwang\nliliwhite\nliliwoaini\nliliying\nlilizhang\nlilizhou\nlillyde51\nlilo99887788\nlilong123\nlilulilu\nlilun+1978\nlilunzhi\nlily000119\nlily0204\nlily0612\nlily0822\nlily1012\nlily1027\nlily1106\nlily1121\nlily1212\nlily1234\nlily123456\nlily123714\nlily1314\nlily1984\nlily2000\nlily2008\nlily2009\nlily3128\nlily4422246\nlily5201314\nlilychen\nlilyfeng\nlilyheart\nlilyhuang\nLILYLILY\nlilypassword\nlilysa212\nlilyshopping\nlilytang\nlimanman\nLIMAO418\nlimaojin\nLiMaoMao\nlimaosheng\nlimei520\nlimeihui\nlimeijun\nlimeiling\nlimeng123\nlimengaini\nlimengjiao\nlimengmeng\nLIMENGNA\nlimengyao\nlimi123456789\nlimiao520\nlimiaomiao\nlimig2436\nlimin112\nlimin123\nlimin520\nliming007\nliming0319\nliming123\nliming520\nliming521\nlimingbo\nlimingda\nliminghua\nliminghui\nlimingjia520\nlimingjie\nlimingjing\nlimingqi\nlimingshan\nlimingxuan\nlimingyang\nlimingyu\nlimingyue\nlimingzhen\nliminlimin\nlimpbizkit\nlimu1661\nLIN090812\nlin123123\nlin12345\nLIN123456789\nLin1314520\nlin133076\nlin158719890913\nlin1min2wei3\nlin20034288\nlin2333513lin\nlin5000000jia\nlin5211314\nlin65163765\nlin675201\nlin68868\nlin741108\nlin760615ming\nlin800517\nlin840228\nlin840228029\nlin841119\nlin84yong\nlin851221\nlin8599022\nlin880318\nlin910126\nlin@buaa\nLina1018\nlina1234\nlina123456\nlina358224374\nlina5201314\nlinalina\nlinan123\nlinanlinan\nlinannan\nlinawoaini\nlinc8ifm\nlincaian\nlinchang\nlinchen19921215.\nlincheng\nlinchong\nlinchuan\nlinchuang\nlinchuxia\nlinda1006shmily\nlinda123\nlinda123456\nlinda1320\nlinda1984\nlinda2005\nLinda2008\nlinda210497\nlinda263\nlinda520\nlinda521\nlinda628\nlinda711\nLINDA888\nlinda9085\nlindaiyu\nlindaking\nlindalee\nlindalinda\nlindaliu\nlindawang\nlindslin\nlineage2\nlinechen\nliner90201\nlinfangdun\nlinfeihong\nlinfeng123\nlinfeng331\nlinfeng520\nlinforever\nling-sheng\nling0000\nling00seven\nling0240\nling1129\nling1234\nling123456789\nling1314\nling1982\nling1983\nling1984\nling1985\nling1986\nLING1986120\nling1987\nling2003\nLING2008\nling2009\nling2468\nling4731\nling5200\nling5203344\nling527589\nling6666\nlingbell\nlingbing\nlingbo1988\nlingboli\nlingboling\nlingchen\nlingcheng\nlingdang\nlingdian\nlingdong\nlingduyu\nlinger520\nlingf911\nlingfan8\nlingfang\nlinggang\nlingguang\nlinghan19600818\nlinghong\nlinghuchong\nlingjian\nlingjiang\nlingjing\nlingjuan\nlingkong\nlingling0\nlingling00\nlingling7\nlinglingling\nlinglong\nLINGLUAN\nlingmeiyingke\nlingmeng\nlingmiao\nlingming\nlingning\nlingpeng\nlingqian\nlingqiang\nlingqiao\nlingqing\nLINGSHUANG\nlingsiqi\nlingsong\nlingtian\nlingting\nlingtong\nlinguang\nlinguangwu\nlinguihua112800\nlinguistics\nlinguowei2\nlingxiang\nlingxiao\nlingxiayidu\nlingxiner\nlingxing\nlingxuan\nlingyang\nlingying\nlingyong\nlingyu521\nlingyuan\nlingyunzhi\nlingzhen\nlinhao110\nlinhao631\nlinhaooo\nlinhongdi\nlinhuang\nlinhuaqing\nlinhuhu22\nlinhuhu24\nlinhuhu25\nlinhuhu26\nlinhuhu27\nlinhui456\nlining123\nlining521\nlining841008\nlinjiahui\nlinjiajia\nlinjiali\nlinjian123\nlinjiang\nlinjianghua\nlinjianren\nlinjiashu\nlinjiaxin\nlinjiayu\nlinjie520\nlinjingjing\nlinjinshan\nlinjunxin\nlink9919\nlinkexuan\nlinkgoal\nlinklink\nLinKlnqd\nlinlan19861117\nlinli520\nlinliang\nlinlihua\nlinlijun\nlinlin00\nlinlin12\nlinlin1234\nlinlin1314\nlinlin200612\nlinlin502556\nlinmeimei\nlinmouren\nlinqiang\nlinqin20\nlinqingxia\nlinqiong\nlinquanyu\nlinran1256\nlinright\nlinrongqing\nlinsen03\nlinsheng\nlinshili\nlinshuai\nlinshuang\nlinshuying1966\nlinsilin\nlinsitong\nlintiantian\nlintianying\nlintingli\nlinux2323\nlinuxdirk\nlinuxsky\nlinuxunix\nlinwei123\nlinweijie\nlinweijun\nlinweiwei\nlinweiwei001\nlinwenchuan\nlinwensheng\nlinwensong\nlinwukkk\nlinxi1217\nlinxi1717171717\nlinxi1988\nlinxiang\nlinxiaofeng\nlinxiaojun\nlinxiaoli\nlinxiaomei\nlinxiaoyu\nlinxing7777\nlinxinru\nlinxiong\nlinxlinj5201314\nlinyanlinyan\nlinYAO524\nlinyaxin\nlinyi123\nlinyichen\nlinyifan\nlinyouqing\nlinyuanfei00\nlinyuanjin\nlinyuanjin2050\nlinyueru\nlinyuhui\nlinyunci\nlinyuxian\nlinzhang\nlinzheng\nlinzhenwei\nlinzhijie\nlinzhiling\nlinzhiying\nlinzi521\nlion2000\nlion223094\nlionheart\nlionlion\nlionlovecat\nliontiger\nlioudehua\nlioufs8w\nlioujian\nlioujing\nliounian\nliouveiqia\nliouyang\nlipan123\nliPANhua986\nlipeipei\nlipeng110\nlipeng1127\nlipeng123\nlipeng2332561\nlipeng520\nlipeng521\nLIPENGFEI\nlipenggff\nliping123\nliping520\nliqian520\nliqiang520\nliqiankun\nliqianli\nliqianqian\nliqiliqi\nliqin123\nliqin520\nliqing123\nliqing521\nliqingbo\nliqingfeng\nliqinghua\nliqinghui\nliqingming\nliqingqing\nliqingwei\nLIQINGYUAN\nliqingzhao\nliqiong070809\nliqipeng\nliqitianye\nliqiushi\nliqunliqun\nliquorhan\nliren520\nlirenjie\nlironglirong\nlirui123\nlirui520\nliruifeng\nliruihua\nliruijie\nliruilirui\nliruixue\nlis4815293\nlisa0520\nlisa1123\nlisa123456\nlisa131420\nlisa2009\nLISABING\nlisachen\nlisainan\nlisalisa\nlishan520520\nlishanshan\nlishaobai\nlishaohua\nlishaojie\nlishaojun\nlishaoxi\nlishasha\nlishengli\nlishengnan\nlishi521\nLISHIJIE\nlishijun\nlishikai\nlishilei\nlishiliang\nlishimei\nlishimin\nlishiming\nlishinan\nlishiqiang\nlishiwei\nlishiying\nlishouwei\nlishu1998\nlishuai123\nlishuang123!\nlishujie\nlishuping\nlishuwei\nlishuwen\nlisijian\nLISIOKOK\nlisiyang\nlisiyuan\nlisonglin\nlisongming\nlisongtao\nliss13026\nlistening\nlistlist\nlitaibai\nlitao123\nlitao520\nlitaolitao\nlitengfei\nliterate\nliterature\nlitiantian\nlitianya\nlitianyi\nlitianyu\nlitie1977518\nlitiejun\nliting520\nlitingting\nlitt781210\nlitte125018\nlittle00\nlittle123\nlittle18jo\nlittleant\nlittlebaby\nlittlebear\nlittlebird\nlittleboy\nlittlecat\nlittledog\nlittlefish\nlittlefox\nlittlegirl\nlittlemermaid\nlittlemonkey\nlittlemoon\nlittlemouse\nlittlepig\nlittleprince\nlittlerabbit\nlittlerain\nlittlestone\nLIU000000\nliu06hua25\nliu111111\nliu123123\nliu123321\nliu1234567\nliu12345678\nliu1234567890\nliu123654\nliu123liu\nliu12689\nliu128128\nliu1314521\nliu147258\nliu168168\nliu168liu\nliu197631\nliu1983bo\nliu19840610\nliu19840714\nliu198792\nliu1988214ping\nliu1989520\nliu1989525\nliu200388\nliu6231o4\nliu6291402\nliu666666\nliu670315ls\nliu690525\nliu7079503\nliu729382\nliu7645157\nliu7758521\nliu807891\nliu85411\nliu870310\nliu87966985\nliu888888\nliu891121\nliu98421\nliu988988\nliuadeng\nliuaihua\nliubaiyi521\nliubaiyu\nliubaohua\nliubawa001\nliubiao820504\nliubin123\nliubin520\nliubing123\nliubing961016\nliubingqi\nliubo0517\nliubo123\nliubo168\nliubo520\nliuboliubo\nliubotao\nliubowen\nliucaiyun\nliuce54823\nLiuchang\nliuchao123\nliuchengwu\nliuchenxi\nliuchong\nliuchuan\nliuchuanfeng\nliuchuang\nliuchunling\nliuchunyan\nliuchunyu\nliuclin123\nliudajun\nliudaliuda\nliudan123456\nliudan520\nliudandan\nliudapeng\nliudawei\nliuding3344~!\nliudong123\nliudongdong\nliudonghui\nliudongmei\nLiuey211314\nliufangfang\nliufei123\nliufei1987\nLIUfei520\nliufeifei\nliufeng123\nliufeng520\nLIUfenlan1983\nliugang123\nliugeling\nliuguang\nliuguanghui\nliuguodong\nliuguoqiang\nliuguoqing\nliuhaibo\nLIUHAIFENG\nliuhaijian\nliuhaijun\nliuhailin\nliuhailong\nliuhaitao\nliuhaixia\nliuhaiyan\nliuhaiyang\nliuhaiying\nliuhaiyu\nliuhan1229\nliuhao123\nliuhao521\nliuhaojie\nliuhaoran\nliuhebuc\nliuhegou\nliuheqing\nliuhong19870104\nliuhong9\nliuhongbin\nliuhongbo\nliuhonglei\nliuhongli\nliuhongmei\nliuhongtao\nliuhongwei\nliuhongyan\nliuhongyu\nliuhua123\nliuhuan123\nliuhuang\nliuhuanhuan\nliuhuawei\nliuhui123\nliuhui520\nliuhui521\nliuhuilong\nliuhuimin\nliuhuodie\nliujason\nliujfhuangsl\nLiujia123\nliujia520\nliujia521\nliujiajia\nLIUJIALI\nliujialin\nliujialiujia\nliujiaming\nliujian123\nliujian520\nliujianan\nliujianbo\nliujianfei\nliujianfeng\nliujiangtao\nLIUJIANGUO\nLiujianhua\nliujianhui\nliujianing\nliujianli\nliujianqiu\nliujianwei\nliujianXIN\nliujiaqi\nliujiawei\nliujiaxi\nliujiaxin\nliujiayi\nliujiayu\nliujibin\nliujie123\nLIUJIE520\nliujie521\nliujie99\nliujin1981\nliujin520\nliujing123\nliujing520\nliujingbo\nliujinghua\nliujingjing\nliujingqi\nliujingtao\nliujingyi\nliujingyuan\nliujinhua\nliujinhui\nliujinlong\nliujinsong\nliujinsuiyue\nliujintao\nliujinwei\nliujinxin\nliujinyu\nliujinzhu\nliujiong\nliujj888\nliujuan520\nliujun123\nLIUJUN1983\nliujun19880419\nliujun520\nliujunfeng\nLIUJUNHONG\nliujunhua\nliujunjie\nliujunjun\nliujunli\nliujunlove\nliujuntao\nliujunwei\nliukai123\nliukai3298608\nliukeran\nliukexin\nliukuiyue123\nliulande\nliulang123\nliulanggou\nliulanghan\nLIULANGLQM\nliulangren\nliulangzhe\nliulanLIULAN\nliulei123\nliulei1984\nliuli123\nliuli520\nliuli750426\nliuli9928\nliulian123\nliulian929\nliulidemima\nliulifang\nliulihong\nliulihua\nliulijia\nliulijie\nliulijuan\nliulijun\nliuliliuli\nliulimiao\nliulimin\nliuliming\nliulin123\nliulingling\nliulinlin\nliulinshi\nliulinzp\nliulipig\nliuliping\nliuliu123\nliuliu19\nliuliu520\nliuliu64642734\nliuliu66\nliuliu99\nliuliwei\nliuliwen\nliulixia\nliulixin\nliuliyang\nliuliying\nliuliyuan\nliulizhi\nliulu12188\nliulu123\nliuluming10\nliumangtu\nliumangwudi\nliumeiling\nliumeiyu\nliumen2han\nliumeng123\nliumengli\nliumin123\nliumin520\nliuming123\nLIUMINGHUI\nliumingmin\nliumingming\nliunanwdw\nliuniansishui\nliuningning\nliupeifeng\nliupeng123\nliupengfei\nliuping520\nliuqi123\nliuqi520\nliuqian123\nliuqiang320\nliuqianghua\nliuqianqian\nliuqiming\nliuqing123\nliuqing5\nliuqinghua\nliuqinghua05\nliuqingjun\nliuqingyun\nliuqiong\nliuqiuhong\nliuqiuju\nliuronghua\nLiurunjiao520\nliuruoying\nliusanjie\nliushahe\nliushang\nliushanmen\nliushanshan\nliushaohua\nliushaojun\nliusheng\nliushenyi\nliushibo88\nliushijia\nliushijie\nLIUSHILIN\nliushiming\nliushiyin\nliushiyu\nliushiyuan\nliushuhua\nliushui110\nliushui88\nliushuibo\nliushuiboLIU47\nliushuohanyu\nliushuqin\nliushuwei\nliusichang\nliusijia\nliusiling\nliusitong\nliusiyang\nliusiying\nliusiyuan\nliusuanxin\nliusuifeng\nliusuting\nliutao123\nliutao520\nliutengfei\nliutianbao\nLIUTIANYU\nliuting.\nliuting123\nliutingting\nliuwanglove\nliuwei.com\nliuwei1020\nliuwei119\nliuwei1983\nliuwei2008\nliuwei520\nliuwei521\nliuwei8695\nliuwei8848\nliuweifeng\nliuweihong\nliuweihua\nliuweijia\nliuweijie\nliuweili\nliuweiming\nliuweiqiang\nliuweiwei\nliuweixi\nliuwenbin\nliuwenbo\nliuwenhao\nliuwenhua\nliuwenhui\nliuwenjie\nliuwenjin\nliuwenjing\nliuwenjuan\nliuwenjun\nliuwenke\nLiuWenlong\nliuwenting\nliuwenwen\nliuwenxian\nliuwenxin\nliuwenyu\nLIUWENZHU\nliuxi123\nliuxiangyang\nliuxiangyu\nliuxianyu\nliuxiao123\nliuxiaobin\nliuxiaobing\nliuxiaobo\nliuxiaochen\nliuxiaodan\nliuxiaodong\nliuxiaofan\nliuxiaofang\nliuxiaofei\nLIUXIAOFENG\nliuxiaohan\nliuxiaohong\nLIUxiaohu\nliuxiaohua\nLiuXiaoHui\nliuxiaojing\nliuxiaojun\nliuxiaolei\nliuxiaoli\nliuxiaoliang\nliuxiaolin\nliuxiaolong\nliuxiaoman\nliuxiaomei\nliuxiaomeng\nliuxiaoming\nliuxiaona\nliuxiaonan\nliuxiaoping\nliuxiaoqi\nliuxiaoqing\nliuxiaotian\nliuxiaowei\nliuxiaowen\nliuxiaoxi\nliuxiaoxia\nliuxiaoxiao\nliuxiaoyan\nliuxiaoyi\nliuxiaoying\nliuxiaoyong\nliuxiaoyu\nliuxiaozhou\nliuxiaquan\nliuxijun\nliuxin123\nliuxin1985\nliuxin2008\nliuxing20\nliuxing520\nliuxing7i7\nliuxinghan\nliuxinghua\nliuxingxing\nliuxingyu\nliuxinhua\nliuxinlei\nliuxinrui\nliuxinxin\nliuxinyan\nliuxinyi\nliuxinyu\nliuxiong\nliuxu520\nliuxudong\nliuxue0420\nliuxue123\nliuxue2001\nliuxuedong\nliuxuefeng\nliuxuejiao\nLIUXUELI\nliuxuelian\nliuxueqin\nliuxufei\nliuxunhn\nliuxuyang\nliuxuyu2pl\nliuxuzhou\nliuxv1978\nliuyachao\nliuyadan\nliuyafei\nliuyajie\nliuyajun\nliuyan123\nliuyan123lixin\nliuyan1987\nliuyan520\nliuyan521\nliuyanan\nliuyanbo\nliuyanchao\nliuyandongw\nliuyang1234\nLIUYANG1987\nliuyang2008\nliuyang252676\nlIuyang520\nLIUyang521\nliuyanghe\nliuyanhua\nliuyanhui\nliuyanjun\nliuyanli\nliuyanlin\nliuyanling\nliuyanming\nliuyannan\nliuyanping\nliuyanqin\nliuyanqing\nliuyanting\nliuyanxi!\nliuyanyan\nliuyanzi\nliuyaqing\nliuyawen\nliuyh+-*/\nliuyi1012\nliuyi123\nliuyi19861108\nliuyi520\nliuyi5461\nliuyi82091654\nLiuyifan\nliuyihan\nliuyijie\nliuyilin\nliuyiliuyi\nliuyimei\nliuyiming\nliuyinfei12\nliuying520\nliuying5201314\nliuying521\nliuyingying\nliuyishen\nliuyiting\nliuyiwen\nliuyixin\nliuyixuan\nliuyiyang\nliuyol60866050\nliuyong123\nliuyongcheng\nliuyonggang\nliuyongjun\nliuyu123\nliuyu520\nliuyu521\nliuyuanyuan\nliuyudong\nliuyue123\nliuyuedeyu\nliuyueying\nliuyufei\nliuyufeng\nliuyuhan\nliuyuhan23\nliuyuhang\nliuyujia\nliuyujie\nliuyujun\nliuyulin\nliuyuliuyu\nliuyulong\nliuyuming\nliuyun123\nliuyunan\nliuyunfei\nliuyunhe\nliuyunlong\nliuyunxia\nliuyunzhi\nliuyuping\nliuyuqiang\nliuyuqing\nLiuyusong\nliuyuting\nliuyutong\nliuyuwei\nliuyuwen\nliuyuxin\nliuyuxuan\nliuyuxuan080920\nliuyuyang\nliuzd001\nliuzhang\nliuzhen123\nliuzhengjun\nliuzhenhua\nliuzhenyu\nliuzhichao\nliuzhicheng\nliuzhifeng\nliuzhigang\nLIUZHIGUO\nliuzhihai\nliuzhihan\nliuzhihao\nliuzhihua\nliuzhihui\nliuzhijia\nliuzhijian\nliuzhijiang\nliuzhijie\nliuzhijun\nliuzhimin\nliuzhiming\nliuzhipeng\nliuzhiping\nliuzhiqiang\nliuzhiwei\nliuzhiwen\nliuzhixin\nliuzhixing\nliuzhiyong\nliuzhiyu\nliuzhiyuan\nliuzhong\nliuzhuang\nliuzijian\nliuzijie\nliuziqiang\nliuziyang\nliuzy125\nlive2009\nlive800101\nlivelife\nlivepool\nliveshow\nliveyong\nliwanjun\nliwanning\nliwei000\nliwei007\nliwei051221\nliwei1234\nliwei123456\nliwei135731\nliwei1982\nliwei1983\nliwei1985\nliwei1986\nliwei1987\nliwei1993324\nliwei2006machmf\nliwei2008\nliwei520\nliwei521\nLIWEI888\nliweiabj\nliweibin\nliweibinwoaini\nliweichao\nliweichen\nliweidong\nliweifeng\nliweihao\nliweihong\nliweihua\nliweijia\nliweijian\nliweijie\nliweijin\nliweijun\nliweiliang\nliweiliwei\nliweimin\nliweiming\nliweiping\nliweisong\nliweiwei\nliwen0508\nliwen123\nliwen521\nliwenbin\nliwenbing\nliwencai\nliwenchao\nliwendong\nliwenfeng\nliwengang\nliwenhao\nliwenhua\nliwenhui\nliwenjia\nliwenjian\nliwenjie\nliwenjin\nliwenjing\nliwenjuan\nliwenjun\nliwenliang\nliwenlong\nliwenlou9988\nliwenming\nliwenqiang\nliwenqing\nliwensheng\nliwentao\nliwenting\nliwenwei\nliwenwen\nliwenxia\nliwenxian\nLIWENYUAN\nliwenyue\nliwenzhi\nliwenzhu\nliwf455702\nlixia123\nlixia520\nlixia521\nlixialixia\nlixianfeng\nlixiang123\nlixiang520\nlixiang521\nlixiang8236158\nlixiangbo3188\nlixiangyang\nlixianshou\nlixiao0616\nlixiao123\nlixiaobai\nlixiaobin\nlixiaobo\nlixiaochen\nlixiaochun\nlixiaocui129223\nlixiaodan\nlixiaofang\nlixiaofei\nlixiaofeng\nlixiaogang\nlixiaoge\nlixiaohang\nlixiaohu\nlixiaohua\nlixiaohui\nlixiaojia\nlixiaojian\nlixiaojie\nlixiaojing\nlixiaojuan\nlixiaojun\nlixiaokang\nlixiaole\nlixiaolei\nlixiaoli\nlixiaoliang\nlixiaolin\nlixiaoling\nlixiaolu\nlixiaomei\nlixiaomeng\nlixiaomin\nlixiaoming\nlixiaona\nlixiaonan\nlixiaopeng\nlixiaoping\nlixiaoqi\nlixiaoqing\nlixiaoran\nlixiaotao\nlixiaotong\nlixiaowei\nlixiaowen\nlixiaoxi\nlixiaoxia\nlixiaoxiao\nlixiaoxin\nlixiaoyan\nlixiaoyao\nlixiaoyi\nlixiaoying\nlixiaoyong\nlixiaoyu\nlixiaoyuan\nlixiaoyun\nlixilixi\nlixin111\nlixin123\nlixin123456\nLIXIN510\nlixin520\nlixin521\nlixindmima\nlixing123\nlixingde\nlixingxing\nlixingyi\nlixinhua\nlixinjian\nlixinjie\nlixinlei\nlixinlixin\nlixinping\nlixinran\nlixinwei\nlixinxin\nlixinyang\nlixinyuan\nlixiufeng\nlixiuming\nlixkmail\nlixu1211\nlixuan123\nlixuan520\nlixudong\nlixue521\nlixue880121\nlixuecheng\nlixuefei\nlixuefeng\nlixuejun\nlixuelian\nlixueping\nlixueqin\nlixuesong\nlixueting\nlixuewei\nlixueyan\nlixunhuan\nlixuyeye29\nlixy0302\nliyajing\nliyajuan\nliyakang\nliyaling\nliyan123\nliyan123456\nliyan1988\nliyan520\nliyan521\nliyanbin\nliyanfang\nliyanfei\nliyanfeng\nliyang1986\nliyang1988\nliyang2008\nliyang520\nliyangyang\nLIyanHONG\nliyanhong1\nliyanhua\nliyanhui\nliyanjie\nliyanjun\nliyanling\nliyanliyan\nliyanlong\nliyanping\nliyanqin\nliyansong\nliyantao\nliyanwei\nliyanxia\nliyanxiang\nliyanyan\nliyanyang\nliyanzhen\nliyaohua\nliyaoyao\nliyapeng\nliyaping\nliyaqing\nliye1982\nliyeliye\nliyeying\nliyi2598\nliyifeng\nliyifeng0504\nliyigang\nliyiliyi\nliyiming\nliying123\nliying520\nliying521\nliyingchun\nliyinghui\nliyingjie\nliyingshan\nliyingying\nliyinhua\nliyirong\nliyiwoaini\nliyixuan520\nliyiyang\nLiyizhuS\nliyong123\nliyong1985\nliyong520\nliyongaillh520\nliyongfei\nliyongfeng\nliyongjia\nliyongjie\nliyongjun\nLIYONGQIANG\nliyongqing\nliyongxin\nliyousen\nliyuan123\nLIYUAN520\nLIYUAN521\nliyuanfang\nliyuanhua\nliyuanyuan\nliyuanzhi\nliyuchao\nliyuchen\nliyuchun\nliyuchun310\nliyuchun84310\nliyue163571\nliyuehua\nliyuelin\nliyueliyue\nliyuemei\nliyufang\nliyufeng\nliyugang\nLIYUHANG\nliyujuan\nliyuliang\nliyuling\nliyuliyu\nliyulong\nliyuming\nliyun123\nliyune1230\nliyunfei\nliyunfeng\nliyunhua\nliyunhui\nliyunlong\nliyunpeng\nliyunxia\nliyunze_5566\nLIYUPENG\nliyuping\nliyuqing\nliyurock\nliyusheng\nliyutian\nliyuting\nliyutong\nliyuxuan\nliyuyang\nlizaiyuan\nlizawang\nlizefeng\nlizhan517\nlizhangbin\nlizhanhu\nlizhaohui\nlizhaojun\nlizhelizhe\nlizhen123\nlizhen19841012\nLizhen520\nlizheng123\nlizhengwei\nlizhenhua\nlizhenjie\nlizhenyu\nlizhgogo\nlizhi0823\nlizhi123\nlizhi1981\nlizhi1982\nlizhi520\nlizhi521\nlizhibin\nlizhichao\nlizhicheng\nlizhicheng871127\nlizhifeng\nlizhigang\nlizhiguo\nlizhihai\nlizhihao\nlizhihong\nlizhihua\nLIZHIHUI\nlizhihuixw\nlizhijian\nlizhijie\nlizhijin\nLIZHIJUAN\nlizhijun\nlizhilin\nlizhilong\nlizhimin\nlizhiming\nlizhipeng\nlizhiping\nlizhiqin\nlizhiquan\nlizhiwei\nlizhiwen\nlizhixin\nlizhiyan\nlizhiyi725\nlizhiyong\nlizhiyuan\nlizhongguo\nLIZHONGHUA\nlizhongwu\nlizhuang\nlizhunji\nlizhuo221\nlizilizi\nlizilong\nliziming\nlizixuan\nlizongbao\nlizongyang\nlizx10086\nlizzyrose\nLJ000000\nlj01211123\nlj083948\nLJ100200\nlj110110\nlj123123\nlj1234567\nlj13079886643\nlj1314520\nlj195813\nlj19790408\nlj19820529\nlj198710\nlj1987122220\nlj222222\nlj24584367\nlj34296128\nlj414722442\nlj521521\nlj654321\nlj666666\nlj690690690\nlj6940185\nlj767989\nLJ7758521\nlj790904\nlj801115\nlj810625\nlj860617\nlj951003\nLJ962464\nljb123456\nljbljbljb\nljc123123\nljc123456\nljc830228\nljch2001\nljcljcljc\nLjclove19761010\nljd000000\nljd123456\nljd771226\nljf123456\nljf19831114\nljf2711010\nljf_5214988\nljfsainrg\nljgd9918\nljghghfg465\nljh12345\nljh123456\nljh77422\nljh82176816\nLjhA839896\nljhljh520520\nljhljhljh\nljianfei1203\nljisapig\nljj123456\nljj2093168\nljj780417\nljj8950166\nljjljjljj\nljk1028521\nljk860728\nljl123456\nljljljlj\nljlkjyforever\nljm031838\nLJNLEXLI\nljoi989k\nLJP0405201612060\nljp123456\nljp5201314\nljp7862453\nljpljpljp\nljq123456\nljr3401393\nljr511375\nljt123456\nljtbswlxj\nljtjh9485\nljujydfvagsgtgh@\nljw123456\nljw780716\nljwhddz3\nljwhyzqm\nljx!07006\nljx123456\nljxljx66\nljxzzgxln\nljy123456\nljy666666\nljy854854\nljz123456\nljz81510\nlk000000\nlk123456789\nlk1986lk\nlk516500\nlk5201314\nlkj123456\nlkj65b6666\nlkjh1234\nlkjh7789\nlkjhgfdsa123\nlkjhlkjh\nlkjhmnbv\nlkjlkjlkj\nlkjt--6974\nlkjtlkjt\nlkqanywn\nlksflksf\nlkw198529\nlkwmlkwm\nlkx1986516\nlkx202011\nlky830625\nlkz863388\nll000000\nll065628\nll112233\nLL1208589090\nLl123123\nll123321\nll131313\nll1314520\nLL1314521\nll147852963\nll19121987\nll19741128\nll19831113\nll200151\nll3344520\nll3898153\nll520520\nll5211314\nll539678123\nll654321\nll710ll710\nll7758521\nll778899\nll881027\nll891192\nll89207910\nllafalcon\nllb123456\nLLbblp520\nllf07310216\nllf123456\nllf40990436\nllf8310428\nllflcwlb\nllg*19800604\nlliiqc0133\nlliissaaa\nlliufeng\nlliullin\nllj123456\nllkc1020\nlll123456789\nlll456789\nlll5201314\nllliiiuuu\nllll1111\nllll1234\nllll19821024\nllll6666\nllllgggg\nlllllkkkkk\nlllllllll\nllllllllll\nllloveldc\nlllshiwo1234\nlllsuner\nllltttzzzdzx007\nllm123456\nLLn000108\nllp123456\nLlQDIgGx#\nllr516888\nlls123456\nllt2813920\nlltianya\nllv22002\nllwjw787\nllwoaini\nllx12345\nllx123456\nlly123456\nlly198872\nlly5201314\nlly889723\nllysc1s1kr\nllyy1987\nlm11193114\nlm123321\nlm12345678\nlm123456789\nlm515415\nlm5201314\nlm851068\nlm880306\nlmin880111\nlmj123456\nlml123456\nlml512724\nlmlwyc8687\nlmmqxyxwjsxeqs\nLMQ571016\nlmq691125\nlmqxx121\nlms1987130\nLMX123456\nlmy123456\nlmy271828\nlmy30141592\nlmy_1979\nlmygackt\nln115406\nln123456\nln19850102\nln198711\nln823835\nlnwdj7758258\nLNZ58451800LNZ\nlo9ki8ju7\nloadload\nlocklock\nloctite5\nlodestar\nlog7815861\nloganplace\nLogin123\nloginlogin\nloginuser\nlogistics\nlogodenver\nloli123!@#\nlolisama214\nlolmaning\nlon224303\nlon5723598zon\nloncho76\nLondon123\nLondon2012\nlondon21204\nLONELINESS\nlonelyboy\nlonelystar\nLONELYWOLF\nlonesome\nlonestar\nlonewolf\nlong001978\nlong0412\nlong100200\nlong1015\nlong1024\nlong1234\nlong12345\nlong123888\nlong1314\nLong1314520\nlong1980\nlong1982\nlong1983\nlong1984\nlong1985\nlong1986\nlong1987\nlong1988\nlong1989\nlong1990\nlong2000\nlong2002\nlong2003\nlong2005\nlong2008\nlong2009\nlong20090612\nlong2010\nlong2288\nlong3200\nlong490917\nlong6882578\nlong7758\nlong7758521\nlong795862\nlong9999\nlong@long79\nlongaini\nlongbiao\nlongcheng\nlongchuan\nlongchuanmei\nlongcong\nlongdechuanren\nlongdiancmc\nlongdong\nlongerya\nlongfang\nlongfei123\nlongfeng\nlongfeng023\nlonggang\nlonggong\nlonghair\nlonghong\nlonghorn\nlonghuan\nlonghuzhou\nlongines\nlongjian\nlongjiang\nlongjiao\nlongjing\nlongjuan\nlongjuanfeng\nlongking\nlonglife\nlongling\nlonglive\nlonglong1005\nlonglong520\nlonglong521\nlonglong7\nlonglongago\nlonglonglong\nlonglove\nlongmarch\nlongmeier\nlongping\nlongqian\nlongqiang\nlongqing\nlongqishi\nlongquan\nlongrong\nlongsan333\nlongshan\nlongshao\nlongshen\nlongsheng\nlongshine\nlongshuai\nlongtang\nlongteng\nlongtian\nlongtime\nlongting\nlongwang\nlongxiang\nlongxiao\nlongxiaoyu\nlongxing\nlongxingtianxia\nlongxuan\nlongyang\nlongyanyan\nlongyao130\nlongying\nlongyong\nLONGYUAN\nlongzexiuming\nlongzhifei\nlongzhou\nlook2008\nlook4mp5\nlookatme\nlookinga\nlookingfor\nlooklook\nlora0915\nlorditover\nlorelei99\nlosangelesstar\nlosemagic\nlosses1130007\nlost12530\nlostangel\nlostlost\nlostlove\nloststar\nlosttemple\nlostwjjweb\nlotus123\nLotus@tianya1969\nlotuslotus\nlotusnotes\nlouis123\nLOUIS520\nlouisefigo\nlouiskoo\nlouislee\nlouislx78\nlouisweng\nloulou76\nlousu8201\nlove.123\nlove.520\nlove0000\nlove0107\nlove0113\nlove0123\nlove012345\nlove0126\nlove01314\nlove0206\nlove0207\nlove0212\nlove0214\nlove0223\nlove0302\nlove0314\nlove04021023\nlove0511\nlove0529\nlove0620\nlove0701\nlove0721\nlove0811\nlove0911\nlove0912\nlove0926\nlove100%\nlove1000\nlove10000\nlove1001\nlove1003\nlove1004\nlove1005\nlove1006\nlove1008\nlove1010\nlove1011\nlove1012\nlove1013\nlove1015\nlove1016\nLove1017\nlove1018\nlove1019\nlove1020\nlove1021\nlove1022\nlove1023\nlove1024\nlove1025\nlove1026\nlove1027\nlove1028\nlove1029\nlove1031\nlove1102\nlove1106\nlove1111\nlove1112\nLOVE1114\nLove1118\nLOVE1120\nlove1122\nlove1123\nlove1124\nlove1125\nlove1126\nlove1127\nlove1128\nlove1130\nlove11456\nlove1203\nlove1206\nlove1207\nlove1208\nlove1209\nlove1210\nlove1211\nlove1213\nlove1215\nlove1215225\nlove1216\nlove1218\nlove1219\nlove1221\nlove1222\nlove1223\nlove1225\nlove1226\nlove1227\nLOVE1228\nlove1230\nlove123123\nlove1234567\nlove123654\nlove125521\nlove131420\nlove1314521\nlove1437\nlove15871733375\nlove1977\nlove1978\nlove1979\nlove1980\nLOVE1981\nlove1982\nlove1983\nlove19830405\nlove1984\nlove1985\nlove198501\nlove1986\nlove19861314\nlove1987\nlove1988\nLove19880725\nlove198893\nlove1989\nlove1989.\nlove1990\nlove1997\nlove1998\nlove1999\nlove1xxm\nlove2000\nlove2001\nlove2002\nlove2003\nlove2004\nlove2005\nlove2006\nlove2007\nlove2009\nLOVE2010\nlove201314\nlove2046\nlove21cn\nlove3331\nlove3333\nlove3344\nlove3344520\nlove3371368\nlove3721036\nLOVE373737\nlove3ban\nlove4you\nlove50658\nlove5188\nlove5200\nlove52015\nlove520520\nlove5207296\nlove5210\nlove521521\nlove5257\nlove5566\nlove5683\nlove5889\nlove64213956\nlove7758\nlove7758258\nlove8023\nlove810305\nlove8286\nlove8587\nLove87228918\nlove8848\nLOVE8888\nlove90yu\nlove9101230\nlove957326\nlove982858\nlove987654321\nlove9999\nlove@201030\nloveaaran\nloveaaron\nLoveadam\nlovealex\nlovealice\nlovealife\nlovealing\nLovealive\nloveallen\nloveallensu\nloveamei\nloveandpeace\nloveandy\nloveangel\nloveangela\nloveangie\nloveanita\nloveanna\nloveanne\nloveannie\nloveantonia\nloveappear\nloveapple\nloveavril\nloveayumi\nlovebaby\nlovebaby1314\nlovebaby520\nlovebaggio\nlovebaobao\nlovebaobei\nlovebb1314\nlovebbmm\nlovebear\nlovebeibei\nlovebenben\nlovebeyond\nlovebibi\nlovebinbin\nlovebing\nlovebird\nLOVEBLUE\nlovebobo\nlovebook\nlovecandy\nlovecaptian\nlovecc1314\nlovecc520\nlovecczg2010\nlovececilia\nlovechao\nlovechen\nlovecheng\nlovecherry\nlovechina\nlovechun\nlovecica\nlovecici\nlovecindy\nLOVECLOUD\nlovecoco\nloveconan\nlovecyndi\nlovedaisy\nlovedance\nlovedandan\nlovedaniel\nloveding\nlovedong\nlovedoudou\nlovedream\nlovedudu\nlovedy23\nloveecho\nloveedison\nloveElva\nloveemma\nloveeric\nloveever\nlovefamily\nlovefanfan\nlovefang\nlovefaye\nlovefeifei\nlovefeng\nlovefeng1\nlovefish\nloveflora\nloveflower\nlovefool\nlovefornth\nlovefree\nlovefuji\nlovegackt\nlovegame\nlovegege\nlovegigi\nlovegirl\nlovegl319\nlovegogo\nlovegone\nlovegong\nlovegorgor\nlovegrace\nloveguest\nloveguozi\nlovehanabi\nlovehaoran\nlovehappy\nLovehebe\nlovehero\nloveheta\nlovehide\nlovehiei\nlovehina\nlovehome\nlovehoney\nlovehong\nlovehongye\nlovehot27\nLoveHowe\nlovehuan\nlovehuang\nlovehuihui\nlovehujun\nlovehyde\nlovein123\nlovein2002\nlovein2009\nLOVEINGYOU\nloveinhere\nloveisall\nloveisblue\nloveislove\nloveisover\nlovejack\nlovejane\nlovejason\nloveJava\nlovejeff\nlovejenny\nlovejerry\nlovejiajia\nlovejian\nlovejiao\nlovejing1314\nlovejingjing\nlovejj1314\nlovejoey\nlovejojo\nlovejolin\nlovejuan\nloveJUDY\nlovejunjun\nlovejunki\nlovekame\nlovekangta\nlovekeai\nlovekeita\nlovekelly\nlovekevin\nlovekiki\nlovekimi\nloveking\nlovekiss\nlovekitty\nlovekitty790208\nlovekobe\nlovelace\nlovelanlan\nlovelaogong\nlovelaopo\nlovelaughlive\nloveleaf\nloveleehom\nlovelele\nloveleon\nloveLeslie\nloveletter\nlovelian\nloveliang\nlovelike\nlovelili\nlovelily\nlovelily1212\nlovelilyforever\nlovelina\nloveLINDA\nloveliness\nloveling\nlovelingyun\nLOVELINUX\nlovelisa\nlovelive\nlovelizui\nlovelong\nlovelonger\nlovelotus\nlovelove819\nlovelovesyou20\nlovelu20041010\nlovelulu\nlovelva1087\nlovelx9390\nlovely123\nlovely1977\nlovelybaby\nlovelyboy\nLovelycatli4\nlovelyf888\nlovelyvv\nlovelyxiaoshu\nlovem249\nlovemaggie\nlovemama\nlovemami\nLOVEMAN1120\nloveman87\nlovemana\nlovemaomao\nLovemark\nlovemars\nlovemartin\nlovemary\nLOVEMAYDAY\nloveme1012\nloveme123\nloveme1314\nloveme520\nloveme7099\nLOVEme88\nloveme99\nlovemebaby\nLoveMedearbook\nlovemedo\nlovemeloveme\nlovemelovemydog\nlovememe\nlovemeng\nlovemeok\nlovemetender\nlovemevv\nlovemiao\nlovemicky\nlovemilan\nlovemimi\nloveming\nloveminmin\nlovemiss\nlovemomo\nlovemoney\nlovemony\nlovemoon\nlovemother\nlovemusic\nLOVEMYBABY\nlovemylove\nlovemyself1314\nlovenana\nlovenancy\nlovenannan1103\nlovenemo\nloveneverdie\nlovenicholas\nlovenicholastse\nLOVENICK\nlovenina\nlovening\nlovenini\nloveniuniu\nlovenobody\nlovenuriko\nloveonly\nloveowen\nlovepanda\nlovepaul\nlovepeace\nlovepeng\nlovepeng520240\nloveping\nlovepopo\nloveqian\nloveqiang\nloveqiao\nloveqing\nloveqiong\nloveqiqi\nloveqj1019\nlover007\nlover10246\nlover1314\nlover1980./\nlover2000\nlover2005\nlover2008\nlover520\nlover521\nlover781214\nloverain\nloveRAIN826\nloveraul\nloverei7u\nloverlin\nloverlover\nlovermes\nloverong\nloveroot\nloverose\nloveryan\nloveryao\nloveryen\nloveryou\nlovesally\nlovesammi\nloveseek\nloveself\nloveselina\nloveseven\nloveshan\nloveshang\nloveshanghai\nloveshine\nloveshow\nLoveshuai\nloveshuang\nlovesick\nlovesisi\nloveskying\nlovesmile\nlovesnow\nloveSola\nlovesong\nlovesophia\nlovespring\nlovestar\nlovestone\nlovesumer\nlovesummer\nlovesunny\nlovesunnyleefe\nlovesure\nlovesusan\nlovesusu\nlovetang\nlovetaotao\nlovether\nlovetian\nlovetianya\nlovetiger\nlovetime\nloveting\nlovetong\nlovetony\nlovetoto\nlovetree\nlovetutu\nlovetvxq\nlovetwins\nloveu1314\nloveu4ever\nloveuforever\nLOVEVC966\nlovevic83\nlovevicky\nlovevivi\nlovevivian\nlovewallace\nlovewang\nlovewater\nloveweiwei\nlovewenwen\nlovewife\nlovewill\nlovewind\nlovewing\nlovewinter\nlovewl1314\nlovewolf\nlovewoolcool.\nloveworld\nlovexia1314\nlovexiang\nlovexiao\nlovexiaojun\nlovexiaoli\nlovexiaoni\nlovexiaoxiao\nlovexiaoyu\nlovexing\nlovexinxin\nlovexixi\nlovexixin\nlovexuan\nlovexueer\nlovexuhui\nlovexy1314\nloveyamap\nloveyan1314\nloveyang\nloveyang1314\nloveyang19850409\nloveyanyan\nloveyanzi\nloveyaya\nloveyaya891114\nloveyifei\nloveying\nloveYING1314\nloveyiyi\nloveyojo\nloveyou!\nloveyou13\nloveyou3\nloveyou5\nloveyou5201314\nloveyou521\nloveyou99\nloveyouggy\nloveyouloveme\nloveyouloveyou\nloveyouMYZT\nLOVEYOUR\nloveyourself\nloveyouso\nloveyoutoo\nloveyouxx\nloveyouyou\nloveyoyo\nloveyu1314\nloveyuan\nloveyuanyuan\nloveyuer\nloveyuki\nloveyuyu\nloveyy1314\nloveYYKkiss5211\nlovezhang\nlovezhang501402\nlovezhen\nlovezheng\nlovezhuzhu\nloveziji\nlovezj33547618\nlovezoulin987929\nlovingwll\nlowellwzl\nlp123456789\nlp1314520\nlp19860205\nlp201314\nlp291201\nlp5211314\nlp612612\nlp666666\nlp7758521\nLP820408\nlp881009\nlp960209\nlpc918918\nlpf12166\nlpf123456\nlpl65399106\nlplpo110\nlplykevin99\nlppoo0405\nlpwoaini\nlpwwpl8706\nlpyuan19890827\nLPZ07723251107\nlpz323114\nlq123456789\nlq131420\nlq1314520\nlq200010\nlq2233690\nlq246800\nlq266500\nlq5201314\nlq5719727\nlq5945518\nlq811117\nlq811826\nlq8206022\nlq888888\nlq951753\nlqfwzdan\nlqh123456\nlqh7758258\nlqj123456\nLQL9706100\nlqlaly1898\nlqq510121\nLQX800204\nlqy123456\nlqz741125\nlr0376027\nlr123456\nlr5201314\nlrlovemt\nlrsj123456\nlrthust605\nlrwyy301\nlryz1979\nlrz27332\nls1314520\nls13233897183\nls19870901\nls5211314\nls56116088\nls654321\nls7230032\nLS8252440\nlsdslsds\nlsf123456\nlsf5580368\nlsg328768\nlsh123456\nlsh19890606\nlsh5201314\nlsj123456\nlsj198612\nlsl123456\nlsl1314520\nlsl19871201\nlsls4512\nlsls8848\nlslslslsls\nlsm123456\nlsm19881208\nlsn880502\nlsp123456\nlsp711120\nlsp88570165\nlsq123456\nlsq345118345119\nlsq54188\nlsq637641292\nlsqljwldr\nlsqljwldr126888\nlsqljwldr196888\nlss123456\nlsshjj1234567890\nlsssl113\nlssy0000\nlstqrs2129\nlsw123456\nlsx123456\nLSY123456\nlsy5201314\nLSzm19820101\nlt07335622098\nlt112883\nlt123456789\nlt198369\nlt5201314\nlt654321\nlt828488\nltBf1873\nltdz999999999\nltj123456\nltm052549\nLTT123123\nltt71986\nlttfaith\nLTTLTT19850119\nltwjtianxi\nltzc2009\nlu000000\nlu007980\nlu060106\nlu111111\nlu123123\nlu168888\nlu1988525\nlu2185291\nlu262728/\nlu4230312\nlu88603155\nluan78zao\nluanbuvivian\nLUANFANG521ZXY\nluanjian\nluanluan\nluanluanxiao\nluanqibazao\nluanqing\nluanshijiaren\nluanweixia\nluao4538\nlubing19851125\nlubingxin\nlucanyi123\nluchunhua\nluck1211\nluck2006\nluck2008\nluck2009\nluck2010\nluck52690082\nluckbird\nluckchen\nluckluck\nluckrossi\nluckstar\nlucky0346\nlucky168\nlucky2006\nlucky2008\nlucky2009\nlucky2010\nlucky520\nlucky666\nlucky689\nlucky7758521\nlucky888\nlucky913\nLuckyangel\nluckybaby\nluckybird\nluckyboy\nluckychen\nluckyday\nluckygirl\nluckylucky\nluckyman\nluckypig\nluckysatan\nlucy0412\nlucy1229\nlucy1234\nlucy123456\nlucyjeff\nlucylucy\nludanludan\nludayong\nludingfong\nluffycute\nlugenggood\nluguoluguo\nluh24183\nluhong26\nluhua2009\nluhui2004\nluiqunfang\nluisfigo\nlujia221713\nlujianbuping\nlujianguo\nlujianhua\nlujianli\nlujingjing\nlujingyan\nlujinno1\nlujunhaoma\nlujuwei198718\nlukai123456\nluliang603\nlulu1234\nlulu123456\nlulu1314\nlulu131499\nlulu1980\nlulu1983\nlulu19861126\nlulu1987\nlulu19900504\nlulu2008\nlulu3510\nlulu5201314\nluludejia\nLULULULU\nluluzhang1984\nlumberjack\nluna1982\nluna1983\nluncay1024\nlundun2012\nlunluoren\nluntan123\nluntan88\nluntanmima\nluntanming\nlunwenbianji\nlUO28332833\nluo4221857\nluo5201314\nluo760616\nluo8899905\nluo957118guo\nluoai123\nluobenwuzuia\nluobo520\nluochao1988\nluocheng\nluochuan\nluochuanchuan\nluochuang\nluochun1988127\nluochunwei\nluochunyan\nluodayou\nluodong850614\nluoenjian\nluohao123\nluohong20081688\nluojia800814\nluojian123\nluojiang\nluojianhua\nluojingjing\nluojun117\nluoli1978\nluoliang\nluolita09\nluolixin\nluoluo123\nluoluo520\nluoluo521\nluoluoluo\nLUOMAJIARI\nluomingfu\nluomitou\nluonaerduo\nluonanxujie\nluoqiang\nluoqiming\nluoqin7991\nluoqiong\nluoqiuju\nluosheng\nluoshuai\nluosuxia\nluox864222\nluoxiang\nluoxiaolin\nluoxiaotao\nluoxiaoyan\nluoxiaoyu\nluoxiong\nluoxue888\nluoyang3112L\nluoyangren\nluoyao903\nluoying520\nluoyoujjj\nluozhang\nluozhe0107\nluozheng\nluozhiwei\nluozhixiang\nluozhiyong\nluqf1028\nluqing001\nluqjahl050619\nlurenjia\nluruyin1985\nlusein003\nlushuang\nlutingting\nluton2008\nluvalwayz\nluwangda\nluwei123\nluwei1984\nluwei520\nluwenjie\nluwenjing\nluwj2004\nluwuchao\nluxiaofei\nLuxiaofeng\nluxiaoli\nluxiaolu\nluxiaoqing\nluxiaowei\nLUXIAOYAN\nluxiuyun\nluxun1881\nluyan123\nLUYANG123\nluyihaoa\nluyiluyi\nluyining\nluyongjia\nluyulai2005\nluyuzhen0624\nluzhe21st\nluzhidan517901\nluzhijun\nluzhizhong\nluzixin100\nluzzifer\nlv123456\nlv19890712yan\nlv2191533\nlv2192374\nlv7481525\nlv864026\nlv880131\nlvbuhero\nlvcha123456\nlverya123456\nlvfeiyang\nLVFENGJIAO\nlvgengxing\nlvhongfang\nlvjinming\nlvjinxiu525\nlvmamahell0\nlvmm0619\nlvpin-11\nlvshi200\nlvshuang\nlvwangqq520\nlvwei518917423\nlvxinlu123\nlvxiu777\nlvxw1122\nlvye820210\nlvyexianzong\nlvyongming\nlvyou100\nlvyouidbaohu\nlvyuehuixuejun\nlw123123\nLW123456789\nlw19811213\nlw19860504\nlw198718\nlw210044\nlw230715\nlw387072\nlw5201314\nlw666666\nlw68018264\nlw7386559\nlw820523\nlwb811011\nlwbingdie\nlwd611022\nlwglwlzl\nlwh00ooooo\nlwh123456\nlwh2952483\nLWH6518324\nlwhlh520\nlwj123456\nlwj197623\nlwj19820909\nLWJ851228\nlwl123456\nlwm123456\nlwpauline\nlwq0774821230110\nLWQ1111985\nlwqwyf740520\nlwrzcy840424\nlws25091977\nlwssgfnh\nlwt123456\nlwt19800715\nlww123456\nlwx020202\nlwx899660\nlwy123456\nlwy315@#$\nlwz123456\nlwzz741027\nlx000000\nlx0396835\nlx11160.0\nlx1314520\nlx2010320\nlx3016166\nlx5201314\nLX5211314\nlx666666\nlx800211\nlx800404\nlx841207\nlx898898\nlxb123456\nlxb641111\nlxc123456\nlxd123456\nlxd19781218\nlxdlxdlxd\nlxf123456\nlxf19831228\nlxf19890209\nlxfzhssd\nlxg0213.com\nlxg123456\nlxgend0228\nlxh123456\nlxh19790619\nlxh791424\nlxhlxhlxh\nlxhs820608\nlxhwr1985\nlxiaohua\nlxj123456\nlxj19851115\nlxj_cqnc\nlxjlxjlxj\nlxkj2009\nlxl123456\nlxl198810095616\nlxl2007girl\nlxl2668529\nlxl8832687\nlxm123456\nlxm128czsc\nlxmlxmlxm\nlxn3287317\nLXPlxpLXP\nlxq123456\nlxq13579\nlxq809801\nlxq97029\nlxs123456\nlxsh1989\nlxsz61542\nlxsz63542\nlxw123456\nlxw22303\nlxx123456\nlxx19800514\nlxx821128\nlxy12345\nlxy123456\nlxy5201314\nlxy789148\nlxy918808\nlxycocoa\nlxz123456\nlxz521!!\nly100200\nly111111\nly112233\nly123123\nly123321\nly1234567\nly12345678\nly123654\nly1314520\nly13963405092\nly19800802\nly19810821\nly1983326\nly1988612\nly201314\nly292513\nly2968888\nly4388180\nly471039\nly520520\nly5211314\nly5233330\nly666666\nly66763631\nly7215698\nly7222696\nly761022\nly7758521\nly781213\nLy820113\nly85234176\nly870117\nly88513746\nly888888\nly900188\nly961025\nLY999999\nly_ly_wo\nlyb123456\nlyb13965010343\nlyc123456\nlyc19840310\nlyc5201314\nLYc65215216\nlyc840310\nlychbr311\nlychmily\nlycrys14o\nlyd123456\nlydia)^12\nlydia123\nlydwswmshc\nlyf12345\nlyf123456\nlyf327520\nlyf5201314\nlyf614121\nlyf654123\nlyf811122\nlyfblog1989720\nlyffanren1230\nlyg123456\nlyg380lyg380\nlyh123456\nlyh230898\nlyh2391162\nlyh520ni\nlyh690823\nlyh721114\nlyhdnw99\nlyhj5811981\nlyj111111\nlyj123456\nlyj901005\nlyjdnxly\nlyjlyjlyj\nlyjsincere\nlyk771429\nlyl10531858\nlyl123456\nlyl19771117\nlyl350300\nlyl487499\nlyl5201314\nlylljylyh\nlylylyly\nlylzyh718\nlym12345\nlym123456\nlym213717\nlym5201314\nlym801104\nLymwdxd1314\nlyn47934437\nlyn801227\nlynn1314\nlynn79ken\nlynnlynn\nlynzylmy\nlyq123456\nlyq123456789\nlyq5201314\nlyr010601\nlyr5835551\nlys123456\nlys545352\nlys84589722\nlys@0908\nlysosome\nLysvy11e97\nlyt123456\nlytlx0726\nlywlyw1234\nlyx12345\nlyx123456\nlyx8305539\nlyxd830412\nlyxhello\nlyy-=840706\nlyy123456\nlyy331516\nlyy721223\nlyylyylyy\nlyyoyy424424\nlyz123456\nlyz19880526\nlyzh22519\nlyzxmr920502\nlyzyindsenly\nLZ11180607\nlz123456789\nlz19540527\nlz19821218\nlz19881219\nlz19890127\nlz471010\nlz5201314\nlz6696194\nlzb7685645\nlzc12345\nlzc123456\nlzc7800218\nlzc801104\nlzc871108\nlzcx5725\nlzd117519\nlzd200002\nlzf045692\nlzf123456\nlzflzflzf\nlzg123456\nlzg377898\nlzh123456\nlzh123456789\nlzhlzhlzh\nlzj123456\nlzj310001\nlzj87249199\nlzj8855246\nLZJZDJ123\nlzl123456\nlzl123456789\nlzl199172\nlzl201314\nlzl841009\nlzlhf1121\nlzm123456\nlzm971511\nlzmlyfutong\nlzp65921075\nlzp8811881\nlzq123456\nlzq456456\nlzr123456\nlzr3113681\nlzr870328\nlzs123456\nlzslw888\nLztEz2xe98\nLztuz21e98\nLztvy21e98\nLztvz21e98\nLzuDz2xe98\nLzuEz2xe98\nlzw123456\nlzwlzwlzw\nlzx123456\nlzx19830103\nlZx5003214786\nlzx900909\nlzy12345\nlzy123456\nlzy123456789\nlzy5201314\nlzy6669771\nlzy831119\nlzy870529\nlzypinpai\nlzyxlzyx\nm0000000\nm00000000\nm0n9b8v7\nm0RaYdhxqm\nM0t0r0la\nm1020301\nm111121l\nm123123123\nm1234567890\nm123456m\nm123m123\nm1314520\nm19820304\nM198210i\nm1y1j1n1\nm2YdEgkDws\nm324l310\nm3335499\nm3YdDgkDws\nm3YdDhkDws\nm3YdEgkDws\nm431273291\nm43643564\nm6g;4a.6\nm7758521\nm7a9c5ross\nm8830209\nma000000\nMA037037\nma112233\nma12345678\nma6063402\nma7zfuk3\nma8487955\nmaanshan\nmaarlake\nmabin770\nmacaulay\nmacgrady\nmachao123\nmachinist\nmachonggood\nmachuang\nMACHUNYAN\nmacintosh\nmacromedia\nmacwinine\nmadaha..\nmadamadadane\nmadan911\nmadaochenggong\nmadechina\nmadeinchina\nmademade\nmadlyboy\nmaer3196\nmaerdaifu\nmafandeshi\nmafangfang\nmafei229\nmafei812127\nmafeifei\nmag570fd\nmag770pf\nmagazine\nmagebaocom\nmagellan\nMAGGIE00\nmaggie0102\nmaggie123\nmaggie1983\nmaggie1984\nmaggie1987\nmaggie36\nmaggie520\nmaggiechen\nmaggiefxcn\nmaggiev551101\nmagiangel\nmagic123\nmagic213\nmagic2505\nmagicboy\nmagician\nmagickey\nmagiclee\nmagiclordelf\nmagicmagic\nmagicset\nmagicwin\nmagicyang\nmagnetism\nmagnificent\nmaguihong\nmaha0503\nmahaijun\nmahaitao\nmahaiyang\nmahongwei\nmahui123\nmai123456\nmaibaob888\nmaidanglao\nmaidou123\nmaigoo00\nmaigooinfo\nmail8012\nmail_333132\nmailcity\nmailmail\nmaimaimai\nmainboard\nmainland\nmainmain\nmainone168\nmainstreet\nmaitkuxt\nmaiyatang\nmaizhesky\nmajaheiheihei\nmajestic\nmajfleixr\nmajia000\nmajia123\nmajia2007\nmajia2009\nmajia456\nmajia520\nmajiajia\nMAJIAJU8888\nmajiajun\nmajiajun123\nmajiajun88\nmajiajun8888dj\nmajiamajia\nmajian@113\nmajianfei\nMAJIANHUA\nmajianjun\nmajianwei\nmajie123\nmajie80101800jie\nmajijaun8888\nmajing1016\nmajingjian\nMAJINGJING\nmajingtao\nmajingyu\nmajor007\nmajun123\nmajun520\nmajunfeng\nmajunjie\nmajunjun\nmajunwei\nmakeawish\nmakeitso\nmakelove520\nmakemake\nmakemoney\nmakinchow\nmaladona\nmaladuona\nmalafish2066\nmalan520\nmalanwindy\nmalatang\nMalaysia\nmaldini3\nmalegebi\nmalegebide\nmalei123\nmaliang123\nmaliang442531\nmalihong\nmalihuachi\nmalimali\nmalimalihong\nmalingxia\nMALINGYUN\nmalong123\nmaluda612\nmalzal124192\nmama1001\nmama1113\nmama153624\nmama25804783\nmama5201314\nmama520520\nMAMA5211314\nmamaaini\nmamaaiwo\nmamababa\nmamababa520\nMAMABABAWO\nmamadeai\nmamadeshengri\nmamadewen\nmamaecholi\nmamahuhu\nmamaIloveyou\nmamamama\nmamamiya\nmamashijiediyi\nmamawoaini1314\nmamimami\nmamimamiho\nmamingbo\nmammammammam\nman123456\nman123456789\nMAN518QE\nman5561181\nmanagement\nmanager123\nmanalove\nmanbo7720\nmanbu1988\nmanbuyunduan\nmanbuzhe\nmancheng\nmanchest\nMANCHESTERUNITED\nmandarin\nmandolin\nmandy520\nmandyjcc\nmanfeishi\nmangji123\nmangmang\nmaning123\nmanitoba\nmanjiang\nmanjun3187319\nmank1986.\nmanlover\nmanman123\nmanman1983\nmanman520\nmanmanman\nmansaisama363\nmantaolove\nmantianxing\nmantou123\nmantuoluo\nmanutd519\nManUtd99\nmanwoccupy\nmanyluck\nmanyqing\nmanzhushahua\nmao10040190112\nmao12345\nmao205713\nmao5201314\nmaocuiyi\nmaodazui\nmaodemima\nmaoist2023\nmaojianping\nmaojie88\nmaoliang\nmaolilan\nMAOMAO00\nmaomao11\nmaomao12\nMAOMAO1234\nmaomao123456\nmaomao1314\nmaomao1980\nmaomao1981\nmaomao1982\nmaomao1983\nmaomao1984\nmaomao1985\nmaomao1986\nmaomao1987\nmaomao2008\nmaomao2009\nmaomao321\nmaomao5201314\nmaomao6717233\nMAOmao99\nmaomaoai\nmaomaoaiwo\nmaomaochong\nmaomaode\nmaomaomaomao\nmaomaomimi\nmaomaowoaini\nmaomaoyu\nmaomaozhu\nmaomi123\nmaomi228\nmaomi520\nmaomimaomi\nmaomisile\nmaoqiang\nmaoqing609617\nmaoqqian\nmaosheng\nMAOSHIMAO\nMAOTOUYING\nmaoxiandao\nmaoxiang\nmaoxiaoyu\nmaoxiong\nmaoyufeng\nmaozedong\nmaozhedong\nmaozhuxi\nmaozhuxiwansui\nmapengfei\nmapingwen\nmaple123\nmapleleaf\nmaplelove\nmaplesea\nmaqianli\nmaqueling\nmaratsafin\nmarcopolo\nmariaailin\nmariah70327\nmariahcarey\nmarie123\nmarigold\nmark1234\nmarket123\nmarket2006\nmarket2008\nmarketing\nmarkmark\nmarksman\nMARLBORO\nmarlin98\nmarriage\nmarriott\nmarry2003\nmarryjin807\nmarryyou\nmars1234\nmars1515\nmars1986\nmarsmars\nmarui5211314\nmary123456\nmaryleer\nmarymary\nmasaharu\nmasashow\nmaser2005\nmashengjie01\nmashijie\nmashimaro\nmashuang\nmashuli1128\nmasiyuan\nmask2000\nmasklife\nmasklove\nmaskmask\nmassage120\nmassz439\nmaster510s\nmaster52\nmastercam\nmasterdearbook\nmasterkey\nmastermaster\nmatajiangzei\nmatao830\nmatengfei\nmaterial\nmathematics\nmathilda\nmathilde\nmatianyu\nmatilian\nmatingting\nmatishan\nmattel01\nMAtuz21fa8\nMAuCA32ea8\nMAuCA32fa8\nMAuDA32ea8\nMAuDA3xe98\nMAuDA3xea8\nMAuDz3xe98\nMAutA22fa8\nMAutz22fa8\nMAuuz21fa8\nMAuuz22fa8\nmauvemask\nMAvCA32fa8\nMAvCA32fa9\nmavericks\nmawan1991\nmaweiwei\nmawenjie\nmawentao\nmawuqing_100\nmax123456\nmax88max\nmaxiaofei\nmaxiaofeng\nmaxiaohong\nmaxiaohui\nmaxiaojun\nmaxiaoli\nmaxiaolin\nmaxiaoling\nmaxiaolong\nmaxiaoxiao\nmaxiaoxu\nmaxiaoyan\nmaxiaozhi\nmaximeng\nmaxpayne\nmaxspeed\nmay12345\nmay123456\nmay441580\nmay5201314\nmaya3s2009\nmayajava\nmayamaya\nmayan007\nmayanjun\nmaybenot\nmayday0526\nmaydayashin\nmaye2041\nmayflower\nmayh7803\nmayhgf707376\nmayi1096\nmayi1225\nmayicomein\nmayimayi\nmayinfeng2002\nmaying99\nmayo7511\nmaysnow0815\nmayuanyuan\nmayuanzhe001\nmayue123\nmayueyue\nmayunfei\nmayuping\nmayuxiang\nmayy1989\nmazhiqiang\nmazhiwei\nmazhiyong\nmazhiyuan\nmazhuang\nmazimimi\nMB620525OK\nmb9Ad9v2ux\nmba123456\nmbalianda\nmbbig123\nmby18647\nmc08040150012\nmc123456\nmc86560464\nmc9Ad9v2ux\nmc9Ad9w2ux\nmc9Adav1ut\nmcaAd9w2ux\nmcaAdaw2ux\nmcaAdaw2vx\nmcaAdbv1ut\nmcaAebw1vt\nmcaBdaw2vx\nmcaBeaw2vx\nmcc468913\nmcdhcnhk\nmcgrady1\nmchotdog\nmclonger23\nmcmanaman\nmcmlxxxlx\nmcppassword\nmcs51pic\nmcssmcss\nmd123456\nmdaAebw1vt\nmdaBebw1vt\nmdcg1778167\nmdcg3185\nMDXBLSNT\nme123456\nme1323445\nme25257758\nme666666\nme8zkklz\nmeagainuol\nmeberhpapwd&u\nmechanical\nmeckwell\nmede359535753\nmedicine\nmediterranean\nmedusagod\nmeet4bye\nmeetyouin2007\nmei1110.\nmei12345\nmei1234567\nmei1kong2\nmei204600\nmei7112663\nmei77meimei\nmei780806\nmeiaishu\nmeibanfa\nmeichuan\nmeicuisi\nmeidemima\nmeidenglin\nmeidusha\nmeifei24\nmeifeisewu\nmeiguanxi\nMEIGUANXI020\nmeigui007\nmeiguihua\nmeiguihuijin05\nmeiguo123\nmeijia410\nmeijia5156\nmeijiazj07\nmeilan1113\nmeili123\nmeili1978724\nmeili2009\nmeiliderizi\nmeilidewo\nmeilifeng\nmeiliivy\nmeililisha26\nMEILIMEILI\nmeilirensheng\nmeilishijie\nmeiliwuxian\nmeilixinqing\nmeilixinshijie\nmeiliyaoyuan\nmeimei0620\nmeimei1203\nmeimei1987\nmeimei521\nmeimei741\nmeimei7924\nmeimei88\nmeimei888\nmeimei94\nmeimei99\nmeimeihao\nmeimeiisme\nmeimeimei\nmeimeiwoaini\nmeimengchengzhen\nmeimima123\nmeimimaa\nmeimimai\nmeimimawf\nMEINAIZI\nmeiniang\nmeinibuxing\nmeinv1028\nmeinv123\nmeinv1239\nmeinv520\nmeinv521\nmeinv5239\nmeinvmeinv\nmeinziele\nmeiqingqing1987\nmeirenai\nmeirenaiwo\nmeirenyu\nmeiruian\nmeishang\nmeishaonv\nmeishenme\nmeiwenti\nmeixiang\nmeiyafeng\nmeiyanfang\nmeiyangyang\nmeiying_1979\nmeiyitian\nmeiyou94meiyou\nMEIYOUAI\nmeiyouba\nmeiyoula\nmeiyoumima123\nmeiyoumimaa\nmeiyoumm\nmeiyouren\nmeizi22222002\nmeizi520\nmeizi521\nMEIZIMEIZI\nmeiziqiu\nmeko8096\nmelancholy\nmelbourne\nmelinda199\nmelody123\nmelody520\nmelody6100\nmelovelantian\nmeloveme\nmelozi253521086\nmemebest\nmemenini44\nmemmaker\nmemory123\nmemory1986\nmendieta\nmeng070400\nmeng1234\nmeng123456789\nmeng12m1\nmeng1314\nmeng1314520\nmeng132304\nmeng1982\nmeng1983\nmeng1985\nmeng1987\nMENG1988\nmeng1989\nmeng2008\nmeng2009\nmeng744543\nmeng8023\nmeng891127\nmeng9712\nmengchao\nmengchen\nmengfang\nmengfanyu\nmengfeng\nmenggang\nmenggege\nmenghan21\nmenghaoran\nmenghuanxiyou\nmenghui123\nmengjian\nmengjiang\nmengjiao\nmengjing\nmengjuan\nmengjunlin\nmenglang\nmenglei333\nmengliang\nmenglihua\nmenglijun\nmenglili\nmengling\nmenglong\nMENGLOVE\nmengmeng1213\nmengmeng123\nMENGMENG520\nMENGMENG521\nmengming\nmengnanmengnan\nmengning\nmengpeng\nmengqian\nmengqiang\nmengqing\nmengqingyu\nmengruida20\nmengshan\nmengshuai\nmengtian\nmengting\nmengtingwei\nmengtong\nmengwang\nmengwei7200\nmengxiang2008\nmengxiang2009\nmengxiao\nmengxin123\nmengxing\nmengxingle\nmengxuan\nmengxue225124\nmengyafu_0898\nmengyanbo\nmengyang\nmengyin1991\nmengying\nmengyuan\nMengZhang\nmengzhiyuan\nmengzhizhou2010\nMENGzhong\nmengzonghui11111\nmephisto\nmequess021215\nmercedesbenz\nmercury991024\nMeridian\nmerlin1211\nmerras324\nMErry123\nmerrychristmas\nmessager\nmetalgear\nmetallic\nmetatron\nmeteor123\nmeteor2008\nmeteor77\nmeteorgarden\nmetersbonwe\nMeTY43Yx\nmfc198812216\nmffpalfamo\nmfh009988\nmfk2001915\nmfkifk123\nmfksowwx\nmfkxamyd\nmfkydpl216\nMFNPoxahp127878\nMFX505MFX505\nmg123456\nmg666777\nmgal0750\nmgl123456\nmh007007\nMH123456\nmh666666\nmhf531226\nmhhm7758\nmhj1391827\nmhqgfkx2\nmhqgoy36\nmhy757824741\nmhyazj5211314\nmi111222\nmi123456\nmi2xiong\nmi3624158\nmia198884\nmiamasvin\nmianchaodahai\nmianhuatang\nmianmian\nmiantiao\nmianyang\nmiao0327\nmiao1234\nmiao123456\nmiao1986\nmiao1987\nmiao1988\nmiao200701\nmiao5201314\nmiao7568162\nmiao920403\nmiaocheng\nmiaofeng\nmiaohu123\nmiaojian\nmiaojing\nmiaojinsheng\nmiaoling\nmiaomiao123\nmiaomiao2008\nmiaomiao520\nmiaomimi1234\nmiaoqian\nMIAOQING\nmiaosheng\nmiaosong\nmiaotian\nmiaowang\nmiaoxiao\nmiaoying\nmiaoyuan\nmiaozhen\nmiaozhiming\nmiaozhuang\nmichael007\nmichael123\nmichael1983\nmichael23\nmichael3\nmichael314\nmichael5\nmichael520\nmichael999\nmichaelj\nmichaeljackson\nmichaeljordan\nmichaell\nmichaelowen\nmichalchen\nmichel6688\nmichelin\nmichelle0916\nmichelle1218\nmichelle123\nmichelle197922\nmichelle1987729\nmickey123\nmicky0604\nmicky06040125\nmicky19860604\nmicky860604\nmicrohard\nmicrolab\nmicrosoft163\nmicrostar\nmicrotek\nmicrowave\nmidsummer\nmiemie102\nmier93404\nmifankou\nmigic812672\nmih7oqu4\nmihajlovic\nmihomiho\nmihoutao\nmike1973\nmike2001\nmike2004\nMIKE6666\nmikeking\nmikewolf\nmikeyang\nmiku4321\nmikyviky\nmilaguel\nmilan123\nmilan1421\nmilan1899\nmilan312\nmilan420\nmilan520\nMilan99Ricky22\nmilanbaby\nmilanfan\nmilanfeng\nmilankaka\nmilankundera\nmilanmal\nmilanmilan\nmilano22kaka3\nmilaoshu\nmildseven\nmiles2003\nmilitary\nmilkmilk\nMillennium\nmiller31\nmima0000\nmima000000\nmima123.\nmima1230\nmima123147\nmima12345\nmima12345678\nmima123456789\nmima128138\nmima1314\nmima1974\nmima2000\nmima2008\nmima2009\nmima3931\nmima70924\nmima760829\nmima8888\nmima94mima\nmimabaohu\nmimabaomi\nmimabeidao\nmimabuzhidao\nmimaduoshao\nMimaGaile\nmimahenjiandan\nmimajiushi\nmimajiushimima\nmimalvwei\nmimamami\nmimaMIMA123\nmimamimamima\nmimashi0\nmimashi1\nmimashi123\nmimaSHI521\nmimashichwqq\nmimashimima\nmimashimimashi\nmimashisha\nmimashishenme\nmimashism\nmimassxsxg\nmimasuiyi\nmimatianya\nmimawangle\nmimayaofuza\nmimayaogai\nmimi01983228\nmimi1234\nmimi123456\nmimi1314520\nmimi2005\nmimi5201314\nmimi7238\nmimihuayuan\nmimihuhu\nMIMIMAMA\nmimimimi\nmimimomo0310\nmimosaginno\nmin581690123\nminami1984\nminamina\nminbin923\nmindshare\nminemine\nminer0424\nminet1983\nming0202\nming1114\nming1234\nMING123456\nming1314\nming1977\nming1982\nming1985\nming1986\nming1987\nming1988\nming2008\nming2009\nMing2010\nming4444\nmingchao\nmingchen\nmingcheng\nmingchuan\nmingchun\nmingdao226\nmingdong\nmingfang\nmingfeng\nminggang\nmingguang\nmingheng\nminghong\nminghuihong\nminghuyong\nmingjian\nmingjiang\nmingjiao\nmingjing\nmingkai1984\nmingkong\nminglang\nmingliang\nmingling\nmingliuzhukao330\nminglong\nminglu654321\nmingmeide\nmingming0315\nmingming1\nmingming520\nmingming521\nmingmingbaibai\nmingminghenaini\nmingqiang\nmingqing\nmingquan\nmingscss\nmingshigaotu\nmingtang\nmingtian123\nmingtianxia\nmingwang\nmingxian\nmingxiang\nmingxing\nmingxuan\nmingxuening\nmingyang\nmingyang1003\nmingying\nmingyu520\nmingyuan\nmingyue123\nmingyuexin\nmingzhao\nmingzhen\nmingzheng\nmingzhi11ty\nmini2000\nMINICOOPER\nminifish\nminiglass\nminilong\nminimini\nminister\nminjuan521\nminle2009\nminling2385862\nminmin123\nminmin1314\nminmin16\nminmin5201314\nminmin521\nminminmin\nminminwoaini\nminqiang\nminsheng\nminstrel\nmintmint\nminute801802\nminwoaini\nminwoo123\nminwoo728\nminzhong\nmiqi2008\nmiracle23\nmiranda1999\nmiranda85\nmirandasun\nmiriam7423\nmirror7910\nmis209990\nmisamisa\nmiss1206\nmiss1314\nmiss1988\nMISS2001\nmiss2003\nmisschen\nmisscoco\nmissingme\nmissingu\nmissingyou\nmissjenny\nmisskevin\nmisskiss\nmisslove\nmissmama\nmissmiss\nmissshop2010\nmissweiqi\nmisswudu\nmissyou0304\nmissyou123\nmissyou1314\nmissyou2\nmissyou520\nmissyou_66\nmissyoumuch\nmissyoyo\nmissyuan\nmist363buoy133\nmistletoe\nmitsubishi\nmittweida0824\nmiukiuwai\nMIXIAN3018\nmiximixi\nmixkaxck9m\nmiyafalo2981\nmiyazaki\nmiyixi103\nmiyixi71\nmizuki0527\nMJ123456\nmj147524\nmj199771\nmj23mjme\nMJ5201314\nmj580829\nmj62524066\nmj6789023\nmj7796021\nmj820125\nmj979059\nmj987321\nmjf214792\nmjh19601215\nmjian325420\nmjkluio789\nmjla73xk\nMJQqq1991\nmjw7758521\nmjx5211314\nmjy123456\nmjywym1010\nmjzz480320\nmk123456\nmk198902215035\nmk5fx6dw\nmkdk1014\nmkj863038\nmklmklmkl\nmko0nji9\nml0310mm\nml123123\nml197108\nml19821203\nml19870825\nml19880611\nml2590254\nml5201314\nml880814\nmLbi0326\nmld873729\nmldxqbyt\nmlhroom1314520\nmlj123456\nmll123456\nmll13699148163\nmll8377400\nmllisalive\nMLLISON!@!#\nmllison1213\nmlmj8u9k\nmlyfcyy2010\nmm000000\nmm040415\nmm100200\nmm111111\nmm112233\nmm123123\nmm123321\nmm123369\nmm1234567\nmm12345678\nMM1234567890\nmm123654\nmm1314521\nmm147258\nmm1975520\nmm198298\nMM19861110818\nMM201314\nmm2ww1314.\nmm4220329\nmm443402\nmm491123\nmm520520\nmm5211314\nmm521521\nmm552168\nmm654321\nMM666666\nmm668899\nmm7758258\nmm7758521\nmm778899\nmm819043\nmm91982c\nmm987654321\nmmaiolck\nmmbbmajuan\nmmcbs123\nmmccxinsi\nmmdooooo\nmmh7281928\nmmhhmmhh\nmmiloveyou\nmml161107\nmmlwwforever\nmmm111111\nmmm123456789\nmmmm1111\nmmmm1234\nmmmmmmmmm\nmmmmmmmmmm\nmmmmnnnn\nmmmmxxxx\nmmnnbb000\nmmnnbbvv\nmmqmmmqm\nmmsywyx551\nMMWAN1314\nmmwlbgmmwlbg\nmmwly1014772bbmm\nmmwoaini\nmmx123456\nmn12345678\nmn333333\nmn812924\nmn88180000\nmn9812kh\nmnb369258\nmnbmnbpo09\nmnbv1234\nmnbvc123\nmnbvcxz0\nmnbvcxz1\nmnbvcxz1230\nmnbvcxz1234\nmnbvcxz123456\nmnbvcxz147\nmnbvcxz321\nmnbvcxz89\nmnbvcxzlk\nmnbvcxzmnbvcxz\nmnbvcxzz\nmnbvcxzzxcvbnm\nmnbvlkjh\nmnbvvbnm\nmo123456\nmo198417\nmo207804\nmo20yu10\nmo5201314\nmobile#3\nmodem139\nmodemima\nModengyao\nmoderate\nmodicomm\nmofeiyan-1988108\nMogutian12267\nmohicans\nmoiaussi\nmoka1324\nmolecular\nmolibaobei\nmolihuakai\nmolingdang\nmolly1991\nmomen000\nmomingqimiao\nmomo0821\nmomo123321\nmomo123456\nmomo1919a\nmomo1984\nmomo841013\nmomo97881314\nmomoaini\nmomoca1234\nmomoko58\nmomokolan!0315\nmomomomo\nmona821102\nmonday11\nmoney2008\nmoney520\nmoney521\nmoney888\nmoney9988\nmoney999\nmoneyboy\nmoneymoney\nmoneyshou\nmoneytalks\nmongolia\nmongolian\nmonica12\nmonkey04\nMONKEY123456\nmonkey520\nmonkey80\nmonkeyking\nmonkeymonkey\nmononoke\nmontella\nmoodiness\nmoon0924\nmoon1234\nmoon2000\nmoon2008\nmoon5528656\nmoon9797\nmoonbird\nmooncake\nmoonchild\nmooncsgn\nmoonface\nmoongirl\nmoonheejun\nmoonlove\nmoonlover\nmoonmoon\nMOONPEAR\nmoonriver\nMOONshadow\nmoonshine\nmoonsun2008\nmoonVAN7881\nmoonwolf\nmopinghui\nmoqitokyo\nmoqixian1100\nmore4444\nmorefree\nmoremore\nmoremoretea\nmorientes\nmorning330\nMORNING622\nmorningsunshine\nmorphine\nmoshanghuakai\nmoshengren\nmoshumei\nmosimima\nmosquito\nmother1109\nMother123\nmother520\nmother88\nmotherland\nmotianlun\nmoto2008\nmotoking\nmotomoto\nmotorola123\nmotoyama\nmouse123\nmouse158\nmouse520\nmouse7275\nmousecat\nmousecom\nmousefox88\nmouseking\nmousemouse\nmousepad\nmousepeng\nmoveitin\nmovenow888\nmovingTO\nmovingwtt\nmoxiaoxie\nmoxiu520\nmoya100200\nmp123456\nmp820705\nmp970173qz\nmpdhhssj\nmpz8141688\nmq123456\nmq530519\nmq8341510\nmqh1928375\nmqy003309\nmr123456\nmrhsmrhs\nmrk123456\nmrmhwseo\nmrzhangqiang\nMS123456\nms1384609\nms197781161433\nms19990224\nms3176880\nms612160\nms8280888\nms86fhasee\nms900914\nmsc161982\nmsch0628\nMSconfig\nmsfmkrET\nmsg5232033\nmsnqq123456\nmsnsinamsn\nmsnzs-1251\nmspt0808\nMSW852110msw\nmsy123456\nmszshl221414\nmt123456\nmtdn369110\nmtQ9Xdgxqm\nmtQ9Ydgxqm\nmtR9Ydgxqm\nmtwyjgnl\nmty19781121\nmty19860712\nmty86712\nmu123456\nmu777111\nmuaythai\nmuchacha\nmudimudi\nmuhaiping\nmuhaiyan\nmujwchyr\nmuke0904\nmultiply\nmumu123456\nmumulovetutu\nmumumumu\nmunaoke1981\nmuoluoguizu\nmuqx1992\nmurasaki\nmurcielago\nmurder8277\nmushroom1017\nmusic520\nmusic521\nmusicboy\nmusician\nmusiclover\nmusicman\nmusicman123\nmusicmusic\nmusicradio\nmustlengjing\nmustwin450818\nmutangchun\nmutation\nmutou123\nmutou720\nmutouren\nmuxiaoyu\nmuyangren\nmuyihuashi\nmuyu2696\nmuyunmuyun\nmuzhibenying\nmuzi1234\nmuzimuzi\nmw123456\nmw31415mw\nmw376900\nmw5116726\nmw520530\nmwijifk78\nmwjrth62538ig\nmwongjin\nmwqmwq850725\nmwxq1314\nmx002321\nmx123456\nmx2007bc\nmx645964mx\nmxddy2001\nmxddy2004\nmxhqx12345\nmxj69626003\nmxl123456\nmxl77smile\nmxn82719\nmxxye@369\nmxy991221\nmxz585818\nmy000000\nmy001023\nmy003092\nmy111111\nmy111177\nmy119911\nmy12345678\nmy123456789\nmy1314520\nmy2004yc\nmy2008929\nmy436413\nMY5201314\nMY538502\nmy626532\nmy641123\nmy669766\nmy701784\nmy720829\nmy7758521\nMy811204\nmyallens\nMyAspx888\nmybaggio\nmybestlove\nmybeyond\nmybirthday\nmybmw330i\nmybrother\nmycecool\nmychun19830412\nmycitying\nmycocolee\nmycomputer\nmycsdn1989812\nmydaring\nmydarling\nmydaughter\nmyday823714\nmydearisly\nmydog123\nmydraling\nmydraling412\nmydreams\nmydreamwuhanun\nmyf520520520\nmyfaixin79\nmyfather\nmyfriend\nmyfriends\nmyfuture\nmygg770505\nmygod123\nmygod12345\nmygoddess\nmygodmygod\nmygoogle\nmyh88668079\nmyhappyending\nmyheartwillgoon\nmyhong521220\nmyibosyss\nmyict3701\nmyit8888\nmyj111111\nmyjltcht\nmyjsybjwqt\nmyk1986225\nmykevinmylove\nmykey168\nMykey781016\nmykitty0751\nmylove11\nMylove123\nmylove1314\nmylove1979\nmylove1990he\nmylove2000\nmylove2008\nmylove2009\nMYlove520\nMYlove521\nmylove888\nmylove99\nmylovefahaya\nmylovely\nmylovers\nmyloveyou\nmylovezgm\nmymaniac\nmymemory\nmymonkey\nmymother\nMymy+235\nmyname123\nmyname2008\nmynameis4125!\nmynewlife\nmynicky1031\nmynumber\nmyosotis\nmyounghun\nmyownlife\nmypanda8341\nmypasswd\nmypw2007\nmyq97161369\nmyqrdqrj\nmyrabbit\nmysecrect\nmyshowmy\nmysister\nMYSJZQQSSL\nmysodao_666\nmysterious\nmysunshine\nmythical\nmythoLOGY\nmytianya\nmytom110\nmyway333\nmyy.federer\nmyyekongyu\nMYyinggu20\nmz123456\nmz123456789\nMZ2225552\nmz328924\nmzalv912\nmzcp7y1h\nmzgazhzx\nmzk11231123\nmzp198361\nMztuz21fa8\nn0i3d7o1\nn0thing17\nn1234567\nn12twN12TW\nn1sh1w0depy\nn2XcEgjCvr\nn2XcEgkCvr\nn2XcFgjCvr\nn2XdEgkCvr\nn2XdEgkCwr\nn2XdEgkDwr\nn2YdEgkDwr\nn2YdEgkDws\nn4b1027458\nn5201314\nn7777777\nn7etyzhxh\nn99vj9t9\nna123456\nna519078\nnachtmann\nnadesico\nnae5511607\nnainai111\nnainai520\nnainaide\nnaishinseki\nnajiuzheyangba\nNAKAMURA\nnakoruru\nnali1974510\nname1234\nnameaini\nnamename\nnamieamuro\nnamoamituofo\nnan123321\nnan123456\nnan127320\nnan5201314\nnan5211314\nnana1122\nnana1188aa\nNANA1212\nnana1234\nnana123456\nnana123456789\nnana1314\nnana13804705077\nnana1551\nnana1982\nnana1983\nnana1985629\nnana1987\nnana2003\nnana2008\nnana3380742\nNANA3833\nnana77iaag\nnanakase\nnananana\nnanawoaini\nnanbeiji99\nnanchang\nnanchong\nnancy1029\nnancy123\nnancy1982\nNancy520\nnancynancy\nnandehutu\nnangnima\nnanguangxun\nnanhaiwang\nnanhaizi\nnanhu654321\nnanjin579\nnanjing123\nNANJING2008\nnanjing24\nnanjingren\nnanjixiong\nnanjokoji\nnankanf34\nnanke801\nnannan123\nNANnan1314\nnannan520\nnanpu123456789\nnanrendeai\nnanshan88\nnanwang0313\nnanxi1988\nnanxiang\nnanxiang123\nnanyang123\nnaonao123\nnaozhong\nnapolean\nnarcissus\nnaruhodo\nnaruto123\nnashihuakai\nnatalie003\nnating8899\nnational\nnatureboy\nnausicaa\nNAutA22fa8\nnautilus\nNAvCA32fa9\nnavigation\nnavyblue\nnawm520520\nnaxiehuaer\nnayitian\nnazinazi\nnb123456\nnb1982971849\nnba00123456\nNBA123456\nnba123456aa\nnbanbanba\nnbfh05748915173\nnbkflyyl\nnbq!51888\nNBusA22fa9\nNBusA22ga9\nNButA22fa8\nNBvBB32fa9\nNBvCA32fa9\nNBvCB32fa9\nNBvsA22ga9\nNBvsA22gb9\nNBvsB22gb9\nNBwBB32fa9\nnc209501\nncaBeaw2vx\nncaBeax2vx\nncaBeax2wx\nncaynait\nnclgxy000000\nNCTYSBTM\nncy19861006\nndaBeax2wx\nndaBebw1vt\nndaBebw1wt\nndaBebx1wt\nndaBecx1wt\nndaCeax2wx\nndaCebx2wx\nndaCeby2wx\nndaCecx1tt\nndaCecx1wt\nndbCeby2wx\nndbCeby2xx\nndczhwyg\nndjmxq9408\nndswybsy\nne0120ko\nne1444888\nnebCfcx2t0\nnebCfcx2tt\nnebCfcy2t0\nnecessary\nnech54427450\nnedved11\nneece0020002008\nneedforspeed\nneedlove\nNeednottoknow\nneedspeed\nneeshuyan\nnegative\nnegkkkkk\nneijiang\nneikeda102\nneimenggu\nnell3829913\nnemonemo\nnengdufeng\nnesky_2009\nNesta521326\nnestahmily\nnet123456\nnet27698439\nnet4scape\nnetadmin\nnetcoc123456\nnetfinity\nNETmcollege1\nnetnetnet\nnetnow123456\nnetrove4803260\nnetuse118\nnetvista\nnetwinner\nnetzui118\nneurology\nneurongen810311\nneuschwanstein\nneveragain\nneverchange\nnevercry\nneverdie\nneverend\nneverever\nneverforget\nnevergone\nneverland\nneverlose\nneverlove\nneversay\nneversaydie\nNeverSayGoodbye\nneverstop\nnew123456\nnew264401\nnewandyl\nnewcc0304\nnewchinaman\nnewcomer\nnewdayone\nnewejaja2004\nnewer2009\nnewgnat0898\nnewhuanying\nnewhuman11\nnewideabbs\nnewlanasd\nNewLife123\nnewlife2008\nnewlife2009\nnewlife2010\nnewman1hao\nnewmj2009tp\nnewnewnew\nnewoop4show\nnewspaper\nnewsroom\nnewstalk\nnewstart\nnewtao941101\nnewtimeyou\nnewtotem\nNewuser01\nNewWanCome9090\nnewworld\nnewwushe\nnewyearyz\nnewZ85111CY\nnextwall\nney1987731\nnf123456\nnfsq2131286\nnfsqnfsq\nnfxdrnlqxz\nngoluong\nngxiSss09\nnh123456\nnh19830813\nnh5856158\nnhbritney\nnhdhtyhdhr@126.c\nnhg6662155\nnhgblong\nnhk007533285\nnht6832030\nnhzjswim\nni191011\nni2008082407hao\nni275971\nni5201314\nni80dezz\nni860911\nniaiwo123\nniaiwome\nnian123456\nnianimamabie\nnianJiu29\nniannian\nnianqing\nnianry520\nnianshao\nniaoer13\nniaoniao\nniaonima\nniaosini\nniaoxian\nniaoyuhuaxiang\nnibaichi\nnibajilie\nnibuaiwo\nnibushiren\nnibushiw\nnibushiwo\nnibuxingle\nnibuzhidao\nnic19810208\nnic753220\nnic8290lf0203\nnicai123\nNICAI36501\nnicaibudao\nnicaibuzhao\nnicainicai\nnicaiquba\nnicegirl\nnicenice\nnicer668\nNICETOMEETYOU\nnicfm365\nnicforever\nnichilema\nnicholas123\nNicholas7\nnicholas829\nnicholasly\nnicholastse\nnicjimmy\nnick1010\nnick2007\nnick40288\nnick520219\nnick9898\nnickcarter\nnickname\nnicknick\nnickyuan963.\nnicole-510830\nnicole123\nnicole232323\nnicole63023732\nnicolies12\nnicotine\nnidawoakao\nnidayede\nnidehong\nnidemima\nnidemingzi\nnideweixiao\nnidewode\nnidewodene\nnideyangzi\nnideyanj\nnidtamww\nniduo478\nnie123456\nnie93734gk\nniedonglin\nniejianbo\nnieningmaro\nnieqijun\nnier19870913\nnietzsche\nniexiang\nnigehazi!\nnight1001\nnight123\nnightelf\nnightingale\nnihaizaima\nnihao000\nnihao001\nnihao003\nnihao007\nnihao110\nnihao111\nnihao1234\nnihao12345\nnihao123456!\nnihao123456789\nnihao126\nnihao147\nnihao168\nnihao1986\nnihao2008\nnihao2009\nnihao2010\nnihao321\nnihao456\nnihao53180791\nnihao789\nnihao84833\nnihao888\nnihao999\nnihaoa123\nnihaoa1314\nnihaobuhao\nnihaocom\nnihaofeng\nnihaohaha\nnihaohao\nnihaohfj\nnihaoma1\nnihaoma2009\nnihaoma520\nnihaoma?\nnihaomaa\nnihaomang\nnihaomani\nnihaomanihaoma\nnihaomaq\nnihaomawohenhao\nnihaomazhou\nnihaomeinv\nnihaonishi\nnihaorody\nnihaoshe\nnihaotianya\nnihaowoaini\nnihaowocaonimm\nnihaowocaonimma\nnihaowohao\nnihaowoshi\nnihaoya123\nnihaoyun\nnihenhao\nnihou666\nnihundan\nniit1984\nnijianwei\nnijiaosm\nnijiaosma\nnijiaosmmz\nnikajjyy\nnike1234\nnike2002\nnikeadidas\nnikechaussur\nnikenike\nnikeshox\nnikowa81\nnikuailema\nnilin720114\nnimabide\nnimabiya\nnimadabi\nnimadebi\nnimagebi\nnimaguixing\nnimajiba\nnimajiji\nnimamade\nnimamaipi\nnimanima\nnimaqusi\nnimasile\nNimdawebzwy6\nnimenhao\nnimenhaoa\nnimocong\nnina180471\nninainaide\nninanina\nnine8313\nninengxing\nninenine\nning1982\nning1986\nning1988\nning1990\nning2002\nning699261\nningbo1988\nningfeng\nningjian\nningjing\nningjing1982\nningjingzhiyuan\nningluomomo\nningmeng\nningning123\nningning520\nningning521\nningping\nningqinghua\nningshen\nningshuang\nningshuiju\nningxiang\nningxiner\nningyang\nningyifei\nningyuan\nningzhenpeng\nninhao123\nnini0510\nnini1212\nnini123456\nnini2009\nnini5201314\nnini5213\nniniang156156\nnininini\nniniwoaini\nninjaandy\nNintendo\nnirvana0852\nNIRVANAGUN\nnisenole\nNishang112\nnishi123\nnishibaichi\nnishibendan\nNISHICHUIZI\nnishidabaichi\nnishigou\nnishihajier\nnishihundan\nnishijiba\nnishikido\nnishilaji\nnishinage\nnishinima\nnishinimabi\nnishisha\nnishishagua\nnishishazi\nnishisheia\nnishisheiya\nnishishuei\nnishishui123\nnishishui?\nnishishuia\nnishishuiya\nnishiweiyi\nnishiwod\nnishiwode1\nnishiwode1314\nnishiwodeai\nnishiwodeairen\nnishiwodexingfu9\nnishiwoer\nnishiwoma\nnishiwoweiyi\nnishizhu1\nnishizhu123\nnishizhu@\nnishizhua\nnishizhuba\nnishizhuma\nnishizhutou\nnishizui\nnishizuibangde\nnishuihan\nnishuohuaa\nnishuone\nnistelrooy\nnitamade\nnitnitnit\nniu1111niu\nniu123456\nniu1980622622\nniu85855858\nniuB74110\nniubi2009\nniubi74110\nniujingyu321\nniulijie\nniumali123\nniumowang\nniuniu019354\nniuniu0716\nniuniu123\nniuniu19800530\nniuniu1986\nniuniu2009\nniuniu520\nniuniu521\nniuniu788\nniuniu88\nniuniulx528439\nniuniuniu\nniuqiang\nniushaofeng\nniushouhuaniugao\nniuweiquan\nniuwenxun790909\nniuzai11\nniuzaiku\nniuziming\nniwo1314\nniwota123\nniwotadeai\nniwuliaoa\nniwxniwx\nnixiangwoma\nnixiaodan\nnixiaode\nniyeyede\nniyeyede123\nniyoubing\nnizainali\nnizdwoaini\nnizhengxin\nnizhidao521\nnizhidaoma\nnizinizi\nnizuizhengui\nnj123456\nnj511511\nnj791123\nnj888888\nnjbr520953\nnjbtest666\nnjhpbdfyy2009\nnji9mko0\nNJSD1234\nnju76lan8\nnk123456\nnklsywkl\nnky94DLF20\nnlinglingkl1013\nnll11022\nnm05261437\nnm123123\nnm5201314\nnmgbtssyz\nnmgsypsliu\nnmgyemtf\nnmq736893\nnms123456\nnmw1234567890\nnmysllgrl\nnn130582\nnn5201314\nnnjiajia\nNNNNNNNN\nnnnnnnnnn\nNNNNNNNNNN\nnnwqi123456\nnnwylogin8\nnnxh2008\nNo.89757\nNO123456\nno1no1no1\nnoahn0ah\nnoahsark\nnoanswer\nnobody917\nnobodyelse\nnobodyknow\nnodr91sj\nnoexcuse\nnoforever\nnogiveup\nnokia123\nnokia2100\nnokia2300\nnokia3100\nnokia3200\nnokia3230\nnokia3250\nnokia3310\nnokia3330\nnokia5110\nNOkia5300\nnokia5700\nnokia5800\nnokia6020\nnokia6070\nnokia6108\nnokia6120\nnokia6120c\nnokia6230\nnokia6300\nnokia6600\nNOKIA6610\nnokia6670\nnokia7200\nnokia7270\nnokia7610\nnokia8210\nnokia8250\nnokia8310\nnokia8800\nnokia8810\nnokia8850\nnokiae71\nnokian70\nnokian72\nnokian73\nnokian95\nnokianokia\nnomatter\nnomorelove\nnonenone\nnong750912\nnong840628\nnong975576\nnongchaoer\nnongfushanquan\nnonghang\nNONGnong\nNONGYULAN\nnono2010\nnononono\nnonsense\nnooneknows\nnopainnogain\nnopainsnogains\nnopassnopa1973\nnopasswd\nnoproblem\nnoranora\nnoreason\nnoregret\nnoriko98\nnorikosakai\nnorinco@@&*^#^@\nnorman2001\nnormandy\nnormannorman\nnorthbear\nnorthern\nnorthwolf\nnosmoking\nnosoaiss\nnostalgia\nnothing123\nnottingham\nNov168888\nnoveltyyang\nnovember\nNov-81\nnovestige\nnowhereno\nnowitzki\nnowitzki41\nnowornever\nnp5201314\nnpf13783828612\nnpxw0188zz\nnqr200606\nnrgloveme\nnsemf999999999!\nnshlwq1xeg\nnsns5566\nnssb123456\nnt005532\nnt123456\nnt711811\nNtae$/27\nnthu948342\nntjw654321\nntljwnet\nntP8Xcfwpl\nntP8Xcgwpl\nntP9Xcgwpl\nntQ9Xcgwpm\nntQ9Xdgwqm\nntQ9Xdgxqm\nnuandong\nnuanfeng\nnuannuan\nnui79snnui\nnuisance\nnulifendou\nnuligongzuo\nnulinuli\nnulixuexi\nnull122800\nnullnull\nnumberone\nnunogomes\nnuo341722\nnuoweisenlin\nnut040bone597\nnv19801919\nnvrenhua\nnvshengzaixian\nnwcpadme\nnwctrinity\nnwqp5yxcmc\nnx123456\nNXGyanzi\nny123456\nny6620710\nNYFCLFQUVE\nnyhtstchhgxl\nnynia2009\nnyybzdwss\nnyydtnnd\nnz19330303\nnzdwan025\nnzdwzdnm\nnzmsdwng\nnztxhhmljy\nNZZJFS98\no008161230\no00oo00o\no09fdai3er\no0h8k2d7o1p5d2f\no0i9u8y7\nO0O0oo00\nO0OO00OOO000\no1234567\no12345678\no123456o\no21o21221o\no2t4r1c9\no2wgyo1wgy\no5o9weiwei\no5val8brqj\no78068771\no987123q\no9oskd32\noays1218\nobo67520644\nobolee2009\nOBvrB22gb9\nOBvrB32gb9\nOBvsB22gb9\noccisue2009\nocean11896000\nocean123\noceandeep\noceanocean\noceanone\nOCvrB32gb9\nOCvrB33gb9\nodysseus\noebCfcy2t0\noebDfcy2t0\noebDfdy2t0\noebDfdz2t0\noepfhugdid\nofbEgdz2t0\nofcourse\nOFFICE0403\noffice123\nOFFICE2000\noffice97\nofficexp\noglivy19375\noh5201314\nohmybaby\nohmydear\nohmylove\nohmytianya\nohxuehua\noicq1234\noicq2000\nOicqLSF666\noicqoicq\noierww125\noifyy52fyy\noil800519\noilaopo15888\nok*822305\nok000000\nok00ok00\nok010803\nok111111\nok123123\nok123321\nok1234567\nok123456987\nok234038\nok372100\nok452521981\nok4525231981\nok654301\nok666666\nok6712345\nOK778899\nok81ok81\nokle6688\noklsy2165\nokmijnuhb\nokok123456\nokok588588\nokok8889\nokonelufu\nol83663698\noldseven\noleander\noligomer\noliver123\noliverkahn\nolivia123\nolivia520\nolympic2008\nolympics\nomegazhizun2005\nomeomeome\nomom2598\nonceagain\noncemore\none123456\none1two2\none2free\none2three\none520yilin\noneapple\nonedream\nonenight\nonenightstand\nONEONEONE\nonetom200\nonetwo12\nonetwothree\nongahong\nonix1985\nonline82\nonly-2009\nonly4you\nonlyforme\nonlyforyou\nONLYIKNOW\nonlyleon11\nonlylove\nonlyloveyou\nonlyme6670\nonlymyself\nonlyonly\nonlyou12345\nonlyoubob\nonlythis\nonlytime\nONLYTONY\nonlyworkt\nOntheroad\nontheway\noo000000\nOO0000OO\noo00o0o0\noo00oo00\noo00OOO000\noo1461oo\noo5201314\noo8888oo\noolg2008\nooo000...\nOOO000000\nooo000o0o0\nOOO000ooo\nooo123456\nooooo00000\noooooo000000\nooooooooo\noooooooooo\noooopppp\nooopppkl\noopp123456\noopp2496855\nooppllkk\nooppoopp\nooxxooxx\nop000000\nop197736\nop741852\nopal1010\nopen1234\nopen2000\nOPEN546400\nopen618yx\nopencsdn\nopendoors\nopenfree870405\nopenheart\nopenisme\nopenlock\nopenlove\nopenmydoor\nopenNow1\nopenopen\nopenpq16\nopensesame\nOPENTHEDOOR\nopentianya\noperation1\noperator1\nopopp5miqq\nopopp5miqqmi\noppa760805\noppooppo\nopportunities\nopportunity\nopt100083\noptcv589\noptimism\noptimist\noptimistic\noptiplex\nopwer2095\noracle10g\noracle12g\noracle8i\nOracle9i\noracledearbook\norange12\norange123\norange1277\norange1982\norange831127\norange88\norangeorange\nordinary\norenokati\nORIGINAL\norton2020\nosatnacl\noscar123\noscar19810404\noscar2008\noslu043078\nosohu6763\not756adsl\notP8Wcfvpl\notP8Wcfwpl\nottffsse\nottffssent\nou123456\nou49a15w\nou950212\noubouyuu\noucuilan\nouioui2005\nouning1987\nour2009xixi\nourplace\nourstory\nousah1632\noush2010\noutpop0325\noutstanding\nouy198585\nouyang123\nouyang520\nouyangfeng\nouyangjian\nouyangjing\nouyangjj\nouyangke\nouyangqian\nouyangyan\nouyangzixin\nouyf0031\novercome\noverload\noverlord\novermars\novermind\novernight\nOVEROVER\noverseas\novertime\nowen1214\nOwen1234\nowen1979\nowen19791214\nowen791214\nowen86123j\nowenowen\nowenraul\nowensherry\noy123456\noy199888\noyangxiaolu\noyes1234\noyf993101\noyp6742422\noysjoysj55\np1234567\np12345678\np1314521\np15066263388\np1963h10m23\np1l9a8n2t\np1o2i3u4\np2001558\np24p24p24\np2922756\nP2ssw0rd\np2WcFfjCvr\np2WcFgjCvr\np2WcGfjBvq\np2WcGfjBvr\np2WcGfjCvr\np2XcFgjCvr\np3078314z\np31415926\np3szhrsc\np5024767\np5201314\np5985418\np5h6oe3nix3\np789456123\np79w12z19\nP@ssw0rds\npa051644\npa123456\npa54108561\npa88word\npacergxb4812150\npaganini\npagedown\npahipi123\npai3.1415926\npai31415\npai31415926\npaiduoge\npaingain\npainpast\npainsgone\npal22098\npan12345\npan303088\npan556600\npan618333\npan7lin1\npan871025\npancheng\npanda007\npanda123\nPanda520\npandapan\npandapanda\npandasong\npandation\npandatom\npandora520\npanduola\npang5570059\npangchao\npangdong\npangdudu\npangfeng\npanghaibin\npanghuang\npangjian\npangjie0413\npangjing\npanglei19811231\npanglong\npangtong\npangying\npangzhilong\npanhaili\npanhaochi5\npanjungen\npanliang\npanlisu726043\npanpan123\npanpan520\npanpan521\npanpanpan\npanpengp\npanqiang\npanqiuli\npanshuai\npanshuang\npansiyu1992\nPanther222\npantyhose\npanweibo\npanxiang\npanyi1203\npanyuanyuan\npanzhihua\npao123456\npao215800\npaomozhixia\npaoni1314\npaoniu123\npaopao123\npaopao520\npaopaolong\npaopaopao\npaopaotang\npapa1999\npapapapa\npapatoetoe\npapillon\npappas512\nparachute\nPARADIS1\nparadisebird\nparanoia\nparasite\nparco88matlab\npardonme\nparkpark\nparrot0430\npartners\npass0118\npass1976\nPass1word\npass2000\npass2002\npass2008\npass2009\npass637653\npass8888\npassat2002cn\npasschen\npasscsdn\npassenger\npasserby\npasstest\npasstianya\npassty110\npassward\npasswenwen\npasswird\nPASSWORD0\npassword00\nPassword01\npassword0402\npassword2008\npassword2009\npassword301\npassword520\npassword8\npassword88\npasswordd\npasswordz\npassworf\npasswork\npassworld\npasswrod\npassyrhxzcgk\npastang000\npaulpaul\npaultest\npauny1985122\npausebreak\npayuandian\npayy7788\npayzy123\npazzword\npb123456\nPBwAB32fb9\nPBwBB32fa9\nPBwBB32fb9\npc123456\npccillin\npcdppppcd\npchacha007\npconline\npcsed019\npctoolscom\nPCwAB32fb9\nPCwAB32gb9\nPCwAC32gb9\nPCwAC33gb9\nPCwqC33gb9\nPCwqC33hb9\nPCwrC33gb9\nPCwzC33gb9\npd123456\npd20018289\npd760319\npdbCeby2xx\npdbDeby2xx\npdbDfby2xx\npdbDfcy2xx\npdbDfcy3xx\npds123456\npduckilj\nPDwqC33hc9\nPDwqC33hca\npe651111\npeace114\npeaceful\npeachpeach\nPearl65471914\npearlpearl\npebDfcy3xx\npebDfcz3xx\npebDfcz3yx\npebEfcz3yx\npeerless\npeggybecky\npei123456\nPEIhuai1986\npeimeng1990\npeipei0327\npeipei123\npeipei1985\npeipei520\npeipei521\npeiqingsc\npeiyongjun\npeking2008\npen95801\npenavico\npeng0721\npeng0927\npeng1231\npeng1234\npeng12345\npeng1980\npeng1982\npeng1983\npeng1984\npeng1986\npeng1987\npeng1988\npeng1zhi\npeng2008\npeng4545454\npengchao\npengchen\npengcheng\npengchris\npengchuan\npengcong\npengdong\npengdoveli\npengfang\npengfei521\npengfeng\npenggang\npenghong\npenghuan\npengjian\npengjiang\npengjie520\npengjing\npengjuan\npengliang\npengling\npengling520\npenglong\npengming\npengna20\npengpeng123\npengpeng520\npengpeng521\npengpengche\nPengQian\npengqiang\npengqing\npengqiong\npengqiquan\npengquan\npengshan\nPENGSHAO\npengshiyang\npengshuai\npengshuang\npengsong\npengting\npengtong\npengwang\npengwei1977215\npengxiang\npengxiao\npengxiong\npengyang\npengying\npengyong\npengyou123\npengyoua\npengyuan\npengyuanze\npengzhang\npengzhen\npengzheng\npeninsula\npenjie0411\npenny123\npenny51LXR\npennylion\npennypenny\npentium2\npentium3\npentium4\npeo784784ny\npepperoni\npepsi_9097\npepsicola\npepsipepsi\nperception\nPerfection\nperfectlove\nperfectman\nperfzb12\nperhapseme\npermanent\npersephone\npersever\nperseverance\npersie123456\npersistence\npersonnel\npetalrain\npeter007\npeter0627\npeter123\npeter1234\npeter168\npeter2010***\npeterliu\npeterpeter\npeterwang\npeterzhang\npethidin97e\npetpetpet\npetrochina\npetroleum\npf123456\npf168168\npf512527\npfbEgdz2t0\npfcEgdz2t0\npfcEgeA2t0\npfcEgez2t0\npfcFgeA2t0\npfcFgeA3t0\nPfizer12\npfm631101\npg340827\npgdsqgbj\npgh198912\npgm006988\nph123456\nphankfei\nphb12345\nphd1987321\nPhenixTY\nphiladelphia\nphilips01\nphilips1\nPhilips123\nphilips88\nPhilosoPhy\nphoebe00\nphoenix007\nphoenix123\nphoenix?!\nphoenixtv\nphotonman\nphotoshop\nphw5982731\nphy820214\nphysical\nphz818818\nphzxchen1201\npi314159\npi31415926\npian0321\npianpian\npiao0776\npiao5322\npiaofeng\npiaoliang\npiaoling\npiaoliuping\npiaomiao\npiaopiao\npiaoping\npiaowu123456\npiaoying\npiaoyuan\npiay40061\npicasso19820716\npicc1234\npicc95518\npifront99\npig123456\npig820901\npig8jie@@\npigful123\npiggytoy\npigloveu\npigpigpig\npihaidebaba\npijiupaopao521\npikapika\npilipala\npiliwuuk\nping1021\nping1023\nping1225\nping1234\nping1975414\nPING2008\nping2430\nping3721\nPING5201314\npingan123\npingan2009\npingchang\npingchangxin\npinger00\npingfang\npinggang\npingguo123\npingguomao\npingheng\npingjing\npingliang\npingpang\npingping520\npingping521\npingpinganan\npingpong1\npingshui\npingting\npingxiang\npingyang\npingyuan\npingzi89\nPINK7KIMI\npinkbaby\npinkblue\nPINKSHINING\npinky321\npipi2008\npipipipi\npippo0809\npippobobo\npippotiamo\npirate1985\npisces1983\npisces226\npiscescl22\npishuang\npittuniv\npiyupiyu\npizzahut\nPJ123456\npj5201314\npjbbs888\npjppyppcp\npjq1976811\npjt123456\npjtech159\npk032638\npk123123\npk123456\npk1234567\npk19910119\npk5201314\npk561019\npk62365556\npk7758521\npkpk2008pkpk\npkpkpkpk\npkueducn\npkusky2009\npl123456\npl19840615\npl811028\npl943700\npl98/*ol-?\nplaneade\nPlayboss\nplayboys\nplayfire\nplaygame\nplaying666\nplayplay\nplaysnooker\nplaystation2\nplly2008\nplm.200.\nplm123456\nplm520316\nplmm505050\nplmmplmm\nplmoknijb\nplokmijn\nplokmijnuhb\nplovemewj\nplsloveme129\nplusplus\nplwjdd2010\nply13355781963\nplz198851\npm123456\npneumonia\npnj123456\npo110werbai\npo123456\npocahontas\nPOCHACCO\npocketdisk\npohope3595583=\npoi123456\npointjor\nPOIU1226\npoiu1234\npoiu123456\npoiu7890\npoiu9876\npoiuhjkl\npoiulkjh\npoiupoiu\npoiuqwer\npoiuy09876\npoiuy123\npoiuy12345\nPOLARIS5201314\npolestar\npolice110\npolice123\npoliceman\npollyanna\npolygram\npony1980daisy\npony2006\npony2009\npooannlotus\nPOOHPOOH\npop123456\npoplooker\npopmusic\npopo1234\npopo123456\npopokodocho\npopopo258\npopower1\nPoppop123\npoppoppop\nporpoise\nporsche911\nposeidon\nposition\npositive\npossible\npourquoi\npower007\npower888\npowerapple\npowerboy\npowercheng\npowereyou\nPowerful\npowerhouse\npowerise\npowerlove\npowerMAN\npowerneso3632\npowernet\npowernew\npoweroff\npowerofn\npowerpower\npp000000\npp001119\npp123123\npp123321\npp1314520\npp147258\npp19840410\npp5113022\npp5201314\npp520520\npp560810\npp654321\npp654987\npp7758521\npp790621\npp963852\nppa16888\nppbb1314\nppgasc!1\nppk314159\nppkk1208\nppooii123321\nppooiiuu\nppp12345\nppp3239287\nPPPAAASSS\npppp0000\npppp1234\nppppoooo\nppppppppp\nPPPPPPPPPP\npprr1976\nppstream\nppzxdfhy\npq123456\npqad2007\npqhkrg4jfw\npqj12431243\npqowieuryt\npqpqpqpq\npqy5201314\npr0tel99\npr123456\npr23wnsp\npractice\nprcchina\npredestina\nPREJAMES\npremiere\nprenstar\npresident\npretender\nPrettyboy\nprettykeren\nprettywoman\nprimrose\nprince19881102\nprince7319\nprinceton\nprint123\nprintemps\nprinting\nprintinput2651\nprintprint\nprintscreen\nprisonbreak\npro#1122\nproactive\nprobiz2009\nprocedure\nprodigal\nproductkey\nprofession\nprofessor\nprogramer\npromanserbs\nprometheus\npromises33\npronunciation\nprotel99\nprotocol\nprotools\nprovence\nprovidence\nprovince\nprsbl888\nps-28860\nps123456\nps123456789\nps3xbox2\npser@303\npsmszy11\npsu19jma17\npsw147258\npsychology\npt123456\npt37bote\npt891008\nptlddsa401\nptO8Wcfvpl\nptsj123456\nptzxwwdz\npu1321yi\npu930191\npubo1130\npugongying\npuluowangsi\npumapuma\npunkpunk\npupu496064122\npurchase\npuremilk\npurplelily\npurplepurple\npurplerain\npuruiyan\npusabaoyou\npush2020\npussy0115\nputao0919\nputiqianhe\nputongren\npuyanhong\npw123456\npw216216\npw4hy2cn\npwanfang\npwd@1234\npwdlf018\npwfdpwfd\npwfpjf258258\npwft98182\npwin98se\npwj1988721\npwllanmao\npWO7Vbevok\npWO7Vcevok\npWO7Vcfvok\npx123456\npx12345678\npx19870408\npx27365d\npx821209\npxkk5158\npxl2022496\npXO8Vcfvol\npXO8Vcfvpl\npy123456\nPy5201314\npy6016275\npy730819\npyf11111\npyf720810\npyg198300\npyg512413\npyj92077920\npyk650720\npykqwfgso\npyllovebyj\npythia226\npyx775877\npyxistime\npyy2240014\npyzy7869\npz123456\npzh123456\nPZSHBBDYD\nq0000000\nq000000000\nq0000000000\nq0123456\nq0154142\nq098q098z\nq111111111\nq111111q\nq12301230\nq123321q\nq12341234\nq123456.\nq1234560\nq1234567q\nq1234568\nq1234569\nq123456w\nq123654789\nq123g321\nq123w456\nq123w456e789\nq12w34e56\nq1969/69\nq19701010007\nq19840320q\nq1984620\nq19870324\nq1a2z3w4\nq1a2z3w4s5x6\nq1aa22bb\nq1q2q3q4q5\nq1w2e3111\nq1w2e3123\nq1w2e3bc\nq1w2e3r4A\nq1w2e3r4t5122\nq1y2xyz891205\nq2500040\nq2558573\nq2745259\nq2qqq222\nq2WbGfiBuq\nq2WbGfjBuq\nq2WcGfjBuq\nq31415926\nq3269201\nq3350199\nq337871416\nq3636401\nq369369369\nq383336089\nq392814082\nq424153q\nq43052919\nq456130q\nq4612051w\nq5201304\nq5202602\nq5871817\nq609401874\nq6312131\nq6344787\nq6408409\nq6528193\nq654321q\nq66256810\nq6630663\nq693148q\nq7102181027\nq7129035\nq741852963\nq7777777\nq7w8e9A4S5D6\nq83ii38ai\nq87140646l\nq8z5h5a5\nq963852741\nq9899218p\nq9y7q9713\nqa1314520\nqa5201314\nqa6617701\nqa74101128\nqa888888\nqadxqwana\nqasxdcfv\nqasxdcfvazwsgbhn\nqaws8899\nqawsed123\nqawsed1234\nQAZ.1234\nqaz000000\nqaz110110\nqaz111111\nqaz111112\nqaz111333\nqaz112114\nqaz112233\nQAZ123.0\nQAZ12300\nQaz12345\nqaz12345678\nqaz1234567890\nqaz123456qaz\nqaz123456wsx\nqaz12369\nqaz123789\nqaz12388\nqaz123aw3\nQAZ123PLM\nqaz123qaz123\nqaz123wsx123\nqaz123yui\nqaz12wsx\nqaz135246\nqaz13579\nqaz147369\nqaz147wsx\nqaz159753\nqaz198656\nqaz19951021\nqaz20060128419\nqaz2008qaz\nqaz38123\nqaz456789\nqaz54321\nqaz547xcv\nqaz654321\nqaz666666\nqaz66778899\nqaz741963\nqaz741wsx\nqaz741wsx852\nqaz753951\nqaz7758521\nqaz789wsx456\nqaz870626\nqaz940721\nqaz963258\nqaz963852\nqaz963852741\nqazedc123\nqazedctgb\nqazedctgb123\nqazhuangguan\nqazlcqaz\nqazokm123\nqazokmpl\nqazplm123\nqazpokm12\nqazqaz111\nqazqaz12\nqazqaz123123\nqazqaz88\nqazqazqazqaz\nqazqwe123\nqazqwert\nqazujm123\nqazw123ds\nqazw21123\nqazwqazw\nqazws567\nqazwsx00\nqazwsx000\nqazwsx098\nqazwsx1!\nqazwsx111\nqazwsx123321\nqazwsx12345\nqazWSX123456789\nqazwsx123edc\nqazwsx13\nqazwsx13579\nqazwsx147\nQAZWSX147258\nqazwsx2007\nqazwsx2009\nqazwsx2014\nqazwsx21\nqazwsx258\nqazwsx369\nqazwsx520\nqazwsx531492\nqazwsx555\nqazwsx7410\nqazwsx753\nqazwsx888\nqazwsx8899\nqazWSX963\nqazwsx987\nqazwsxdearbook\nqazwsxedc0\nqazwsxedc1\nqazwsxedc12345\nqazwsxedc789\nqazwsxedcr\nqazwsxedcrfv123\nqazwsxedcrfvb\nqazwsxedcrfvtgby\nqazwsxpl\nqazwsxqa\nqazwsxqwe\nqazwsxzxc\nqazx1234\nqazxc123\nqazxcv1054\nqazxcv12\nqazxcv123\nqazxcv129\nqazxcvbnm123\nqazxqazx\nqazxsw11\nQAZXSW123456\nqazxsw741\nqazzaq123\nqazzaqqaz\nqazzqazz\nqb19831105\nqb770330\nqc123456\nQCwzC33gb9\nqcxlkr4915\nQCxzC33gb9\nQCxzC33gba\nqczc33d8\nqd111111\nqd123456\nqd8327165\nqdfd2009\nqdj13528459449\nqdjp624918\nqdlzxkgk\nQDMYNYMQ\nqdnxl274\nqds114815\nQDwpC33hca\nQDxpD33hca\nQDxyD43gba\nQDxyD43hca\nQDxzC33gba\nQDxzC43gba\nQDxzD43gba\nqebang2010\nqebEfcz3yx\nqecEFcz3yx\nqecEfdA3yx\nqecEfdA3zx\nqecEfdz3yx\nqecEgdA3zx\nqeehou123\nqeeka.com\nqepdbasf\nqepdcwqi\nqepqthnn\nqepwq123\nqepwq1314\nqepwq520\nQEPWQ521\nqepwqgtggan\nqepwqqepwq\nqepwqsffgw\nqepwqtianya\nqepwqvcvc\nqeqeqeqe\nqetuo13579\nqetuoadgjl\nQETUOwryip\nQExoD34ica\nQExpD34hca\nqf0079sty\nqf123456\nqf4544223\nqfcEgdA3zx\nqfcFgdA3zx\nqff307700754\nqfhwrepwq\nQFY#930601@XZX\nqg13256115011\nqgcFgeA3t0\nqgcFhfA3t0\nqgcFhfB300\nqgdFhfB300\nqgdGhfB300\nqh058273\nqh123456\nqh2676li\nqh5201314\nqh681121\nqh87078210\nqhlzhy8816973\nqhonesty\nqhuang7811\nqhwanghx3236\nqi030701\nqia0wei8o1214\nqian1102\nqian1234\nqian123456\nqian1983811\nqian1986\nqian1987\nqian5888\nqian8110\nqian@780629\nqianbiyining\nqianchang\nqianchao\nqianchen\nqiancheng\nqianchunmei\nQIANCONG\nqiandong\nqianduoduo\nqianfang\nqianfeng\nqianfoshan\nqiang0203\nqiang0922\nqiang1234\nqiang1986\nQiang325\nqiang521\nqiang890728dan\nqiangang\nqiangdao\nqiangeng\nqiangguo\nqianghua\nqiangjian\nqiangluck\nqiangren\nqiangsheng\nqiangshou\nQIANGWANG\nqiangwei\nqiangweidaoyu\nqiangzai\nqiangzhe\nqianhong\nqianhuayang\nqianjian\nqianjiang\nqianjin922!!\nqianjing\nqianjinqianjin\nqianliang\nqianlili\nqianlima\nqianling\nqianling0\nqianlizhiwai\nqianlong\nqianmazixun\nqianmeng\nqianming\nqianna0379\nqiannian\nqiannvyouhun\nqianpeng\nqianqian041123\nqianqian1023\nqianqian123\nqianqian1314\nQIANQIAN521\nqianrong\nqianshan\nqiansheng\nqianshou\nqianshou52\nqianshui\nqianshuiyu\nqianwa001\nqianwang\nqianwei1234\nqianwei75zjy\nqianxian\nQIANXIANGUOCUN\nqianxiao\nqianying\nqianyong\nqianyu123456\nqianyuan\nqianyue2009\nqianyuqianxun\nqianzhihe\nqiao123456\nqiaodami\nqiaofeng\nqiaogang\nqiaogu123\nqiaohong\nqiaojian\nqiaojiao\nqiaojing\nqiaojuan\nqiaokeli\nqiaoliang\nqiaoling\nqiaomaibao\nqiaomima\nqiaomingyang\nqiaoo201benben01\nqiaopeisen\nqiaopeng\nqiaoqian\nqiaoqiao123\nqiaorenliang\nqiaoshuai\nqiaotong\nqiaowenjing\nqiaoyang\nqiaoying\nqiaozhen\nqiaozheng\nqiaqia891219\nqibaobao\nqichaoyu\nqicheguan\nqichuhua\nqidaihua52\nqier06379031\nqieziqiezi\nqifeng4240327\nqihong1984\nqijian123\nqijin100\nqikanjie\nqilixiang\nqilongzhu\nqiluo412\nqimukakaxi\nqin1314520\nqin213214\nQIN3268240\nqin3ca9o\nqin662495\nqin781005\nqin8512231014\nqin891019\nqinaide521\nqinaideafu\nqincheng\nqinchong\nqinchuan\nQiner520\nqinfeishuai\nqing1234\nqing1314\nqing181610\nqing1975\nqing1975728\nqing1982\nqing1986\nqing1987\nqing1988\nqing2008\nqing2009\nqing8147268\nqingchao\nqingchen\nQINGCHENG\nqingchuan\nqingchun\nqingchunwuhui\nqingchuyulan0017\nqingdao2008\nqingfang\nqingfeng007\nqingfeng123\nqingfeng1982\nqingfeng1986\nqingfeng520\nqinggenwolai\nqinggeqq\nqingh0123\nqinghaixining\nqingheli\nqinghong\nqinghua123\nqinghuaci\nqinghuadaxue\nqinghuan\nqinghuatongfang\nqinghui930\nqingjaymei\nQINGjian\nqingjiang\nqingjiao\nqingjing\nqingkong\nqingkuang\nqinglang\nqinglian\nqingliang\nqingling\nqinglong\nQingMemory\nqingmeng\nqingming\nqingngng\nqingnian\nqingniao\nqingning\nqingping\nqingpingguo\nqingqian\nQINGQING\nqingqing123\nqingqing77\nqingqingcao\nqingqingdexin\nqingqingiwen\nqingqingqing\nqingqingzijin\nqingquan\nqingrenjie\nqingrenwuzui\nqingshang\nqingsheng\nqingshu828\nqingshui\nqingshuru\nqingsong138\nqingtang\nqingtian123\nqingtian19890205\nqingtian333!\nqingting\nqingwang\nqingwei219\nqingwufeiyang\nqingxiang\nqingxiao\nqingxing\nqingyang\nqingying\nqingyong\nqingyuan\nqingyuwei\nqingzhang\nqingzheng\nqingzhou\nqingzong\nqinhuangdao\nqinjiabin\nqinjiu123\nqinjun0494\nqinjun666\nqinlei2003\nqinliang\nqinmadao13\nqinmiairen\nqinqian820426\nqinqiang\nqinqikingki\nqinqin123\nqinqin19861221\nqinqin520\nqinqin521\nqinqin58\nqinqin8511699\nqinqinbaobei\nqinqinni\nQINQINQIN\nqinqinwodebaobei\nqinsheng\nqinshihuang\nqinshuai\nqinshuang\nqinweidui\nqinwenxue\nqinxiang\nqinyanwei59\nqinyanyan\nqinyi1116\nqinyiling\nqinzilong\nqinzunxing\nqiong1212\nqiong123\nqiong520\nqionghai\nqionglong\nqiongqiong\nqiongren\nQIONGYAO\nqioujuan\nqipilang\nqiqi123456\nqiqi1314\nqiqi2000\nqiqi2006\nqiqi5201314\nqiqi562877\nqiqi830114\nqiqi8325635\nqiqiaini\nQIQIAIWO\nqiqibeibei\nqiqihaer\nqiqiqiqi\nqiqiwoaini\nqiseguanghua\nqishengnan0662\nqishi0091\nqishiaini\nqishikane\nqishuang\nQISIWOLE\nQita2004\nqitiandasheng\nqitianle\nqiu.1983\nqiu050907\nqiu5201314\nqiuaijun\nqiubo58851814\nqiubojun\nqiufeng520\nqiuguosong\nqiujinyu\nqiulian0663\nqiuliang\nqiuminglhf190803\nqiuqiang\nqiuqianwang\nqiuqiong\nqiuqiu123\nqiuqiu511\nqiuqiu520\nqiuqiu521\nqiuqiu715@qiuqiu\nqiuqiuqiu\nqiurisiyu\nqiushaohan\nqiusheng\nqiushuang\nqiushuiyiren\nqiuti2000\nqiutian123\nqiutiantt\nqiuwenbin\nqiuxiang\nqiuyunfa\nqiuzaihuang\nqiweiwei\nqiwfnyso\nqixia717619\nqixiaomin\nqiyashipin\nqiyingying\nqiyuan0812\nqizhenhui\nqizhi123456\nqj11182000\nqj123456\nqj19881008\nQJ825107\nqjddgdft\nqjf790623\nqjfhwrepwq\nqjgkwqgf\nqjgwhklw\nqjgwhrgw\nqjgwhvbw\nqjgwrgtfdv\nqjklw518\nqjklwqjklw\nqjl783758\nqjndqjnd\nqjqvbynijcm\nqjviqviqyao\nqjwqrkwyg\nqjyjwxfywwf2\nqjysjahty\nqkhhayccw55\nqkuncf89\nql123456\nql5201314\nqlb790314\nqlbnw2127432\nqlgdlkl288\nqlihaijun\nqlm123456\nqlmldhlw\nqlolo1234\nQLT19871015\nqlvcha123456\nqlyytxwd\nQM123456\nqmd630608\nqmdongman\nqmfvgi4e\nqmpzGM21\nqmwnebrv\nqngwngqg\nqnqt707278\nqomolangma\nqookee1030\nqoolu2009\nqp108260\nqp123456\nqp5201314\nqpalzm123\nqpalzmgh\nqpewqvcvcWWD\nqpqpqpqp\nqpwo1029\nqpwoeiru\nqpzm1234\nqpzmqpzm\nqpzmwoxn\nqq00000000\nqq0000qq\nqq000111\nqq001001\nqq00qq00\nqq00ww99\nqq01012110\nqq010203\nqq011257\nqq012345\nqq01470147\nqq02219678\nqq0434061\nqq0595qq\nqq089800\nqq094551\nqq101010\nqq102030\nqq110119\nqq110120\nqq110355\nqq1111111\nQq11111111\nqq111111qq\nqq1111qq\nqq111222\nqq112112\nqq112113\nqq11223344\nqq1122ww\nqq119119\nqq1199840\nqq11qq11\nqq11ww22\nqq120120\nqq121000\nqq121212\nqq12121212\nqq1212123\nqq123000\nqq1230123\nqq12301230\nqq123123qq\nqq12341234\nqq12344321\nqq1234560\nqq123456zz\nqq123457\nqq12345qq\nqq1234qq\nqq123520\nqq123555\nqq123qq123\nqq12qq12\nqq131421\nqq131425\nqq1314qq\nqq134679\nqq135246\nqq142536\nQQ147369\nqq150055\nqq15737274\nQQ159357\nqq163.com\nqq163110\nqq163123\nqq163163\nqq168168\nqq185819\nqq1879110924\nqq191072197\nqq198185\nqq19821008\nqq19841203\nqq198511\nQQ19851214\nqq1986212\nqq19890722\nqq1989126\nqq19901006\nqq19910611\nqq1qq2qq3\nqq2009qq\nqq201314\nqq2035046\nqq21043511\nqq211314\nqq2130087\nqq218218\nqq2210358\nqq22221111\nqq222222\nqq223809\nqq2521339\nqq255141808\nqq258258\nqq258269\nqq2634153\nqq26608584\nqq277545701\nqq30986819\nqq310064\nqq314159\nqq31415926\nqq321321\nqq3249114\nqq331018\nqq333333\nqq343589\nqq34715616\nqq3613152\nqq365412\nqq369258\nqq369852\nqq3711556li\nqq4325176qqpp\nqq4538835\nqq456258\nqq456456\nqq456769\nqq456852\nqq456852456852\nqq51202324\nqq5121314\nqq513168\nqq515105251qq\nqq518518\nqq5201314QQ\nqq520530\nqq5208825\nqq52099123\nqq520qq520\nqq521521qq\nqq5538171\nqq556688\nqq564728631\nqq58431945\nqq584520\nqq601311931\nqq6152091\nqq622920\nqq6364021\nqq640801\nqq666888\nqq678756\nqq690804438\nqq6923481\nqq718520\nqq74108520\nqq741852\nqq742004\nqq750216\nQq753951\nqq756806105\nqq767230867\nqq7777777\nqq77861283\nqq778899\nqq80335050\nqq810721\nqq820324\nqq831027\nqq850429\nqq850610\nqq853123\nqq85888398\nqq860125\nqq861230\nqq87574812\nqq8811848\nqq885450\nQQ888888\nqq88999508\nqq890507\nqq951357\nqq951753\nqq963000qq\nqq981230\nqq98612557\nqq98739873\nqq999999\nqqa123456\nqqaa123456\nqqaa568900\nqqaaaaaa\nqqaazz11\nqqaazz123\nqqaazzwwssxx\nqqabc123\nqqabc161681688\nqqadmin567\nqqayy1314\nqqbarno3\nqqdwjlkn\nqqgames123\nqqjiandan\nqqlkz19897705\nqqlovett\nqqmima123\nqqmm1236\nqqq000000\nQQQ0000000\nqqq111111\nqqq111222\nqqq111qqq\nqqq123321\nqqq12345\nqqq1234567\nqqq1234567890\nqqq123qqq\nqqq1314520\nQQQ147258\nqqq147258369\nqqq56789\nqqq666666\nqqq7417129\nqqq7675561\nQQQ789456\nqqq870625\nqqqq12312\nqqqq7777\nqqqq8888\nqqqq963.\nqqqqaaaa\nqqqqpppp\nqqqqq00000\nqqqqq111\nqqqqq123\nqqqqq123456\nqqqqq701\nqqqqqq0123\nqqqqqq111\nQQQQQQ111111\nqqqqqq12\nqqqqqq123456\nqqqqqq93\nqqqqqqq1\nqqqqqqqa\nqqqqqqqabc\nqqqqqqqq1\nqqqqqqqq2\nqqqqqqqqabc\nQQQQQqqqqq\nqqqqqqqqqqq\nqqqqqqqqqqqq\nqqqqqqqqqqqqqqqq\nQQQQQQQQQQQQQQQQQQQQ\nQqqqqwwwww\nqqqwe1234\nqqqwww111\nqqqwww123\nqqqwwwppp\nqqqwwwqqq\nqqssj666\nqqtianya\nqqw123456\nqqw380976\nqqww1122\nqqww1212\nqqww1234\nqqww225588\nqqww2288\nqqwwaass\nqqwwee123\nqqwweeaassdd\nqqwweerr1234\nqqwweerrtt\nqqwwqqww\nqqxingsfd\nqqyunyuqq\nqqz851227\nqqzhin191\nqqzjyywx\nqqzzmmpp\nqr123456\nqrfigoijssq\nqrwe1423\nqs123456\nqs19860405\nqs822858\nqs87654321qs\nqsceszasd\nqscwdvefb\nqshnqjitx\nqshnwqkb\nqsnbdwdx\nqsqdl123\nqsss1111\nqswsazjd\nqsyjcsxdl\nqsyjzjdxyh\nqt123456\nqt135790\nqt1qt2qt3\nqtgeqtge\nqtgz0507\nqthtyzno\nqtpqtpqtp\nqtvennwqi\nqu0421146di\nqu123456\nqu927011\nquan1123\nquan1224\nquan2974\nquanchao\nquanhuang\nquanjiafu\nquanjiaxingfu\nquanjing\nquanliyifu\nquansheng\nquanshui\nquanshuo\nquantuoren\nquanwang\nquanxiao\nquanyc19\nquanyecha\nquanying\nquanzhixian\nquanzhou\nquatsch778\nqudifang\nqueen123\nqueen2007\nqueen500\nqueen721\nqueennie\nqueens1984\nquerido19\nquestgame\nquezikaimen\nqufanxiao2008\nqufuyoungzhou\nquguofeng462088#\nquhongming\nquick123\nquicksand\nquijiqquijiq\nquincbhu\nquitexit\nquitquit\nqujun285203\nqulicai2010\nqulicai2011\nqunima11\nqunimadi\nqupengfei\nququ33240\nqusi123456\nqusiba123\nqusibani\nqusiqusi\nqust7102\nqutamade\nquxinjian\nquyan761126\nquyang51\nquzhaiuser\nquzhongrensan\nqva654321\nqvbshnwq\nqVN7Ubeunk\nqVN7Ubeuok\nqw000000\nqw0123456\nqw03225045\nqw080019\nqw111111\nqw111222\nqw123321\nqw123456qw\nqw123654\nqw13145566\nqw1346741\nqw147852\nqw16899168\nqw172653\nqw19830228\nqw1987110\nqw198725\nqw321111\nqw321321\nqw412861629\nqw456789\nqw654321\nqw666666\nqw6866363\nqw7114969\nqw741852\nqw7758258\nqw7758521\nqw778899\nqw780718\nQW789789\nQW820321\nQW820812FY\nqw987654\nqwa123456\nqwa15474\nqwas123321\nqwAS1234\nqwasd123\nqwaszx1234\nqwaszx410.COM\nqwaszx778899\nqwaszxedc\nqwaszxer\nqwaszxerdfcv\nqwaszxqaz\nQWASZXQW\nqwaszxqwaszx\nqwaszxzxqwaszxzx\nqwaz12345\nqwc12345\nqwdy2880836\nQWE!@#123\nQWE!@#456\nqwe000000\nqwe00000000\nqwe00123\nqwe111111\nqwe112233\nqwe1225270\nqwe123!@\nqwe1230123\nqwe12312\nqwe12345678\nqwe1234567890\nqwe123456asd\nqwe123566\nqwe123ASD\nqwe123asd456\nqwe123rty\nqwe123rty456\nQWE123ZXC\nqwe12asd\nqwe13579\nqwe159357\nqwe159qwe\nqwe1asd2\nqwe217406\nqwe300100\nqwe358zxc\nQWE3838438\nqwe456456\nqwe54321\nqwe6462594\nqwe666666\nqwe741852\nqwe789123\nqwe789789\nqwe789asd456\nqwe789qwe\nqwe789zxc123\nQWE82941\nqwe8481550\nqwe987654\nqweasd11\nqweasd12\nqweasd1234\nQWEasd741\nqweasd789\nqweasd832\nqweasd88\nqweasd97531\nqweasd987\nqweasdqwe\nqweasdqweasd\nqweasdzx\nqweasdzxc1\nqweasdzxc7\nqweASDzxcv\nqweazsxdcrfv\nqwedsa123\nqwee341123\nqweewqqwe\nqwekiolou\nqwepoi123\nqweqaz123\nqweqwe11\nqweqwe12\nqweqwe123123\nqweqwe222\nqweqweqweqwe\nqweqwetianya\nqwer.1234\nqwer0123\nqwer0987\nqwer1111\nqwer1122\nqwer123123\nqwer1234567\nqwer12345678\nqwer1234qwer\nqwer1234x\nQWER123654\nqwer12ty\nqwer13579\nqwer147258\nqwer159357\nqwer1979\nqwer200326\nqwer2008\nqwer2009\nqwer20408919\nqwer2345\nqwer654321\nqwer760803\nqwer7890\nqwer7894\nqwer8888\nqwer][po\nqwerasdf123\nqwerasdf1234\nqwerasdf8724\nqwerasdfzxcv123\nqwerasdzx\nqwermnbv\nqwerpoiu\nqwerpoiu99\nQWERqwer1234\nqwerqwerqwer\nqwert!@#$%\nqwert000\nqwert09876\nqwert111\nQWERT123456789\nqwert123yuiop\nqwert2009\nQWERT321\nqwert67890\nqwertasd\nqwertasdfgzxcvb\nqwertpoiuy\nqwertqaz\nqwertqwert\nqwerttrewq\nqwerty11\nqwerty111\nQWErty12\nQWERTY12345\nqwerty130702\nqwerty321\nqwerty66\nqwerty88\nqwerty886688\nqwertyas\nqwertyasd\nqwertyasdfgh\nqwertyhy\nqwertyppaspp\nqwertyqw\nqwertyqwerty\nqwertysky123\nqwertyu1\nqwertyui123\nqwertyui12345678\nqwertyuiop00\nqwertyuiop123456\nqwertyuiop2008\nqwertyuiop369\nQWERTYUIOPASD\nqwertyuiopasdfgh\nqwertyuip\nqwertzxcvb\nqweruiop\nqwervbnm\nqwerzxcv\nqweyx18188\nqweyyzsa\nqwezxc12\nqwezxc123\nqwezxc468\nqwezxcasd\nqwezxcnm\nqwfc9663\nqwjqwj714\nqWN7Ubeuok\nqWN7Vbevok\nqWO7Vbevok\nQWpo1973VBmn5533\nqwqwaaa1\nqwqwqqww\nqwqwqw001\nqwQWqw123\nqwqwqw22\nqwrglgjg\nqwsa1122\nqx123456\nqx1314520\nqx197300\nqx748853\nqx780021957\nqxdy0576\nqxj32409\nqxm156699\nqxnm1e01\nqxp577277\nqxtslash\nqxVbGfiBuq\nqxVbHfiBuq\nqxw640918\nqxWbGfiBuq\nqxyj0699\nqxyqtmrll1998\nQy111111\nqy123456\nqy168168\nqy4u9mnr\nqy785481\nqy7ttvj7vg\nqy861120\nqye1114829\nqyh123456\nqyijepwq\nqyijqqyijq\nqyj521-yzq\nqyj84929\nqyly86112777\nqyq691206\nqyqy0815\nqyrs2010\nqys821qys821\nqytqytqyt\nqyw19871119\nqywp1980\nqyy86133093\nqz123456\nqzf327327\nqzh5860669\nqzqx980615\nQZTKWGSFUIYDHR\nqzwxecrv\nqzy091186\nr00000000\nr0a9n2qian\nr1234567\nr12345678\nr123456789\nr1978234\nr1a9i8n7\nr1e2i3k4o5\nr3h28c9ab\nr510225830226331\nr5201314\nr53913708\nr6ymz2fjk8\nr7649894\nR84vm3eui\nr850219q\nr9ronaldo\nr9sgf619\nra86s5kz\nrabbit111\nrabbit123\nrabbit1987\nrabbit520\nRabbiT75\nrabbitzhu\nraboy911\nrachel123\nracoon2000\nradarxjl\nRadcliffe\nradiohead\nradioheart\nrafa8lution\nRagnarok\nraikkonen\nrain0625\nrain1234\nrain1314\nrain1980\nrain1982\nrain1983\nrain2891\nrain7777\nrainbow001\nrainbow123\nrainbow1978\nrainbow520\nrainbow7\nrainchen\nraincoat\nraindrop\nRainfall\nrainforest\nraingirl\nraining12\nrainingsemir\nrainking\nrainlain\nrainlover\nrainnight\nrainning\nrainqueen\nrainrain\nrainrong\nrainrosehoney\nrainsnow\nrainstar\nrainsword\nrainting\nrainwind\nrainy1124\nrainyday\nraistlin\nramone2000\nran60030\nranchaoli5420\nrandolph\nranran123\nranran2001\nranran520\nRANRAN521\nranranran\nranyu1212\nrao5242441bin\nraoxingfu\nraozhirou\nraoziyan\nrarukuanshieru\nrational\nraul0627\nraul1943\nraul1977\nraul197762745\nraulblanco\nraulraul\nray123456\nray821103\nray87614\nrayallen\nrayeen2009\nrayman007\nraymond8\nraymondgxy\nrayosbirdy\nrayrayray\nrayzhang\nrchg762888\nrcxicuar\nrczzcj1979\nRD200613\nRD226407\nrdhyrtjetj@126.c\nRDxyD43hca\nRDY20031966\nrdyhokgvqafghbkm\nreadbook\nreadnovel\nreadthrough\nreaishenghuo\nreal1234\nrealchina\nreallife\nreallove\nrealm520\nrealplay\nrealreal\nrealtime\nrealtrue\nrebecca1011\nrebeccainshadow\nred123456\nred200157\nredaiyulin\nredalert\nredangel\nredbanana\nredblack\nredcar**\nredchina\nrede1111\nredearth\nredemption\nredfire7\nredflower\nredgreen\nredhorse\nredkissfs\nredlinux\nredlovexu\nredmaple\nredmoon123\nredriver\nredsea888\nredspider\nredsreds\nredstone\nredwoods\nReDX1212\nreel4ever\nrefgdgngn\nrefreshing\nreggie23\nreiayanami\nreinhard\nreinhard0726\nreko3ibm\nreliance\nreliao120com\nrememberme\nren110120\nren123456789\nren532343\nren790217030406\nrenaissance\nrenaoren\nrendanruju\nrene8253\nrenestepaside\nrenfeng813\nrenguang\nrenjiaini\nrenjian132\nrenjianrenai\nrenjiaxuan\nrenjing1984\nrenliang\nrenlinfei-lee\nrenliping\nrenlirenli\nrenliziyuan\nrenminbi\nrenmindaxue\nrenmiying\nrennuk0421\nrenqiang\nrenqingyang\nrenrenren\nrenrenxiaonei\nrenshangkun\nrensheng\nrenshengrumeng\nrenshiju850228\nrenti007\nrenwoxing\nrenwumatou\nrenxiang\nrenxianliang\nrenxianqi\nrenxiaolei\nrenxiaoyao\nrenyanli\nrenyinghui\nrenyinghui1126\nrenyinghui8315\nrenyingying\nrenyuanyuan\nrenzaitianya\nrenzheairen\nrenzheng\nrenzhengfei\nreNzhEwUDi\nrenzhichu\nrenzhong\nrenzixuan\nrerfeddc\nreryghyw\nresearch\nresetreset\nresortgp\nresource\nresponse\nrestarthu6260\nrestaurant\nrestless\nRESURCRC\nreta3r67\nrete88888\nreto1112\nrety113420\nrety8959\nreuentahl\nreveal88\nrewq4321\nrewqfdsa\nRExoD34ica\nRExoD44ica\nRExoE44ica\nrexue1002\nRExyD43hca\nREynE44ida\nREyoE44ida\nREyxD44hca\nREyxE44hca\nREyyD43hca\nREyyD44hca\nrf123456\nrf18938ad11018\nrfcFgdA3Ax\nrfcFgdA3zx\nrfcFgdB3Ax\nrfcFgeB3Ax\nrfcGgeB3Ax\nrfcGgeB3xx\nrfcGheB3xx\nrfdGheB3xx\nRFynE44idb\nrg634dgs\nrgbnckfqp\nrgdGheB3xx\nrgdGheB4x2\nrgdGheB4xx\nrgdGheC4x2\nrgdGhfB300\nrgez5381\nrgfdftjf@#\nrgm1987rgm\nrgntnsaw\nrgrdpadg\nrhapsody\nrhb6291205\nrhdGhgC300\nrhdHigC300\nrheHigC300\nrhkfjaps\nrhkfqbte\nrhmm111111\nrhoo915233\nrhwhdgns22\nrhythmgt\nribggw306\nricci1213\nrice1215\nrich1983\nrich2008\nrich3344\nrich8888\nrichbird\nrichenqi\nrichgirl\nrichie623\nRichie9119\nrichie@ren\nrichiejen\nrichjessica55\nrichrich\nridiculous\nright123\nright5left4\nrighthere\nrightnow\nrihe5814034\nrihouzia\nrihua6814\nriji5573\nriki_yang\nrillwong\nringring\nrinidaye\nrinilaomu\nrinima123\nrinima124\nrinimabi\nrinimade\nrinimagepi\nrinimama\nrinixianren\nrinrin0919\nriquelme\nriri553237\nriririri\nrise19901208\nrisefast\nrisingsun\nrisinima\nrisjtrod\nrita318280\nRITARITA\nriver0622\nriver1212nn\nriver123\nriverriver\nriyueyinghua\nriyueyongchun\nriyygynui\nrj123456\nrj5201314\nrjq0330tht\nrjq882455//..\nrkbxudlz\nrl123456\nrm123456\nrmb@5911\nrml11311\nrnzwhlcc\nroadroad\nroadtoparis\nrobby123\nroben2008.\nRobert07\nRobert123\nrobertobaggio\nrobin123\nrobin1979\nrobin520\nrobinchen\nrobinrobin\nrobotech\nroc152535\nrocacerocace\nrochest99\nrochester\nrock123456\nrock2000\nrockerluo\nrockets11\nrocketup\nrockfish\nrocking1988\nrockrock\nrockroll\nrockwell\nrocky6118\nrockychen\nrockyrocky\nrocy0607\nroczheng\nroderick\nroger123\nrogerlong1982\nrogerroger\nrogerxie\nroky124828\nromacrose\nromanyoung\nron790902\nronaldo123\nronaldo9\nrong1104er\nrong1234\nrong123456\nrong1314\nrong1974\nrong1983\nrong2008\nrong4504172\nrong5201314\nrong628628\nrong87620\nrongcheng\nronger68\nronger86\nrongfeng\nrongjing\nrongli5201314\nrongliang\nrongrong123\nrongrong520\nrongshuxia\nrongtian\nRongWing808suen\nrongxing\nrongyu21\nrongyuan\nrongzhu830129\nronin123456\nroosevelt\nrootshe11\nrosalind\nrosaline\nrosamond\nrose1234\nrose123456\nrose1982\nrose1984\nrose2000\nrosebush\nrosechanel\nrosegarden\nrosejack\nrosekeeper\nroselove\nroselover\nRosemarry\nroserose\nrosineluo0914\nrosselli\nrosyclouds\nrotterdam\nroves0429w\nroxy890109\nrp121014032\nrqcijyiewxdmiff\nrr1982rr\nrrrr1979\nrrrrrrrrr\nrrrrrrrrrr\nrrrrrrrrrrrrrrrr\nrrs111107\nrs107654\nrs116251\nrs123456\nrs13991333366\nrs145981\nrsqabcde\nRSQLGH1314\nrsz8273891\nrszycyzj\nrt123456\nrt223323\nrt29wejmyx\nrtfgvb76112\nRTRTRTRT\nrtt57680\nrtuhgfhrr\nrty232127\nRtyfghvbn\nrual001107\nruan123456\nruan1893keke00\nruan1987\nruan4321\nruanchuang\nruanjing\nruanming\nruanruan\nruanzheng\nruby1025\nruby1027\nrubyruby\nrubyvsalec\nruc278719\nruc278719cupl\nrugl1012\nruguoaixiaqu\nruguodeshi\nruguokeyi\nruguoniaiwo\nruguonihaiaiwo\nruguowoshini\nrui100100\nrui123456\nruicheng\nruicosta\nruifeng5\nruihan123\nruihan123sk\nruihanbjjs\nruiky3398884cr\nruiling608\nRUIRUI123\nruirui520\nruirui5201314\nruirui521\nruishuibin\nruixiang\nruiyang557\nruiyaruiya\nruizheng\nrukawa11\nrukawa19\nrukawakaede\nrukia6550128\nrukia88823\nrUM6Tbdtnj\nrumirumi\nrunme1018\nrunnerup\nrunrun8483729\nruoxue78\nruru1988\nrushiwowen\nruth17181246\nruxin92213\nruye3723\nruyi301|*|999999\nrVM6Tbdtnj\nrVM6Tbdunj\nrVN7Ubeunk\nRVWs7r6d\nrw213400\nrwok100402\nrx123456\nrx3367998\nrx78gp02a\nrxchaoka220088\nrxUaHehAtp\nrxUaHeiAtp\nrxUbHeiAtp\nrxVbHeiAtp\nrxVbHeiAtq\nrxVbHeiAuq\nrxVbHfiAuq\nrxVbHfiBuq\nrxw120554\nRY123456\nry30301010\nryan1982\nryangiggs\nryanryan\nryoheiye\nryomaechizen\nrysfpljtybhktk\nryukyuyu21216891\nryuuciki\nrzs100115\nrzy886zy\ns00000000\nS0305017\ns102030t\ns1111111\ns11111111\ns11112222\ns1230123sas\ns123123123\nS1234567890\ns123456e\ns123456s\nS123921Q\ns123q456\ns123s123\ns12henhu\ns131313z\ns1314520\ns1326960\ns1373283\ns147258369\ns1511201996\ns192401w\ns1976216\ns19771314a\ns1982l416\ns19831223\ns19861026\ns1t2o3n4\nS20030111\ns2006j75\ns20081212\ns2114w59\ns22222222\ns2j3l9a5\nS31415926\ns3i3n0g2\ns429004800\ns455149602\ns4612476\ns52009958\ns520521s\ns5211314\ns5266639\ns5867816\ns606123230\ns66666666s\ns6877984\ns733buggle\ns7758521\nS789456123\ns88888888\ns8905310\ns8962795\nsa$$$$$$\nsa13ling\nsa7231645\nsaand4261\nsabrina520\nsachkqdxyrjhdh\nsacramento\nsadzhi2000\nsaekifuji\nsafdsafd\nsafeguard\nsafesafe\nsafshftjgrweerjh\nsaga0707\nsaga6667639\nsagacity\nsagahelen\nsagakanon\nsage0918\nsagittarius\nsai160109\nsail1317\nsainimama\nsaintisme\nsaintkurt\nsaintseiya\nsaisai520\nsaisaisai\nsakimomo\nsakura1225\nsakura123\nsakura1234\nsakuraba\nsakuragi\nsakuralove\nsakurasakura\nsakurawars\nsakurazuka\nsalaheiyou\nsalamander\nSALANGANE\nsalasdir\nsale123456\nsally0301\nsally123\nsally510\nSALLY520\nsallysally\nsalome0327\nsalt8828\nsaltlake\nsam00000\nsam000000\nsam082299\nsam123456\nsam986369\nsamhuang\nsamiel1985\nsamkong2323\nsamlyboy123\nsammi1227\nsammi123\nsammi520\nsammi819\nsammicheng\nsammisammi\nsammizhu\nsamnleehom\nsampan100037\nsampdoria\nsamsamsam\nsamson830\nsamsuNG123\nsamsung1980\nsamsungsamsung\nsan123456\nsan19821222\nsan3878743\nsanben56\nsanchuan\nsanctuary\nsand5jing^^\nsandaosho523\nsandsand\nsandwich\nsandy123\nsandy198759\nsandy2000\nsandy2hh\nsandy520\nsandy6226\nsandydai\nsandyliu\nsandysandy\nsanfrancisco\nsang1218\nsangedaibiao\nSANGEJIU\nSANGSANG\nsangtana\nsanguang\nsanguine\nsanguoyanyi\nsangyuan\nsanjiang\nsanjingshou\nsanjuqingan\nsanlijituan\nsanmao520\nsanmaoecho\nsanping67\nSanr32zhs8\nsanrenxing\nsansan33\nsansandeqi\nsanshengshi\nsantong@322\nsantorini\nsanxing12\nsanyecao\nsanzhong\nsanzijing\nsaobi60312\nsaobian920\nsaofengyizu\nsaokejiao\nsapecc09\nsapphhire\nsarah123\nsarah888\nsarah999\nsarahlove1011\nsarahsarah\nsars2003\nsarslove\nsasd2238\nsaskatoon\nsatan007\nsatan4506\nsatellite\nsavage24\nsavagegarden\nsavagery\nsaveyouself\nsavio0000\nsavnwu2121\nsaxophone\nsayaj8142327\nsayforever\nsaygoodbye\nsayhello\nsayloveyou\nSAYONARA\nsayounala\nsaysorry\nsayyousayme\nsb102575\nsb11201122\nsb1234567\nsb5201314\nsb740920\nsbbb5731161480\nsbcglobal\nsbdxii01\nsbfbgdvkeg\nsbfnyygy\nsbgogwfnh\nsbiaqgnui\nsbidt1216\nsbihc0208\nsbihclibo\nsbihje1980\nsbiuggn78\nsbmqjbcy\nsbqujyygy\nsbso821001\nsbsoje127856\nsbwffgqtdh\nsbwfgqim\nsbx584mer362\nsbyygtpl159abc\nsc123456\nsc334455\nsc587wyt\nsc811231\nsca198010\nscarborough\nscarecrow\nscat1017\nscau2009\nsccd3332\nscfvke234\nsch198101040208\nscheisse\nschllshl1\nschmeichel\nschneider\nschubert\nschulman\nschumacher\nscientist\nsciflow0\nscj668866\nscjpscjp\nscofield\nscopio1119\nscorpions\nscorpius\nscottyang\nScrollLock\nscs88001948\nscsc70734\nSCSHZHCH1968\nSCUISCUI\nscuss33$$\nscutscut\nscwdm2004\nscx19820503\nscylt2008\nscyszhjlmj8689\nsd111111\nsd123123\nsd123456789\nsd147258\nsd2ssngsw\nsd4026739\nsd45utjf\nsd4f23se\nsd5654f6\nsd5681ht\nsd7310186\nsd780315\nsd830802\nsd85yx999\nsd880210\nsd88yx999\nsdayjiaa\nsdbyfvbfg\nsddddddd\nsddhznh77\nsddman510520\nsdf123456\nsdf456wf\nsdfgdafhafh@126.\nsdfkg45674\nsdfsdf11\nsdfwer234\nsdg943p2\nsdgao8do\nsdgfw3452\nsdhzffgg\nsdj7788250\nsdjkle89\nsdjksdjk\nsdjnwsyt6210461\nsdjsh123\nsdjz871017\nsdlygs00\nsds31322432128\nsdsajsdsaj\nsdsd8130\nsdsqzszcc0621\nsdsrz1234\nsdsy0353\nsdu999999\nsdwhsqj74\nsdyabsdyab\nsdz0413WF\nsdzrjsywgx\nse123456\nse210096\nsea122678\nsea12345\nsea123456\nseabed1983\nseabridge\nseafood37\nseaheart\nseaman1111\nseaman1983\nseamansun\nseamon2330c\nseanhawk\nseanopen\nseansean\nseaseasea\nseasee^*^122221\nSEASHELL\nseashine\nseashore\nseashore1\nseaskyvv\nseawater\nsebastien\nSecession\nsechskies\nsecond200554\nsecret480\nsecretgarden\nsecretmm\nsedaluho\nseedfeed\nseedseed\nseedtyyii1986\nseeklove\nSeemefly\nseeyouagain\nseeyoulater\nseeyouseeme\nseishiro\nseishirou\nselayang\nselcetli\nselect123\nselflove\nselin0904\nselin999\nselina123\nselinaxiu\nselinazhu\nsellerie\nsemsem99\nsemtime123\nsen12345\nsenchang\nsendoh11\nsengai048551\nsengnon2009\nsengren6\nsenru0711\nsenru711\nsenruonly\nsensible\nsenzhong.net\nseo123456\nseocompv\nsep29zqbx\nseparate\nsephiroth\nSeptember\nserafuku\nseraphic\nseraphim\nserenade\nsereneazure\nSERVER123\nSERVERSERVER\nses50932082\nsese520520\nsess2008\nsesshomaru\nSesshoumaru\nseszdj730216\nsetmefree\nsetups12\nsetv123456\nsevearhedy\nseven007\nseven123\nseven520\nseven777\nseven890417\nseveneleven\nsevenq1112\nsevenseven\nsevensix\nsevenstar\nseverussnape\nsex101310\nsex123456\nsex123oo!\nsexsexsex\nSEyxE44hca\nsezg2522\nsf.bj825\nsf123456\nsf19811026\nsf512921\nsf930544\nsfd456sd\nsfdswf23detg\nsfhhfssfh\nSFLD3344\nsfm01314521\nsfn020330\nsfqh1098\nsfsfsfsf\nsfteng197919\nSFymF44jdb\nSFynE44idb\nSFywE44hca\nSFywE44hcb\nSFywE44icb\nSFyxE44hca\nsfyz25866\nsfz230620\nSFzmF45jdb\nSFzwE44icb\nSFzwE44idb\nSFzwF44idb\nsg007ilvy\nsg123456\nsg1234567\nsg22937264jq\nsg6812984\nsgbgsbbsdbtjkjs@\nsgc161618\nsgdGheC4x2\nsgdHheC4x2\nsgdHhfC4x2\nsgdHhfD4x2\nsgl1271216\nsgm123456\nsgm77sgm77\nsgr876UYG\nSGS885252\nsgstgshkjds@126.\nsgy83662527\nsgzc3927\nSGzmF45jdb\nsh000000\nsh000409\nsh060378\nsh111111\nsh112233\nsh1124666\nsh12345678\nsh123456789\nsh123987\nsh1314520\nsh200433\nsh290978\nsh350684807\nsh5852001\nsh601857\nsh62293899\nsh840310\nsh888888\nsha123456\nsha870719\nsha890818\nshabi110\nshabi123\nshabi2046\nshabishabi\nshabiyige\nshachongji\nshadandan\nshademode\nSHADOUXING\nshadow1020\nshadow123\nshadowhor\nshadowliu\nshaensei841006\nshagua520\nshairly258\nshaka919\nshakespear\nshakespeare\nshamanking\nshamasjun\nshami333\nshan101314\nshan1234\nshan123456\nshan13013959171\nshan1987\nshan1989\nshan5201314\nshan571xing\nshan57xing\nshan786068318\nshanchuan\nSHANDAIZIJI\nshandian\nshandongjinan\nshandongren\nshandongsheng\nshane520\nshaneshane\nshanfeng\nshang000\nshang001\nshang111\nshang114\nshang123\nshang2005\nshang521\nshang52100\nshangban\nshangbin\nshangchao\nshangcheng\nshangchp\nshangdang\nshangdao\nshangdeng\nshangdi123\nshangdiaiwo\nshangdian\nshangdibaoyou\nshangdong\nshangfeihappy\nshangfeng\nshangguan\nshangh71\nshanghai00\nshanghai01\nshanghai021\nSHANGHAI1\nshanghai123\nshanghai1943\nshanghai2\nshanghai2008\nShanghai2009\nshanghai2010\nshanghai520\nshanghai88\nshanghai99\nshanghairen\nshanghaishi\nshanghang\nshanghao\nshanghen\nshanghua\nshanghucai\nshanghui\nshangji2858\nshangjian\nshangjiang\nshangjie\nshangjin\nshangjing\nshangjingbt250\nshangjun\nshanglei\nshangliang\nshanglin\nshangliumao\nshangming\nshangnan\nshangning\nshangpin\nshangqing\nshangqiu\nshangri-la\nshangrila\nshangrui\nshangsan\nshangshan\nshangshang\nShangShanRuoShui\nshangshaofu\nshangshi\nshangshuo\nshangtian\nshangtianya\nshangtong\nshangtuo\nshangtuozhiyang\nshangwang\nshangwei\nshangwen\nshangwenjie\nshangxia\nshangxianyue\nshangxiao\nshangxiaosan\nshangxin1999\nshangxin2009\nshangxina\nshangxing\nshangxinren\nshangxuan\nshangxue\nshangyang\nshangying\nshangyou\nshangyuan\nshangyue\nshangyun\nshangzhe\nshangzhi\nshanhuhai\nshanhuyu\nshanji123\nshanji13579\nshanjian\nshanjiaojiao\nshanjing\nshankezhen\nshanlang\nshanliang\nshanling\nshanming\nshanqi114\nshanqing\nshanquan\nshanshan123\nshanshan1980\nshanshan28\nshanshan33\nshanshanwoaini\nshanshui\nshanxian\nshanxiazhijiu\nshanxiren\nshanxixian\nshanyang\nshanyi0411\nshanying\nshanyong\nshanyueer\nshanzhai\nshanzhai321\nshao1234\nshao1234-\nshao12345\nshao123456\nshao1976\nshao1988\nshao822041\nshaobing\nshaocancan\nshaochen\nshaocheng\nshaodong\nshaofang\nshaofeng\nshaogang\nshaohong\nshaojian\nshaojianbo\nshaojiang\nshaojie0922\nshaojing\nshaojuan\nshaokexin\nshaoliang\nshaoling\nshaolinsi\nshaolong\nshaoming\nshaonian\nshaopeng\nshaoping\nshaoqian\nshaoqiang\nshaoqing\nSHAOrong\nshaoshan\nshaoshao\nshaosheng\nshaoshuai\nshaosong\nshaotian\nshaoting\nshaoxiao\nshaoxing\nshaoxing330602\nshaoyang\nshaoying\nshaoyong\nshaoyu2860227\nshaoyu836\nshaoyuan\nshaozhen\nshapolang\nshaquille\nsharapova\nshare123\nsharecxc\nsharon07\nsharp123\nsharpmaker\nshasha123\nshasha1987\nshasha521\nshashade\nshashasha\nshashengwan\nshashibiya\nshashini\nshasi001\nshawking\nshawshank\nshawushe\nshayatou\nshazhuang\nshazhude\nshazishazi\nshb711130\nshb770515\nshc123456\nshct1990\nshdbzhdhh\nshdHhfD4x2\nshdHifD4x2\nshdIifD4x2\nshe12318\nshe5201314\nshebudeaini\nsheep521\nsheepsheep\nsheHigD401\nsheHihD401\nshehua789\nshehuizhuyi\nsheiaiwo\nsheIihD401\nsheji123987\nsheji66778899\nshejialing456564\nshejishi\nshell13585852455\nshelling\nshellingford\nshely3939\nshen113wei\nshen1234\nshen12345\nshen1521\nshen1688\nshen1978\nshen1982\nshen1983\nshen1985\nshen1986\nshen1987\nshen1989\nshen5201314\nshen710710\nshen825903\nshena9958\nshenaimixiang\nshenaini\nSHENAISHIren\nshenbing\nshenbj109\nshenchao\nshenchen\nshencheng\nshenchiping\nshencongwen\nshendehaizi\nshendiao\nshendong\nshenfang\nshenfeng\nsheng001\nsheng007\nsheng1234\nsheng123456\nsheng1649\nsheng1984\nsheng1986\nsheng1987\nsheng1989\nsheng2009\nsheng256\nsheng520\nsheng5201314\nsheng840430\nshengang\nshengbai\nshengbin\nshengcheng\nshengcun\nshengdan\nshengdanjie\nshengdian\nshengdoushi\nshengfang\nshengfei\nshengfeng\nshengguang\nshenghao\nshenghua\nshenghui\nshenghuo\nshenghuo123\nshengjia\nshengjian\nshengjie\nshengjin\nshengjinbi1983\nshengjing\nshengjun\nshengkai\nshenglan\nSHENGLI09VICTORY\nshenglin\nshengling\nshenglong\nshengmei\nshengmi007\nshengming\nshengnan\nshengping\nshengqiang\nshengquan\nshengren\nshengrikuaile\nshengruxiahua\nshengsheng\nshengshi\nSHENGTANG\nshengtao\nshenguang\nshengwei\nshengwen\nshengxia\nshengxian\nshengxiao77\nSHENGXIN\nshengxue\nshengyan\nshengyang\nshengyao\nshengyin\nshengying\nshengyuan\nshengyue\nshengzhan\nshengzhang\nshengzhe\nshenhang\nshenhong\nshenhua123\nshenhuan\nshenhuxi\nshenjiaqi\nshenjie520\nshenjing\nshenjingbing\nshenjixi\nshenjuan\nshenkyo1\nshenlang\nshenli3939317\nSHENLIANG\nshenling\nshenmemima\nshenmeshenme\nshenmeya\nshenmeyu\nshenming\nshenning\nshenpeng\nSHENPING\nshenqi51\nshenqian\nshenqiang\nshenqing\nshenrong\nshenrui84\nshens1d2gf\nshenshan\nshenshen0104\nshenshenaini\nshensheng\nshenshine\nshenshuo\nshentao123\nshentian\nshentijiankang\nshenting\nshentong\nshenwang\nshenwang0703\nshenwd1115\nshenwenlie\nSHENXIAN\nshenxiang\nshenxianyu\nshenxiao\nshenxing\nshenyan520\nshenying\nshenyong\nshenyq008\nshenyuan\nshenzhen0078\nSHENZHEN12\nshenzhen123\nshenzhen2008\nshenzhen558899\nshenzhenssd\nshenzhong\nshenzhou\nShenzhumei\nsheouyang\nshepherd\nshepuqinke\nsherlockholmes\nsherrill\nsherry123\nsherry4869\nsherry520\nsherry521\nsherryli\nsherrymio\nsherryzr\nsherwin616\nshescort\nsheselina\nshesheshe\nsheshiman\nsheshouzuo\nShevchenko\nshevchenko7\nshewoaini\nshewoqishui\nsheyang2806\nsheyuchen\nshgsaqngshkjds@1\nshhuiling\nshi12345\nshi123456789\nshi253368011\nshi5201314\nshibingtuji\nshibushi\nshibushia\nshibuwodaI\nshichang\nshichangbu\nshichangxuan\nshicheng\nshichengjie\nshichong\nshichuan\nshichunhui\nshicunyi\nSHIDAISHUOBO\nshidanwuai\nshidonglin\nshiduo922\nshieldmima\nshierkezhi\nshift123\nshiftalt\nshiftshift\nshigougou\nshiguang\nshiguang009\nshihaihua1\nshihaihui\nshihailong\nshihainan\nshihaishan\nshihaiyan\nshihuahua\nshihuang\nshihuashishuo\nshijiali\nshijiamoni\nshijian123\nshijiana\nshijianhua\nshijianjun\nshijiayi\nshijiazhuang\nshijichunlei888\nshijie123\nshijiebei\nshijieditu\nshijiediyi\nshijiediyideng\nshijieheping\nshijiemori\nshijingjing\nshijingyu\nshijunjie\nshilan0717\nshilei123\nshilei702197\nshiliang\nshilihua\nshiliujiequ\nshiluodexin\nshilybaby\nshiming1\nshimiso8361718\nshinanhua\nshine123\nshine200\nshine520\nshine888\nshineboy\nshinee0505\nshinelee\nshineshine\nshinesteel\nshinewing\nshinezm11\nshingo4254\nshingping\nshinhwa19980324\nShinhwa324\nshinhwa4ever\nshinhwa520\nshinhwa6\nshinhwajunjin\nshinhyesung\nshinichi54\nShining77\nshiningu\nshinning\nshinoshino\nshiny1616\nshiny2005\nSHIPPING\nshipuzhanshen\nshiqi520\nshiqian0\nshiqiang\nshiqishidai\nshiqunxin\nshiranui\nshireshire\nshirley0990\nshirley123\nshirley3025\nshirley520\nshirley56\nshirleytalent\nshirui0508\nshisanshao\nshiseido\nshisen13\nshishang\nshishang2009\nshishang43\nshishen123\nshisheng\nshishenme\nshishi123\nshishi520\nshishikan\nshishiqiushi\nshishishi\nshishuai\nshishubin\nshiss3377\nshit1111\nshiteater\nshitfuck\nshitiantian\nshitingyou\nshitkame\nshitong88\nshitou123\nshitou520\nshitouji\nSHITSHIT\nshiwaxinge\nshiwei123\nshiwei520\nshiweiwei\nshiwenbo\nshiwenjie\nshiwenjing\nshiwo127\nshiwobaichi\nshiwoshiwo\nshixiang\nSHIXIAOFEI\nshixiaohui\nshixiaojing\nSHIXIAOLEI\nshixiaoli\nshixiaolin\nSHIXIAOLONG\nshixiaonan\nshixiaoqing\nshixiaoyan\nshixiong\nshiyafei\nshiyan123\nshiyanfeng\nshiyang21sky\nshiyanjun1201\nshiyanming\nshiyanshi\nshiyanyan\nshiyediyi\nshiyicai198332\nSHIYILIAN11\nshiyimiao\nshiyinan888\nshiyiqing\nshiyishi\nshiyiyue\nshiyu123\nshiyu12321\nshiyuan7826929\nshizairenwei\nshizhang\nshizhen0895\nshizheng\nshizhewudi\nshizhi514\nshizhijinkou\nshizhilong\nshizhong\nshizijia\nshiziwang\nshizizuo\nshizk414\nshj123456\nshj567890\nshjandgyj\nshk19790401\nshkiishkii\nshl19671127\nshlzpq1992\nshmilmay\nshmilutom\nshmiluzp\nshmily00\nshmily0322\nshmily1213\nshmily1225\nshmily123\nshmily1314\nshmily1981\nshmily1984\nSHMILY1985\nshmily1986\nshmily1988\nshmily20\nSHMILY2008\nshmily28\nshmily520\nshmily521\nshmily746459\nshmily77\nshmily811128\nshmily85\nshmily99\nshmilybl\nshmilybwj\nshmilycc\nshmilyhui\nshmilyjay\nshmilyjj\nshmilyll\nshmilylove\nshmilyprient\nshmilyqq\nshmilyshmily\nshmilytt\nShmilyyi\nshmilyyy\nshmilyzai\nshmilyzd\nshmilyzw\nshmlxy1955\nshngshkjds@126.c\nsho86074504\nshockwave\nshooting\nshop34618838\nshortcut\nshotinhead\nshoufangkai\nshougu2007\nshougyd^oklaixp\nshouhaizhe\nshouheng\nshouhutianshi\nshouhutianxin\nshouji123\nshoujihaoma\nshoujikaikai\nshoushang\nshoushida\nshoushou\nshoushoujiji\nshoushoushou\nshouwang\nshouwangzhe\nshouxing\nshouzhudaitu\nshowgood\nshowhand\nshowlove\nshowme123\nshowme@1207\nshowmeit\nshowmelove\nShowMeMoney\nshowmethem\nshowmoney\nshowshow\nshq789456123\nshshsh08\nshshshsh\nsht671418\nshtd123456\nshtd5208\nshtsw678\nshu123456\nshu6701174\nshuai520\nshuai521\nshuai7911\nshuaibao\nshuaidai\nshuaige123\nshuaijie\nshuaimao\nshuairen\nshuaitony\nshuaiwei\nshuang04\nshuang123\nshuang123456\nshuang1987\nshuang521\nshuanger\nshuangfei\nshuangfeiyan\nshuangfeng\nshuanghe\nshuangjing\nshuanglang\nshuanglong\nshuangshi\nshuangwaiwai\nshuangxi\nshuangyan\nshuangyang\nshuangying\nshuangyu\nshuangyue\nshuangyuzuo\nshuangzi\nshuashua\nSHUCHENG\nshuchong\nshudaixiong\nshue-ling\nshufan123\nshuguai9\nshuguang\nshuhuang\nshui0105\nshui123456\nshui1995can\nshuiaiwo\nshuibian\nshuibing\nshuidian\nshuifeng\nshuifengqing\nshuigege\nshuiguolanzi\nshuijian\nshuijiao\nshuijingzhilian\nshuijun123789\nshuijunwang\nshuilian\nshuiling\nshuimitao\nshuiniao\nshuiping\nshuipingzuo\nshuiqing\nshuirh54317h\nshuiruohan\nshuishen\nshuisheng\nshuishiwo\nshuishou\nshuishou100\nshuishui5354\nshuiwuyj\nshuixian\nshuixian811225\nshuixian8667\nshuixiang\nshuixing\nSHUIXING1028\nshuiyang\nshuiyanhan\nshuiyihong\nshuiying\nshuiyiren\nshuiyuan\nshuiyuan++\nshuiyunjian\nshuizhidao\nshuizhong\nshuizhuyu\nshujiang\nshukaihan\nshuming24622310\nshunfeng\nshunjian\nshunlian\nshunping\nshunqiziran\nshunshun\nshunshun2008\nshunv1982\nshunyuhuan\nshuoaini\nshuoaiwo\nshuohuaya\nshuoniaiwo\nshuoshuo\nshuqiang\nshurumima\nshushang\nshushizhu789\nshushu18\nshushu520\nshushu88\nshushunihao\nshushushu\nshuxiang\nshuxuejianmo\nshuxuetd\nshuyuan119110\nshuyun1984\nshuyunxiangke\nshuzhang\nshuzhuamao2328\nshwingtools\nSHWYQMAMA\nshwythnn\nshx4620552\nshxchhefang\nshxiaoguo\nshy123456\nshy19830921\nshy2134443\nshybxtwdmm\nshyshyshy\nshytshyt\nshzhendao\nsibarking\nsibgumeng\nsibuliao\nsichuandaxue\nsichuanren\nsickbaby\nsickfred\nsidajiekong\nsidekick\nsidf1819@\nsieben38\nSiegFride\nsiegfried\nsieIihD401\nsieIjhD401\nsieIjhE401\nsieJjhE411\nsiemens6618\nsiemens6688\nsifakaoshi\nsifan7269\nsifone8253\nsighsigh\nsiguanglei\nsihaiweijia\nsiheyuan\nsihuangkun\nsiledouyaoai\nsilen4486\nsilence8878jl\nsilence984225\nsilkay1226\nsilly123sxc\nsillyboy\nsilverbullet\nsilverfox\nsilverwolf\nsilverzl\nsimaliang\nsimaoyh0\nsimatuzi\nsimba520\nsimdoo2009\nsimen8728\nsimgoo123\nsimon007\nsimon1218\nsimon123\nSIMON123456\nsimon2008\nsimon2798110\nsimon409\nsimonlee\nsimonsimon\nsimple123\nsimplelife\nsimplelove\nsimssims\nsimulation\nsimulator\nsin30=0.5\nsina.com.cn\nsina1234\nsina1978\nsinaaa123\nsinacom123\nsinacomcn\nsinacosa\nsinamail\nsinasina\nsinasohu\nsinathena\nsinbadlee\nsince19781022\nsince1987\nsince1989\nsince1989?\nsince21!\nsincerely\nsincerity\nsincerly\nsincesuoloco\nSINGAPORE\nsingaporean\nsingasong\nsingle123\nsingleman\nsingsing\nsingsong\nsinian999\nsinianni\nsinister\nSinLang59\nsinochem\nsinocom11\nsinosino\nsinosoft\nsinotrans\nsinoy123\nsintucom123\nsipangzi\nsiquhuolai\nsiren0802\nsirenbang\nsirius9716\nsiriusblack\nsishuiliunian\nsishuinianhua\nsisi1022\nsisiaidabai\nsisiaijun1314\nsisichen999\nsisileehom0816\nsisinana\nsisisisi\nsisiwenwen\nsisiwoaini\nsisiyar712139\nsissi1117\nsissisissi\nsister66\nsisyphus\nsitting99\nsiwangbiji\nsiwenmei521\nsiyankai\nsiyebushuo\nsiyecheng\nsiyi801120\nsiyuaiqinQ\nsiyuan1213qw\nsiyuanvote\nsiyue1900\nsiyuetian\nsj000000\nsj123123\nsj123456789\nsj19770310\nsj314159\nsj3668701\nsj5201314\nsj5620jy\nsj798011yy4444\nsj829037\nsj987654321\nsjb77622\nsjb@2010\nsjblrj123\nsjdhmtthm6\nsjdklf123\nsjf12345\nsjg861226\nsjh123456\nsjh666666\nsjh71012078\nsjj123456\nsjj520917\nsjjfqptjj\nsjl123456\nSjm96321\nsjonly13\nsjpfnmxdy\nsjq123456\nsjrbq111111yf\nsjrmdtjws\nsjs58151456\nsjsjsjsj\nsjtu2008\nsjtusjtu\nsjwangdao\nsjx640624\nsjx780329\nsjxn5252532\nsjz123456\nsjz800829qq\nsjzlysbb\nsk123456\nsk33445890\nskdjalskdjal\nskeleton\nSKJCSKJC\nskking123\nskm798181\nskpyj0512\nskr9011027\nsks7.com\nsky100200\nsky12345\nsky123456789\nsky239455\nsky5201314\nsky626sky\nsky89757520\nSky_090604\nskyandsea\nskychina\nskycloud\nskycn0614\nskydevil\nskyhorse\nskyrainy\nskyrocket\nskysky8611\nskyskysky\nskysywxk\nskytiger\nskytypalace\nskyworld\nskyworth\nskzzhshsh\nsl1981918\nsl2693987\nsl6592011\nsl781231\nsl815281\nslam4330588sky\nslamduck\nslaneslane\nslayhero\nslbj1234\nslc700627\nsleeping\nsleepless\nslj38511831\nslj62509076\nSLK123456\nSLLOVEPP_821001\nSllPl129822\nslowdive\nslowworm\nSLPP821001\nslpplovefmj\nslr36fsq\nslwdslkj\nsly1016888\nsly123456\nsly6408090\nslytherin\nslzyytxdD\nsm123456\nsm348122\nsm8100sm\nSMALL123\nsmallbear\nsmallbig\nsmallbird\nsmallbug\nsmallcat\nsmalldog521\nsmallfish\nsmallfox\nsmallmouse\nsmalloffice\nsmallpig\nsmallsmall\nsmalltiger\nsmamasfxf\nsmap1988\nsmart123\nsmartboy\nsmartdrv\nsmartgirl\nsmartsmart\nsmc563229502\nsmessmes\nsmf871207\nsmg1001ee\nsmgensmma\nsmhapolo\nsmile0716\nsmile1234\nsmile1314\nsmile1982\nsmile2000\nsmile2008\nsmile2009\nsmile365\nsmile520\nsmile521\nsmile7711\nsmileagain\nsmileboy\nsmilecat\nsmileclouds\nsmileeveryday\nsmileface\nsmilegirl\nsmilelife\nsmilesky\nsmilesmile\nsmilewyh\nsmilezhu\nsmiling2\nsmiltchaisy\nsmith8899\nsmithjohn\nsml5201314\nsmliewei123\nsmmsmmdm\nsms1984926\nsms940643\nsmshiaio\nsmsmsmsm\nsmsmwudi\nsmsqazpl\nsmt5201314\nsmthsmth\nsmtinline\nsmtpsmtp\nsmu111111\nsmugogmnmn\nsmzadd123\nsn123456\nsn131130\nsn263263\nsn2752827\nsN384626\nsn83sq84\nsnail007\nsnail778899\nsnailen13\nsnailgame\nsnake0727\nsnake123\nsnake424\nsnakesnake\nsnhame900206\nSNIWGJITX\nsniwtsniwt\nsnjesnje\nsnjevvfb\nsnkplaymore\nSNNning1021\nsnogmkhn\nsnoop1025\nsnoopy12\nsnoopy123\nsnoopy13\nsnoopydog\nsnoopywsw\nsnoopyxj\nsnoopyyy\nsnow1028\nsnow1104\nsnow1214\nsnow1234\nsnow123456\nsnow1314\nsnow1981\nsnow1986\nSNOW2000\nsnow2001\nsnow5201314\nsnow6604\nsnowangel\nsnowbaby\nsnowbird\nsnowdream\nsnowdrop\nsnowforce\nsnowgirl\nsnowhite\nsnowhouyi804\nsnowlove\nsnowrain\nSnowSnow\nsnowstorm\nsnowwind\nsnowwolf\nSnowxue888\nsnpwwstx\nsnqqk1205\nsnr52lsnr\nsntuu0gmaj\nsnugduvtdj\nso8378nic\nsocrates\nsodagreen\nsodao666\nsodasoda\nsodolxhada\nsofia870926\nsoftking\nsoftnessmuse\nsoftsoft\nsoftstar\nsogou214\nsogou223\nsogou224\nsogousogou\nsohu19741129\nSOHU2006\nsohuboke\nsohulf1025\nsohusina\nsohusohu\nsoinlove\nsokosoko\nsolaseva\nsolbianca\nsolectron\nsolenbbc\nsolidsnake\nsolidworks\nsolitary\nsolitude\nSOLO2009\nsolosolo\nsolskjaer\nsolution\nSome1loveU\nsomebody\nsomeone594\nsometime\nsometimes\nsomewhere\nsomuch123\nsong0405\nsong086921\nsong1106\nsong111213\nsong1117\nsong1212\nsong123321\nsong1234\nsong12345\nsong1234567\nsong123456789\nsong1980\nsong1981\nsong1982\nsong1983\nsong1984\nsong1985\nsong1986\nsong1987\nsong1988\nsong2008\nsong5201314\nsong_868\nsongbing\nsongbird\nsongchao\nsongchen\nsongcheng\nsongchengxian\nsongchun\nsongdandan\nsongdong\nsongfang\nsongfeng\nsonggang\nsonghaitao\nsonghang\nsonghong\nsonghyekyo\nsongjian912\nsongjiang\nsongjiao\nsongjing\nsongjuan\nsongless\nsongli2008\nsongliang\nsonglibo\nsonglina\nsongling\nsonglong\nsongloveandy\nsongmeng\nsongming\nsongning\nsongpeng\nsongpengju\nsongping\nsongqian\nsongqiang\nsongqing\nsongruinian\nsongshan\nsongshanji\nsongshao\nsongshuai\nsongshuang\nsongting\nsongttanch\nsongwang\nsongwuwang\nSONGXIANG\nsongxiao\nsongxiaobo\nsongxiaoli\nsongxing\nsongyan21dan\nsongyanbyd\nsongyandan\nsongyanyan\nsongying\nsongyinqi\nsongyong\nsongyuan\nsongzhen\nsongzheng\nsongzhiwei\nsongzq1019\nSONGZUYING\nsonic520\nsonofagun\nsonofbitch\nsonofwind\nsony1979\nsonyaiwa\nsonychan\nSONYEJIN\nsonymusic\nsonysony\nsonyvaio\nsophia1984\nsophia55\nsophiasophia\nsophie520\nsophieliu\nsophomore\nsophyblue\nsorcerer\nsorceress\nsorezeno01\nsorry123\nsorry520\nsorryiloveyou\nsorrysorry\nsos123123123\nsos123456\nsoso1890\nsosodogso\nsosohappy\nSOSOSOSO\nsosoyao123\nsosoyaocn123\nsossossos\nsostl110\nsoueeqpgf\nsoujirou\nsoul1314\nsoul19840428\nsoulbook\nsouledge\nsoulfree\nsoulsoul\nsoulwing\nsource4118\nsouthchina\nsoutheast\nsouthern\nsouthpasadena\nsouvenir\nsowhat123\nsoyuhianan\nsp123321\nsp12341234\nsp123456\nsp31415926\nsp511314\nsp631116\nsp821050\nsp992338\nspace123\nSPAGHETTI\nspalding\nspeak2me\nspeaking\nspearking\nspears16\nspecialist\nspeed123\nspf2326027\nspider10\nspider37\nspitukgefa\nsplendid\nspmen888\nspni1729\nSpoiled76\nspring1225\nspring123\nSpring2008\nspring223\nspring520\nspring79\nspring99\nspringsmile\nspringsnow\nspringSPRING\nSPY822406MOMOB\nspymr2008\nsq123456789\nsq177936\nsq5201314\nsq712768\nsq812439\nsq8848220\nsqermao521\nsqfzhf820928\nsql123456789\nsqsxtyg888\nsqtbntiagw\nSQUARESOFT\nsqwdog14\nsqz043020\nsr123456\nsr2633236\nsr87247760\nsrj00000\nsrp19880112\nss000000\nss050306\nss10281265\nss111111\nss123123\nss123321\nss1314520\nss168168\nSS19841015\nss19851126\nss19860520\nss369258\nss369963\nSS520520\nss5220101\nss6017064\nss677099\nss678910\nss777119\nss7928637\nss810426\nss841211\nss8518com\nssamtg770121\nssbws0eloolqq\nssdlh12345\nssec1234\nssf825098529\nsshfuuzl\nsshheenn\nssiyvefjhh\nssj2002619\nSSJ555SSJ\nssjq2003\nssjthbjdcz\nsslovett\nsslwwebz\nssmgcyza\nssn760930\nsspanzer\nsspaxzs802211\nsspemail123\nsspsssps\nssptxxsb56\nSsqhdyx163\nssrs2006\nsss7689322\nssss1111\nssss1234\nssss56892398\nssssaaaa\nssssdddd\nsssseeee\nssssss0000\nssssssss54804\nssssssssssssssss\nsstsjcfy\nssutdkjje\nssuu6986116\nssuunn666\nssuunnww\nssvkfgah\nssx123456\nssx6812181\nssy1987630\nssycsy123\nssyvdp1989\nsszh407407\nsszhenjian\nst123456\nst123456789\nst13713440314\nst20103811\nst2212@21cn\nst5201314\nst800810\nst828506901\nstabilo110\nstallone\nstandard\nstandards-926\nstanford\nstar0511\nstar1108\nstar1234\nstar123456\nstar1984\nstar1985\nStar1986\nstar1991318\nstar2002\nstar2008\nstar830529\nstar8888\nstarchan1\nstardream\nstarfire\nstarking\nstarling\nstarmoon\nstarshine\nstart123\nSTART2009\nstart712\nstartanew\nstartlove\nstartstart\nstarxing\nstarzhang\nstaticroof441\nstcoolqi\nste123456jobs\nsteelman\nstefanic\nstefaniesun\nstella123\nstella@480\nStepbystep\nstephanie1989\nstephenie\nsteroids\nstevecarol\nsteven1122\nsteven123\nsteven2008\nstevenash\nstevenking\nstevenlee\nstf123456\nstilllove\nstillloveyou\nStillWater\nstimulate\nsting12345\nsting_hoo\nstjkwsry\nsTL6Sadtmj\nstocking\nstockstar\nSTOCKTON\nstojakovic\nstom881286\nstone007\nstone0526\nstone123\nstone1234\nstone888\nstoneage\nstonelgq\nstonenic\nstonestone\nStopthethief\nstorylove\nstoryofall\nstr0nger=\nstrategy\nstrength\nstrongarm\nstrongman\nstructure\nstruggle\nstsgmdb7kfknyjs6\nstu..jivenao\nstudent1\nstudents\nSTUDYHARD\nstudying\nstudystudy\nstupiddog\nsu110120\nsu123123\nSU123456\nsu123456789\nsu123488\nsu123zxc\nsu139817\nsu27zdj555@\nsu514612\nsu5201314\nsu880880\nsuanleba\nsuannihen\nsuansuan\nsubaru111\nsubarusumeragi\nsubmarine\nsubuliao\nsubwoofer\nsuccess!\nsuccess077\nsuccess123\nsuccess2009\nsuccess2010\nsuccess816\nsuccess86\nsuccessful\nsuchislife\nsuckmydick\nsudas123\nsudas123456\nsudilovepy\nsudongpo\nsudongpo99\nsuedesuede\nsueijing\nsuen78rong\nsuenchao\nsuermuxi\nsufan2016\nsufe1504\nsufe5413\nsugar123\nsugar137\nsugarpuff\nsugarsugar\nsugnilnnuc\nsugqyuan\nsuhaibin\nsuhang81\nsuian5253\nsuibian123\nsuibian8\nsuibianba\nsuibianbian\nsuibiankan\nsuibiankankan\nsuibianla\nsuibianni\nSUIDALIU\nsuifeng123\nsuifengpiao\nsuimengerfei\nsuin12345\nsuining221200\nsuisui83\nsuisuihao727\nsuixiang\nsuixinsuoyu\nsuiyuan1982\nsuiyuanba\nsuiyuechang\nsuiyueran\nsuiyueruge\nsujian28\nsujianhua\nsujianlu\nsujie13086051771\nsujing520\nsujingjing\nsuk397540\nsuker520\nsuker999\nsukidayo\nsukidesu\nsukiking\nsukisuki\nsukiyaki\nsukukukkk\nsuky2617587\nsUL6Sadtmj\nsulaiquan\nsuligers\nsulirock\nsullivan\nsuluo1984\nsUM6Tadtnj\nsumgotea7078\nsummer10\nSummer11\nsummer1215\nsummer123\nsummer13\nsummer1983\nsummer1987\nsummer2007\nsummer2008\nsummer2009\nSUMMER456\nsummer520\nSummer888\nsummer99\nsummerblue\nsummercool\nsummerday\nsummerice\nsummerkoo\nsummerliu\nsummerlove\nsummerrain\nsummerrain111\nsummersl\nsummersnow\nsummersummer\nsummersun\nsummertea\nsummerwhite\nsummerwind\nSUN&moon\nsun100200\nsun111111\nsun111678\nsun123123\nsun12345678\nsun19690329sun\nsun1971010100\nsun198608030033\nsun199734911\nsun2633236\nsun2niang\nsun40049\nsun402moon402\nsun4289359\nsun49101\nsun5201314\nsun5211314\nsun5kong\nsun76722\nsun7758521\nsun789456\nsun830420\nsun851029369\nSun_Moon\nsunan9015\nsunandmoon\nsunbin123\nSUNBIQIONG\nsunbuxie\nsuncaiping\nsunchang\nsuncheng\nsunchuan\nsundaming\nsundapeng\nsundawei\nsunday123\nsundayhui\nsundaylife\nsundingmou\nsundongyan420\nsundylove\nsunechong\nsunfazhi0898\nsunfei1173\nsunfeifei\nsunGUANG\nsunhaibo\nsunhaijing\nsunhaitao\nsunhaiyan\nsunhao123\nsunhao520\nsunhaoran\nsunhesunhe\nsunhonglei\nsunhongli\nsunhongtao\nsunhongwei\nsunhuang\nsunhui123\nsunhuihui\nSunj974032977\nsunjiachuan\nsunjian123\nsunjian198176\nsunjiang\nsunjianhua\nSUNJIANJUN\nsunjianwei\nsunjianxin\nsunjiaqi\nsunjiawei\nSUNJIAYI\nsunjie123\nsunjihai\nsunjingjing\nsunjingke\nsunjingye\nsunjingyi\nsunjinxuan\nsunjiqian\nsunjunli\nsunjunyi\nsunkunpeng\nsunli520\nsunli821007\nsunliang\nsunlidong\nsunlight\nsunlihong\nsunlihua\nsunlijuan\nsunlijun\nsunlililiya\nsunlimin\nsunliming\nsunlisheng\nsunlixia\nsunlytadmin\nsunmeiyu\nsunmiansmhz\nsunmoonstar\nsunny.rainny\nsunny000\nsunny007\nsunny111\nsunny1122\nsunny123\nsunny1234\nsunny123456\nsunny1975\nsunny1981\nsunny1982\nsunny1983\nsunny1984\nsunny1986\nsunny1987\nsunny2002\nsunny2006\nsunny2008\nsunny2009\nsunny325800\nsunny418407\nsunny520\nsunny7926\nSUNNY888\nsunnybaby\nsunnyboy\nsunnybund\nsunnyday\nsunnyfeng\nsunnygam\nsunnygirl\nsunnyj01\nsunnylee\nsunnylianbo521\nSunnyliu\nsunnylove\nsunnymoon\nsunnyrain\nsunnyshine\nsunnysky\nsunnysmile\nsunnysnow\nsunnysun\nsunnysunny\nsunnywang\nsunnyxjdty\nsunnyyang\nsunpengfei\nsunqiang\nsunqinghua\nsunrider\nsunrisejun\nsunrising\nsunriver\nsunruisr\nsunshang\nsunsheng\nsunsheng627\nsunshijie\nsunshine12\nsunshine123\nsunshine28\nsunshine520\nsunshineday\nsunshiqi\nsunshuai\nsunshuang\nsunsky117\nsunskyline\nsunsmile\nsunsnow502\nsunsun123\nsuntao521\nsuntingting\nsunwei0604\nsunwei123\nsunwei2009\nsunwei520\nsunweihua\nsunweiwei\nsunwen5201314\nsunwenjie\nsunwenjing\nSUNWUKONG\nsunxiang\nsunxiaodong\nsunxiaofei\nsunxiaohui\nsunxiaolei\nsunxiaolin\nsunxiaoming\nsunxiaowei\nsunxiaoyan\nsunxiaoyu\nsunxiuxia\nsunxiyue010319\nsunxudong\nsunyahui\nsunyan123\nsunyanan\nsunyanli\nsunyanzi0723\nsunyanzicc\nSunye10032\nsunyexiang\nsunyexiang0898\nsunyi123\nsunyi520\nsunyingjie\nsunyingxp\nsunyisunyi\nsunyl130185\nsunyongjie\nsunysuny\nsunyu123\nsunyuanyuan\nsunyujia\nsunyujie\nsunyuqing\nsunyutian\nsunyuwen\nsunyuxiang\nsunyy098\nsunzhang\nsunzheng\nsunzhenyu\nsunzhiguo\nsunzhiyong\nsuoailiu\nsuosuohejiu\nsuoyicibei\nsuper001\nsuper007\nsuper123\nsuper123456\nsuper1314\nsuper1987\nsuper258\nsuper512\nsuper520\nSuperadmin\nsuperboy\nsupercai5112@C\nsupercat\nsupereminem313\nsuperfox\nsupergun\nsuperhero\nsuperhuman\nsuperior\nsuperist\nsuperJAN\nsuperjie\nsuperjunior13\nsuperkey\nsuperking\nsuperlee\nsuperleo\nsuperLIU\nsuperlove\nsuperlover\nsuperlyy\nsuperman007\nsuperman008\nsuperman123\nsuperman9999\nsupermarket\nsupermen\nsuperpig\nsuperpippo\nsuperpower\nsupersonic\nsupersun\nSUPERSUPER\nsuperwind\nsuperwolf\nsuperwoman\nsupperman\nsuqian0607\nsuqingqing\nsuqisong\nsureoksk\nsuresure\nsurewin1\nsurfingsir\nsuricity\nsurmounthl\nsurprise\nsusan007\nsusan1011\nsusan123\nsusan123456\nSUSAN1980\nsusan1982\nsusan2008\nsusan520\nsusan521\nsusan781125\nsusancat\nsusanchen\nsusanliu\nsusanne121\nsusansun\nsusansusan\nsusanwang\nsusanxi123\nSusbt002\nsushaohuai\nsusu0087933\nsusu7411\nsusujiali\nsusususu\nsutter3374\nsuweijie\nsuweiyang\nsuwenjie\nsuxiaohua\nsuxiaoli\nsuxiaoli88\nsuxing0924\nsuxing1314\nsuxinggun\nsuxuexue\nsuyan0s6y\nsuyang121\nsuyang6016668\nsuyanyan\nsuyinger\nSUYOUPENG\nsuyu851011\nsuyuyuan\nsuzaza1113\nsuzhen520\nsuzhi83YI\nsuzhixie\nsvenson123\nsvt1985122\nsw070625\nsw084919\nsw5201314\nsw811128\nswahr66038805\nswallow123\nswallow51\nswanlake\nswarov2009\nswastika\nswazj7100\nswb123456\nSWBJBHWJ\nsweet123\nsweet520\nsweet620\nsweetapple\nsweetboy\nSWEETDREAM\nsweetsmile\nsweetsweet\nswf19881225\nswggws3352505\nswim0930\nswing123\nswj123456\nswj60227\nswjldcom\nswjswjswj\nswlaill1314\nsword111\nSword123\nswordman\nswordsman\nswufe11789\nswwswwsww\nswxlyjslf\nswxSWX328138\nswyuanyang\nswyz1234\nsx123456789\nsx1979al0218\nsx19821028\nsx5201314\nsx830822\nsxa029589\nsxb761125\nsxf123456\nsxfcsxfc\nsxh123456\nsxh6325060\nsxh83821899\nsxi492890710suxi\nsxj123456\nsxl123456\nsxpi-songzht\nsxTaIehztp\nsxUaIehAtp\nsxUaIehztp\nsxw123456\nsxwe7417916\nsxx123456\nsxxd9898\nSXY123456\nsxzjj1314\nsy030609\nSY04hhaw\nsy057679\nsy111111\nsy12345678\nsy123456789\nsy203007\nsy337899\nsy830127\nsyc135lsl\nsyc493222\nsyd495273\nsydaidai\nsyf111111\nsyf123456\nsyh486ily\nsyhx0818\nsyiamgreat2\nsyj7z070\nsyj805327\nsyl123456\nsylvialuo\nsymphony\nsymwan2007\nsyncmaster-09\nsyq123456\nsyq19870329\nsyq789789\nsyqq115577\nsys123456\nsys129368.\nsys13239\nsys2000jjy\nsysadmin\nsystem-00\nsystem099\nsystem12\nsystem890\nsystemer\nsystemlucker\nsystemsystem\nsyx111bkr\nsyx123456\nsyx86024500324\nsyy123456\nsyy7916114\nsyz32783\nsyz5201314\nsyzx8501\nSZ000000\nsz110110\nsz111111\nsz121611208\nsz123123\nsz12345678\nsz123456789\nsz123654\nsz1314520\nsz25084296\nsz308308\nSZ321321\nsz428952\nsz4593099\nsz5201314\nsz562389\nsz715823\nsz743138\nsz790610\nsz8203703\nsz862754zx\nSZ888888\nszauto588\nszdddeeeswl\nszdzgs33388666\nszdzgs33666\nszflyxk1120\nszforever\nszhaoqing\nszjrjedcg\nszjzy2009123\nszk795447\nszkenfor\nszl123456789\nszonline\nszpuyuan\nszpzclljxk\nszq10138\nszq23533722\nszr158158\nszrckj2010\nszsxq4d15m4h\nsztaqyyh\nszu507lzg\nszu816891lyl\nszw123456\nszx123456\nszxinshi\nszxiongwei\nszy123456\nszyf2010ty\nszylsmc17899\nszz861117\nszzhtszzht\nszzhuhua\nszzz004959\nt1107x5626\nt11111111\nt11235813\nt1127004\nT1234567\nT12345678\nt1314520\nt13671268832\nt19691219\nt19811029\nt1a9n8g0!(*)\nt1t2t3t4\nT2100test\nt31415926\nt3521048\nt4777269\nt478502a\nt5201314\nt5232346\nt5wtokqIAv\nt5xipkpHAv\nt5xipkpHzu\nt5xtpkpIAv\nt6262421\nt63e4t63\nt6wtolqIAv\nt6wtolqIBv\nt7758521\nT7pimr11\nt7vizb80\nt84l04n14\nt89h3866\nt963852741\nt9896711q\nta123456\ntab198331\ntabuaiwo\ntachibana\ntaelon520\ntai590399\ntaiabaigo\ntaihaole\ntaihe123\ntaijiquan\ntaijituishou2009\ntaipingyang\ntaiquandao\ntaishan007\ntaishan871003\ntaishang\ntaiwan28\ntaiwei753159\ntaiweiqu\ntaiyang123\ntaiyanghua\ntaiyangyu\ntaiyo118\ntakako0301\ntakashi316\ntakeanin584\ntakecare\ntakeiteasy\ntakemehome\ntakeshiaaa\ntakeshijin1984\ntakethat\ntakizawa\ntakki0329\ntakuto521\ntakuya2046\ntalent1981920\nTALENT3110CHAO\ntalentisme\ntalenttalent\ntalktime01\ntallhill\ntamade123\ntamadegundan\ntamadeshizhu\ntamamade\ntamsako588\ntan259695\ntan751103\ntan870117\ntanailing\ntanainaide\ntanbowen\ntanchang\ntancheng\ntandetuo\ntang05167312\ntang1111\ntang1234\ntang12345\ntang123456789\ntang1978\ntang1979\ntang1982\ntang1983\ntang1984\ntang1985\ntang1986\ntang1988\ntang1989\ntang1990\ntang2008\ntang2009\ntang2tang\ntang3591005\ntang4090\ntang780828\ntang8080\ntang886652\ntangbiao\ntangbing\ntangbohu\ntangchao\ntangchen\ntangcheng\ntangcong\ntangdong\ntangerine\ntangfang\ntangfeng\ntanggang\ntanggula\ntangguobin\ntanghai9999\ntanghaibo\ntanghaitao\ntanghaiyan\ntanghan11\ntanghong\ntanghongbo\ntanghuan\ntanghuang\ntanghuijuan\ntanghulu\ntangjian\ntangjianbo\ntangjianfeng\ntangjiang\nTANGJIAO\ntangjikede\ntangjin12\ntangjing\ntangjuan\ntangkaik\ntanglang\ntanglaoya\ntangliang\ntanglijun\ntanglili\ntangling\ntangling520\ntanglong\ntangmeng\ntangming\ntangna214\ntangning\ntangootd\ntangpeng\ntangping\ntangqian\ntangqiang\ntangqiao\ntangqing\ntangquan\ntangren2123\ntangren753951\ntangrong\ntangseng\ntangshan\ntangshao\ntangsheng\ntangsijing\ntangsong\ntangtang520\nTANGTANGTANG\nTangTangtianya\ntangtian\ntangtieming\ntangting\ntanguang\ntangwang\ntangwei520\ntangwenbin\ntangxian\ntangxiang\ntangxiao\ntangxiao5254482\ntangxiaoming\ntangxiaoyu\ntangxing\ntangxiong\ntangyang\ntangying\ntangyong\ntangys99228800\ntangyu923327\nTANGYUAN\ntangyuanyuan\ntangyuzhe\ntangyuzhe1984\ntangzhan\nTANGZHEN\ntangzheng\ntangzhi125\ntangzhong\ntanhuan1988\ntanhuijing\ntanjiafu\ntanjian1022\ntanjiang\ntanjiateng\ntanjiewen0816\ntanjuntj\ntanjunwei\ntanjunyuan\ntanke2000\ntanktank\ntanliang\ntanlijuan\ntanlikun\ntanlong226\ntanpeter\ntanqiang\ntanruizhi\ntanshuai\ntanshuang\ntantantan\ntanxiang\ntanxiaolin\ntanxiaoyisheng\ntanxinyu\ntanxuwen\ntanyilin\ntanyoo123\ntanzheng\ntao2000301\ntao333222\ntao4544472\ntaobao123\ntaobao766song\ntaobao887\ntaobaobao\ntaobaoke\ntaoguangyanghui\ntaohhong\ntaohong0602\ntaohuadao\ntaojingjing\ntaoliang\ntaoliwei\ntaotao1330\ntaotao29\ntaotao5201314\ntaotao521\ntaotao66309679\ntaotaole\ntaowei1980\ntaoyan07\ntaoyang615310\ntaoyangui\ntaoyanhanju\ntaoyanni\nTAOYANPING520\ntaoyuanming\ntaozhiyaoyao\ntaozi123\ntaozi520\ntapwbrdww\ntarcy123\ntashaling\ntassadar\ntata19801259\ntaweimei\ntaxitaxi\ntaxuewuhen\ntaxuexunmei\ntay4ever\ntayohyab07\ntb123456\ntbb1314526\ntbdagtbdn\ntc122221\ntc138216\ntc6198198j\ntchaikovsky\ntchjtchj\ntcj1atATLF\ntcj1atzTLE\ntcj1atzTLF\ntcjj521ll\ntcl1219519\ntctctctc\nTd123456\ntdc8191240\ntdd633tdd\ntdh19uBUMG\ntdh19uBVMG\ntdi19tAULF\ntdi19tAUMF\ntdi19tAUMG\ntdi1atAULF\ntdjyv369\ntdm22tdm\ntdt18uBVMG\ntdxhyzhh\ntdy123456\nte026vCWOH\nte026vCXOH\nteambuy2009\nteamo1314\nteamoyaya\nteamtop123\nteamwork\ntearstears\ntearstop\nteashuang\ntechnology\ntechract\nteckwav1028\ntecsunhds\nteddywong05\ntel2875009\ntel48ayi\ntel89086\ntellmewhy\ntemp1234\ntemp123456\ntemp1983\ntemperature\nTEMPORARY\ntemptemp\ntencentsophia\nteng199022\nteng479128\ntengdong\ntengjing\ntengl20050605\ntenglong\ntengteng\ntengzhen\ntenyears\ntercel82\nTERESATIAN\nterrible\nterrific\nterrorist\nterry123\nterry247\nterryzhang\nteruhiko\ntest1111\ntest12345\ntest123456\ntest2008\ntest2009\ntest2010\ntest8*iipc\ntestadmin\ntestbank\ntestinfo\ntesting123\ntestmemo\ntet17uBVNH\ntet17uCWNH\ntet17vCWNH\ntet18uBVMG\ntet18uBVNG\ntet26vCWOH\ntextbook\ntezuka520\ntezukafuji\ntf024wEYPJ\ntf025wDXOI\ntf025wDXPI\ntf025wDYPI\ntf026vDXOI\ntf123456\ntf1978423\ntfnfqpyv\ntfnjk0530\nTFzvF44idb\nTFzvF54idb\nTFzwF44idb\ntg122xFARK\ntg122yFARK\ntg123456\ntg123xEZQJ\ntg123xFZQK\ntg123xFZRK\ntg124wEYPJ\ntg124xEYQJ\ntg124xEZQJ\ntg789456\nTGAlG45jec\nTGAvF55idb\ntgbyhnujm\ntghxp578\ntgkitxjj\nTGS2416522\ntgy01131\ntgydddip\nTGzlF45jeb\nTGzlG45jeb\nTGzmF45jdb\nTGzmF45jeb\nTGzvF54idb\nTGzvF55idb\nth001001\nth122yFARK\nth123456\nth15998967573\nth230ztzSL\nth231ytARL\nth231ytzSL\nth232ytARL\nth28097565\nth5201314\nth6yjhr6jh6yr\nth841011\ntha201924\nthanatos\nthank123\nThank901\nthankful\nthankgod\nthanksgiving\nthanksgod\nthankthank\nthankyou123\nthankyouverymuch\nthaomy84\nthat9096\nthatgirl\nthatiswhy\nthb198210\nthc121121\nthdIifD4x2\nTHE.LIANG\ntheanswer\ntheanswergiggs\nTHEBEATLES\nthebigblue\nthedoors\nTHEFIRST\ntheghost\ntheIifD4x2\ntheIigD4x2\ntheIigE4x2\ntheJigE4x2\ntheJigE5x2\nthekiller\nthelword\nthematrix\nthemoment\nthemoney\nthenewme\nthenthen\ntheonlyone\nthepavilion\nthephantom\nthereare\nthereisno\ntheruler\nthestarisgod\nthetruth\ntheworld\nthindidi\nthingthing\nthink123\nthinkofyou\nthinkover\nthinkpad09\nthinkthink\nthinkyou\nthirddecan\nthirdeye\nthisform\nthisgame\nthisisarima\nthisislife\nthisislord\nthisisme\nthisismine\nthislove\nthisthis\nthistime\nthizlinux\nthj15872359259\nthkdsythkdsy\nthldl_147\nthomasma\nthomaszhang\nthomos10\nthousand\nthq403529\nthree333\nthreemen\nthreepigs\nthreeyears\nthriller\nths810351\ntHT9Jehzsn\ntHTaIehztp\ntHTaJehzsn\ntHTaJehzsp\ntHTaJehztp\nTHUHUBOSSGUNGUN\nthunder2\nTHUNDERBIRD\nthy113125\nTi102519\nTi123456\nti23tztyTM\nti23tztzSM\nti33tAtxTN\nti33tAtxUN\nti33tAtyTM\nti33tztyTM\ntia271314\ntiamo520\ntiamokelly\ntian000891127\ntian00di00\ntian1234\ntian12345\ntian123ya\ntian1314\ntian1457\ntian19651110\ntian1978\ntian1980\ntian1981\ntian1982\ntian1983\ntian1984\ntian1986\ntian1987\ntian1988\ntian19880412\ntian1989\ntian1ya2\ntian2008\ntian2009\ntian5201314\ntian605718\ntian88dan\ntiananmen\ntianbaojun\ntianbian\ntianbianyun_80\ntianbiao\ntianbing\ntiancai1\ntiancai123\ntiancai945\ntiancai99\ntiancaide\ntiancaishiwo\ntianchang\ntianchao\ntianchen\ntiancheng\ntianchong\ntiandadida\ntiandaochouqin\ntiandihui\ntiandijian\ntiandiren\ntiandirenhe\ntiandong\ntianer1212\ntianfang\ntianfuzhen\ntiangang\ntiangaoyundan\ntianguang\ntianhaiyise\ntianhe23\ntianheihei\ntianheng\ntianhong\ntianhuang\nTIANJIAN\ntianjiang\nTIANJIANGDAREN\ntianjiao\ntianjin123\ntianjin2008\ntianjin95ad\ntianjing\ntianjingsha\ntianjingtao\ntianjinshi\ntianjixu\nTIANJUAN\ntianjun1982\ntianjunjie\ntiankong0985\ntiankong123\ntiankong32\ntiankong79\ntiankongzhicheng\ntianlang\ntianlangxing\ntianlanlan\ntianliang\ntianliang119\ntianliangle\ntianlili\ntianling\ntianlongbabu\ntianmaxingkong\ntianmeng\ntianmian918\ntianmiao\ntianmimi\ntianming\ntianning\ntianpeng\ntianpinG\ntianqi3tianqi3\ntianqian\ntianqiao\ntianqing\ntianqing1127\ntianqingzhenhao\ntianqizhenhao\ntianquan\ntianqwer\ntianrenheyi\ntianrong\ntianshan\ntianshang\ntianshangrenjian\ntianshao\ntianshaofei\ntianshen\ntiansheng\ntianshengsimei\nTIANSHI007\ntianshi1\ntianshi11\ntianshi123\ntianshi520\ntianshi521\ntianshiaimeili\ntianshideai\ntianshilei\nTIANSHINWF\ntianshixiaojing\ntianshizhiyi\ntianshuai\ntianshuang\ntianshui\nTIANSHUN\ntianshuo\ntiansong\ntiantang..000\ntiantang2\ntiantangniao\ntiantian0606\ntiantian1\ntiantian1234\ntiantian123456\ntiantian1987\ntiantian2\ntiantian33\ntiantian88\ntiantian99\ntiantianaini\ntiantianhao\ntiantianhappy\ntiantianle\ntiantiantian\ntiantiantianlan\ntiantiantianya\ntiantianxiangni\ntiantianxiangsha\ntiantianxiao\ntiantianya\ntiantianzai\ntiantianzuoai\ntianting\ntiantong\ntianwaifeixian\ntianwang\ntianwenjie\nTianXia112\ntianxia12\ntianxia123\ntianxia2\ntianxia521\ntianxia88\ntianxia99\ntianxiadiyi\ntianxiahaoren\ntianxian\ntianxiang\ntianxiao\ntianxiaode\ntianxiaox\ntianxiaren\ntianxiashangji\ntianxiawudi\ntianxiawushuang\ntianxiehudie\ntianxiezuo\ntianxilong\ntianxin520\ntianxing\ntianxingjian\ntianxuan\ntianya!@#\ntianya.cn\ntianya.com\ntianya.sunxing\ntianya00\ntianya000\ntianya000000\ntianya001\ntianya007\ntianya008\nTIANya01\ntianya03\ntianya07\ntianya09\ntianya0902\ntianya11\ntianya110\ntianya111\ntianya1112\ntianya119\ntianya12\ntianya121\ntianya123\ntianya1234\ntianya12345\ntianya123456\ntianya1234567\ntianya123456789\ntianya13\ntianya1314\ntianya163\ntianya168\ntianya19\ntianya1908319\ntianya1981\ntianya1982\ntianya1983\ntianya1984\ntianya19840815\ntianya1985\ntianya1986\ntianya1987\ntianya1988\ntianya1989\ntianya1999\ntianya2000\ntianya2002\ntianya2005\ntianya2006\ntianya2007\ntianya2008\ntianya2009\ntianya2010\ntianya2012\ntianya222\ntianya23\ntianya313\ntianya321\ntianya333\ntianya38\ntianya4me\ntianya500811\ntianya520\ntianya5201314\ntianya521\ntianya54321\ntianya55\ntianya555\ntianya591229\ntianya666\ntianya6868\ntianya77\nTIANYA777\ntianya789\nTIANYA818\ntianya88\ntianya888\ntianya99\ntianya999\ntianya99aaa\ntianya_71\nTianya_gouzaidui\ntianyaabc\ntianyabagua\ntianyabaobao\ntianyabashi\ntianyabbs\nTIANYAblog\ntianyaboke\ntianyacity\ntianyaclub\ntianyaclub.com\ntianyacn\ntianyacom\ntianyademima\ntianyaer\ntianyafuzhou1\ntianyagenv\ntianyagongcishi\ntianyagu\ntianyaguke\ntianyagulv\ntianyaguoke\ntianyahaijiao\ntianyahao\ntianyahechu\ntianyaid\ntianyajj\ntianyake\ntianyalaji\ntianyalangzi\ntianyalm\ntianyalong\ntianyalu\ntianyaluntan\ntianyamajia\ntianyamima\ntianyamm\ntianyang\ntianyaohua\ntianyaok\ntianyaot338010\ntianyaot660512\ntianyapass\ntianyapassword\ntianyapwd\ntianyaqq\ntianyaren\ntianyaroma\ntianyaruobilin\ntianyasb\ntianyashequ\nTIANYAshequ123\ntianyashequ2009\ntianyashq\ntianyasilu\ntianyasq\ntianyatest\ntianyatian\ntianyatianya\ntianyatony\ntianyawang\ntianyawenda\ntianyaya\ntianyayezhu\ntianyazhuanyong\ntianyi20\ntianyi99.\ntianying\ntianyong\ntianyu111\ntianyu123\ntianyu256\ntianyu520\ntianyu77\ntianyuboy\ntianyudi\ntianyuzlw\ntianzhao\ntianzhen\ntianzheng\ntianzheng007008\ntianzhidao\ntianzhihen\ntianzhiya\ntianzhiya2\ntianzhong\ntiaotiao\ntiaoyang\ntiaozhan\ntiaqid2888\ntiberliker\ntibet130\ntibet864\ntibetkorea\ntibetlove\ntiderain\ntidy7810\ntie85969932\ntiechuierhao\ntiejiang\nTIEJIAYIRANZAI\ntieJjiE411\ntieshan12\ntiesheng\ntiffany198\ntifJjiE411\ntiger007\ntiger110\ntiger1122\ntiger13in\ntiger168\ntiger1974\ntiger1982\ntiger1986\ntiger2000123\nTiger23$\ntiger428\ntiger520\ntiger555\ntiger68231523\ntiger7king10\ntiger888\ntiger999\ntigerchina\ntigerdearbook\nTIGERKING\ntigertiger\ntigerwang\ntigerwoods\ntigerzhao\ntikcarc73\ntilamisu\ntilihua1224\ntimberland\ntimduncan\ntime9818\ntimeflies\ntimeforce\ntimeismoney\ntimeless\ntimeless10\ntimemachine\ntimeover\ntimeschange\ntimetime\ntimmy1983\ntimxuwei\nTIMyoung8113375\nTina1981\nTina2008\ntina2009\ntina2680055006\ntina9587\ntinaherojv\ntinaking\ntinatina\ntinazhang\nting1115\nting1202\nting1234\nting123456\nTING1314\nting1986\nting1987\nting1988\nting1989\nting2105312\nting8464\ntingbaobao\ntingerlove\ntingfeng\ntinghaode\ntingjian\ntingmamadehua\ntingshuo\ntingting+\ntingting1987\ntingting928\ntingtinglove\ntingtingwoaini\ntingyu1214\ntingyuxuan\ntinky1518\nTINWINDOW154\ntiohuang\ntiramisu\ntissot1853\ntIT9Jdgzsn\ntIT9Jegzsn\ntIT9Jehzsn\ntitanium\nTJ123456\ntj197800\ntj33tAtxUN\ntj880221\ntjb115216\ntjc4132231\ntjfJjiE411\ntjfJjiF411\ntjfKjiF411\ntjfKkiF411\ntjhn1213\ntjis8034\ntjjdrysry\ntjlingx21\ntjljyxlz\ntjm93158\ntjs731125*\ntjuni208\nTK123456\ntk513190\ntk830309\ntkcag11223\ntkfkdgksek\ntkfkdgody\ntkp13103360\ntkye2ciy\ntkylikelxy\ntl123456\ntl1314999922899\ntl19811005\ntl6520255\ntlbbtlbb\ntleangel\ntlfmqtlfmq\ntlin1125\ntlj102chb102\ntlj123456\ntljjs9989\ntlm2009777\ntlsz9488\ntlyueyueyue\ntm123456\ntm2077zhaoming\ntmaio417\ntmc123456\ntmc8685807\ntmd!@#$%^&TMD\ntmd123456\ntmd123tmd\ntmd80642\ntmdtiancai\ntmdtmdtmd\ntme141516\ntmknckto\ntmliuguoqiang\ntmnet123\ntmt17020139\ntmxkdetmxk\nTMXUKTKE\ntmy19821212\ntnaflidwla\ntncfei259856\ntnndtnnd\nTNT123456\nto270502\ntoage1038\ntoast2007\ntobehappy\ntobeistodo\ntobemyself\ntobeno.1\ntobeornot\ntobeornottobe\ntobetrue\ntobewithyou\ntobeyou..\ntobeyourself\ntobywins\ntobywolf\ntoday007\nToday123\nToday818\ntodayhappy\ntodayhuangxm99\ntoeflgre\ntofzsenovc\ntogetherforever\ntohoshinki\ntohyuk42my\ntokencan\nTOKIMEKI\ntokki88TOKKI\ntoko360good\nTOKOYUYH\ntokyokof\ntolerance\ntom101999\nTOM123456\ntom52592\ntomahawk\ntomandjerry\ntomarulez\ntomcom666\ntomcruise\ntomhanks\ntomjerry\ntomlazer\ntommy123\ntomohisa\ntomohisa829\ntomoko12\ntomtomtom\ntong1012\ntong1234\ntong123456\ntong1314\ntong1983\ntong1984\nTONG19850720\nTong1987\ntong2008\ntong7788\ntongbo234\ntongcheng\ntongcheng17u\ntongcong\ntongdawei\ntongfang\ntongfeng\ntongjian\ntongjidaxue\ntongJING\ntongliang\ntongling\ntongmeng\ntongnian\ntongping\ntongqiang\ntongqing\ntongshan\ntongshang\ntongtian\ntongtong123\ntongtong521\ntongxiang\ntongxiao\nTongxiaoYU\ntongxing\ntongxingzheng\ntongyang\ntongyimima\ntongying\ntongyongmima\ntongyuan\ntongzhen\ntongzhou\ntongzhuo\ntonhyuk3507\ntony0127\ntony1009\nTONY1234\ntony123456\ntony1314\ntony1982\ntony1986\nTony1abc\ntony2000\ntony790926\ntonyapple\ntonybaby\ntonychen\ntonydong\ntonyiron\ntonylee00\ntonyleung\ntonylove\ntonytony\ntonywang\ntonywear\ntonyyang\ntool2009\ntoopoo001\ntoothblueqangelq\ntop123456\ntop123698745\ntop555pot\ntopcai521\ntopll0320\ntoppem123\ntopsearch\ntoriamos\ntornado2\ntortoise\ntoshiya73\ntoto3354\ntotoro123456\ntotototo\ntottitotti\ntou19641102da\ntouching2\ntouchnet\nTOUWENZI\ntouzi123456\ntower123\ntoxz1121\ntoyceozhb\ntp010807\ntp87265775\ntphptlsl\ntq123456\nTq8201162\ntqtiidtf\ntqtssnrw\ntr123456\ntracy011225\ntracy0707\ntracy123\nTRACY258\ntracy821\ntracy919\ntracylii\ntracymcgrady\ntracytracy\ntracywang\ntracyzhang\ntrade12345\ntrade2q456\ntraining\ntranquil\ntransfer\ntransient\ntraumatize\ntraveler\nTraveller\ntravelmate\ntree0718\ntree1234\ntree39518888\ntreetree\ntresbien\ntrewq54321\ntrewqiop\ntrezeguet\ntrhtthtrhtr\ntrhtthtrhtrtrhtt\ntri301hu\nTRIANGEL\ntriangle\ntricy2000\ntrig12345\ntrinitron\ntrish591121\ntriumph2008\ntrouble99\ntrousers\ntRsRfWxEdwtSfrWs\ntruecolor\ntruelies\ntruename\ntruong8698zzh\ntrustno1blue2008\ntrustnoone\ntry123456\ntry5ghht\ntry82324\ntry8774569\ntryagain\ntryeruyeruwrt@12\ntryitagain\ntrymybest\ntryweiwan2009\ntrz5201314\nts123456\nTS1SW2zbj3ss\nts750907\nts8280543\ntsaichinxuxu\ntsang820\ntsbb99070\ntsdxglmm\ntsdxwwdz\ntsg265704\ntsgxjkh512\ntshwcbyy\ntsingdao\ntsinghua123\ntsingtao\ntsjh4321\ntSK5Racsmi\ntsla7793523\ntsuyoshi\ntswcbyyde\ntt000000\ntt050322\ntt100001\ntt101972\ntt111111\ntt123123\ntt123321\nTT1234567\ntt123456789\ntt123465\ntt123654\ntt1314520\ntt159357\ntt197994\ntt19851220\ntt198y220\ntt456789\ntt46510842\ntt520tt520\ntt65163423\ntt654321\nTT66522718\ntt677769\ntt7758520\ntt778899\ntt888888\ntt991213\nttangkaik\nttbsqh2b\nttdou4182009\nttdown123\nttff03777\nttg451884829\nttgitfk520\ntTK5Racsmi\nttkl1206\nttklttkl\ntTL5Racsmi\ntTL5Sacsmi\ntTL5Sadsmj\ntTL5Sadtmj\nttl691031\nttll81423\nttssmail\nttssnsqs\nttsun0109\nttt12345\nttt123456\ntttt1234\nTTTTT123\nttttttttt\ntttttttttt\ntttttttttttttttt\nttttyyyy\nttxs5027\nttxxzztxz\nttyycctt1200\nTtYyTtYy\nttz2355056\ntu123456\ntu26su37\ntu868686\ntuantuan\ntuanzhang\ntubaobao\ntuchengcaizi\ntudou123\ntudou2010\ntudoudigua\ntudoutudou\ntufei123\ntuhui198739\ntuierjiewang\ntuiguang\ntuiguang888\ntuiguangyi\ntuike1200\ntuixun123\ntungtung\ntuniu2906\ntuocheng\ntuojie001\ntuozhan1818\nturbulent\nturelove\nturkey513513\nturnsina0229\nturquoise\ntushuguan\ntutulove\ntutututu\ntuwenaipyj18\ntuwozaixian\ntuzhiyao\ntuzituzi\ntv654321\ntvbitvbi\ntvfxqmax\ntvrjcm03150211\ntvshopper\ntvxq1226\ntvxqforever\ntvxqhero\ntvxqlove\ntvxqtvxq\ntw123456\ntwc4091dc5\ntwenty11\ntwfkqoqm\ntwgdh123\ntwgdhbtzhy\ntwh6281502\nTwins123\ntwins12931\ntwins520\ntwinstwins\ntwj04202008\ntwjljc79\ntwtkthhia\ntwtrdfjgg\ntwtrqwrqw\ntwtssqui325\ntwtttxgt\ntx123456\ntx151719\ntx8100699\ntxg123456\ntxh19831118\ntxhwei83\ntxjjzyzqbx\ntxr6396990\ntxTaIehztp\ntxwd45678933\ntxwd45678988\ntxwdzrzl\ntxwh9999\ntxwhjtianya\ntxy123456\nty000000\nty07142602\nty071426020219\nty11081227\nty111111\nty111111111\nty111222\nty116000\nty123123\nty123321\nty1234567\nty12345678\nty123456789\nty123654\nty128341\nty131226\nty159357\nty19809303\nty19982000\nty2007mj\nty4o2o5444\nty5125861\nty5201314\nty58147116\nty594118\nty6658252\nty666666\nty678950\nty7758521\nty789456\nty789789\nty83kc59p3\nty85313726\nty888000\nty8tupos\ntyb12345\ntybb220510\ntybl6629\ntycf8722\ntyd123456\ntydu654123!\ntyer4123\ntyh2ace08\ntyheandlz\ntyhj2123\ntyhrtrfg\ntymsegzw\ntyp793355\ntypassword\ntypetype\ntyping12345\ntys79610\ntysh827651\ntysl7zqb\ntysontysontyson\ntysq123456\ntysq2008\ntysq2009\ntysq2010\ntysqnonecode\ntysqtysq\ntyswadmin\ntyty123456\ntyughjbnm\ntyui1616\ntywiwddl\ntyx03158708\ntyx041108\ntyz912634\ntz123456\ntz123456789\ntz1981oh\ntz789456123\ntzf198599\ntztztz520\ntzw123456\nu2ctu2ct\nu2master\nu7894123y\nu84hhs49\nu87654321\nu88688ky\nu8ihdtdbsz\nuaa8571892\nuanun10180515\nuarefree\nuc6636918\nucanlove\nucdos123\nucdosdir\nucdosdir123\nucdosucdos\nucdoswps\nUchihaSasuke\nucvfhplfjg\nudb7685533\nudbfghy684518\nudbgmyau\nudbssixc\nudbtdkj0046\nudbwfn1214\nudbyqkhq\nUest12424!\nuest89032\nufjsxmnht\nUFO123456\nufofxh110\nufuc89su\nufwt35210g\nUGAuG55idb\nUGAuG55jdb\nUGAvF55idb\nUGAvG55idb\nuglybaby\nugvflrgw\nUGVNYWPV\nugvwm19900714\nugx421ed\nUHAkG55kec\nUHAkG56kec\nUHAkH56kec\nUHAlG45kec\nUHAlG55kec\nUHAtG55jec\nUHAuG55jeb\nUHAuG55jec\nuheJigE5x2\nui223966be\nui999000\nUIBE971058\nuidfnhe26\nuieJigE5x2\nuieJjgE5x2\nuieJjhE522\nuieJjhE5x2\nuieJjhF522\nuifJjhF522\nuifKjhF522\nuil100814\nuilelgnoij\nuinoal98\nuiopг╗lkj\nuiop7890\nuiophjkl\nuiopuiop\nuIS9Jdgysn\nuIS9Jdgzsn\nuIS9Zdgysn\nuIT9Jdgzsn\nuiui88888\nuiui9999\nuiur57gpjf\nujfKkjF511\nujfKkjG511\nujgKkjG511\nuJS9Zdgyrn\nuJS9Zdgysn\nUJYKUIMK\nuk1390549\nukgLkjG511\nukgLkkG511\nukii5wy7i9oty@12\nUknow0206\nuknow19860206\nukz2s784\nUL4ugnxe\nuljihige\nuljxycyygy0304\nultfqquk\nULTRAMAN\nulwfnhzw\nulyygyia\numbreve9\nuncoverwheat\nundeadbird\nunderstand\nunfunway\nunilever\nUnilever123\nUnilevero86\nunionlee\nunis000938\nuniswiwi\nUniv0003\nUNIVERSE\nunualibm\nuowe1982\nuoyevoli\nuplooking\nupsilon2\nuptowngirl\nuqac13ina\nuqacchin159\nuqacchina159\nuranus22\nurwelcome\nusa911624055\nusachina\nusana2009\nusc585653\nUser1234\nUser@123\nuserisfw\nuserlist\nuserpass\nUSERuser\nuserysyt\nuSK4Q9crli\nuSK5Q9crli\nuSK5R9crli\nuSK5R9csli\nuSK5Racsli\nuSK5Racsmi\nustc2008\nustcneu2\nustcustc\nutadahikaru\nUTSTARCOM\nuu123123\nuu123456\nuu76123456\nuumaster\nuuseebbs\nuuuiiijk\nuuuuuuuu\nuuuuuuuuu\nuw44cxod\nuweihai001\nuyghlidt\nuytrewq$#@\nv11992717\nv1234567\nv12345678\nv123456789\nv1276998991\nv17987495\nv2004f600\nv2123123\nv23432434\nv37668887\nv5201314\nv5b466d5\nv654321X\nv7234500\nV770302jh\nv7x1m2f5\nv88472799\nV9B=CDQQ\nvacheron.1775\nvagaa.com\nvagabond\nvaibvcid\nvailla1986\nvalenhsu\nvalkyrie\nvanbasten\nvancouver\nvanguard\nvanquish\nvastvast\nvb123456\nvb1hx50r\nvbluev007\nvbv86hvb7p\nvbvbipnu\nvc123456\nvc74bplp\nvcy003ok\nvdskz548\nvegetable\nvegovego\nvenividivici\nvenns12345\nvenus123\nvenusvenus\nVeraVera\nveritas@425726\nverlorkk\nvermouth\nveronica1\nversace238\nvertarmy\nvery.happy\nvery123456\nvery21333\nverycool\nveryhappy\nverynice\nVERYstrong1978\nveryvery\nverywell\nveta121082\nvg00037k\nvh851144\nVHAkH56kfc\nVHAtG55jec\nVHAtH55jec\nVHBtH55jec\nVHBtH56jec\nvhj761231\nvhtpc4600\nVI8838478\nVian2829460\nVIBsH56kec\nVIBtH56jec\nVIBtH56kec\nVIBtH56kfc\nVIBtH56lfc\nvic198169\nvicente800\nvicente_800\nvicki0312\nvicki312\nvicki8174\nvickiweiwei\nvicky123\nvicky1986\nvicky520\nvicky521\nvickyvicky\nvickyVICKY00123\nvickywang\nvicto4007\nvictor123\nvictor3125\nvictor67\nvictorxyn\nvictory123\nvictoryun\nvicyflower916\nviewgood\nvifKjhF522\nvifKjiF522\nvikkiyy5201314\nvinawong\nvince839\nVINCECARTER\nvincent1890\nviolacd498008\nviolinsoul\nvip00852\nVIP1104lww\nvip123456\nvip780504\nvipvipvip\nvir3yubx75\nvirtuous\nvirus001\nviscount\nvisibleself\nvision119119\nvisionaaa111\nvislecaina\nvista2008\nvista2009\nvisualbasic\nvitaminc.\nvitas99520\nvitavita\nvityankeewong11\nviva2001\nvivaitalia\nVIVALAVIDA\nvivi123456\nvivi1982\nvivi1984\nvivi1986\nvivi1988020800\nvivi7111779\nvivian0660\nvivian11\nvivian11261026\nvivian123\nvivian13\nvivian22\nvivian3289\nvivian520\nvivian77\nvivian99\nviviandmm\nvivianlee\nvivianvivian\nvivianwang\nvivianwen\nvivicente800\nvivichen\nvividx830780\nvivienne\nviviji3781153\nvivivivi\nviyaviya\nvjfKjiF522\nvjfKjiG522\nvjfLjiG522\nvjfLkiG522\nvjgLkiG522\nvjgLkiH522\nvjgLkiH523\nvJR8Ydfxrm\nvJR8Ydfyrm\nvJR8Ydgyrm\nvJR8Zdgyrn\nvJR9Zdgyrn\nvJS9Zdgyrn\nvk5641dj\nvkgLlkG511\nvkgLlkH511\nvkgMlkH521\nvkgMlkH522\nvkjsqjuggmr\nvlgMlkH522\nvlhMlkH522\nvlhMllH522\nvnvn77777\nvnzb4391\nvocabulary\nvol84516\nvoldemort\nvoliarting\nvolkswagen\nvolvofm12\nvonflores\nvongsiaoli\nvorreieuro\nvoxqibaby\nvq123123\nvRJ4P9brkh\nvRJ4Q9brkh\nvRJ4Q9brlh\nvRJ4Q9brli\nvsnoon123\nvsong5588\nvtetdafvke\nvtethpyd\nvurlorkk\nvv123456\nvv198784\nvv198811vv\nvv428482\nvv5201314\nvv810717yj\nvvbbnnmm\nvvjj4832\nvvv654987\nvvvv1111\nvvvv1234\nvvvvvvvvv\nvvvvvvvvvv\nvvvvvvvvvvvvvvvv\nvwk9r4.com\nvZR8Ydfxrm\nW!X@C#D$\nW#P^w3p6\nw0000000\nw00000000\nw0123456\nw0169222\nw08203216\nw09d01u16\nw100075100075\nw1111111\nw11111111\nw111111111\nw1120305zy\nw11223344\nw12021202\nw123321w\nw123456j\nw123456s\nw1234w1234\nw13616136\nw13810496555\nw176122394\nw178yingxiao\nw1908000\nw1980313w\nw19811014\nw19821010\nw1982920\nw19831529\nw1983l08m08\nw19850920y\nw19870901c\nw1989p1019\nw1a2n3g4\nw1a9n8g1\nw1q1a1z1\nw1s23m45\nw1w2w3qqq\nw1w2w3w4\nw20040523\nw20090729\nw22222222w\nw2g5e7x7\nw30l11p26\nw31415926\nw33e44tt\nw3517mee\nw3710160\nw3757334\nW421HCOM24421\nw4932700c\nw4enxun1\nw4tingshuide\nw51680797\nw5215241\nw55201314\nw5659007\nw58369837\nw5895292\nw601005227712\nw6343281\nw6737218\nw6y2j4503\nw719n511\nw7460181\nw750512790922w\nw75464623\nw7654321\nw7758258\nw7758520\nw7777777\nw7862873\nw810wj327j\nw811206q\nw8582830\nw860624h\nw8717431\nw87475225\nw8752889\nw8932571\nw89sdhfhj4930\nw9291986\nw939968525\nw93t82yht\nw9700357\nw993939w\nw99c7834\nw_198555\nwa&(79er\nwa009988wa\nwa12345678\nwa123456789\nwa12erfsaetgaseg\nwa19741130\nwa198019\nwa73821419..\nwa771314\nwaam914803\nwab1230456\nwabaobao1314\nwabbmmlg1314\nwabbrrhswj\nwabbwabb\nwabc987654321\nwabmherhu\nwabxh123\nwacc1314\nwacos123\nwaderworld\nwadswads\nwafeifei\nwaff1314\nwaffenss\nwahaha123\nwahaha277\nwahahaha\nwahh1314\nwahpwahp\nwahxbahilu0k\nwaidiannao\nwaiguoyu\nwailaopo\nwaini1314ok\nwainiwaini\nwait01234\nwait4you\nwaitforme\nwaitforyou\nwaiting123\nwaiting4u\nwaitingfor\nwaitingforyou\nwaitingfox\nwaitlove\nwaitting\nwaiwai520\nwaiwxll19850521\nwaixingren\nwaizhangyan\nwajkyl826139\nwajxssss\nwakakakakaka\nwakinchau\nwakkx913\nwalf226603\nwalhywashy\nwalj1314\nwalkalone\nwalker112\nwalkonby\nwall1314\nwallace1\nwallace1130\nwallpal1\nwallsound\nwallwall\nwalnbq888\nwalp1314\nwalundiluo\nwalwshlt\nwAly1314\nwalyr2007\nwalyywnwzj\nwaMD123456\nWAMM1314\nWamm2005\nwammwamm\nwan100200\nwan111581\nwan12345\nwan3231317\nwan520520\nwan527511\nwan5455229\nwan62458712\nwan751129\nwan7878728\nwanahu184\nwanbaolu\nwancheng\nwanderer\nwanderful\nwandering\nwandermiss\nwandou150197\nwaner521\nwang0000\nWANG000000\nwang010203\nwang0110\nwang0115\nwang0123\nWang0125\nwang0217\nwang0220\nwang0315\nwang0401\nwang0411\nwang0608\nwang0716\nwang0720\nwang0818\nwang08823\nwang0909\nwang0987\nwang100200\nwang1006\nwang1007\nwang1010\nwang1011\nwang1012\nwang1013\nwang1014\nwang1015\nwang1016\nwang1020\nwang1021\nwang1022j\nwang1023\nwang1024\nwang1025\nwang1026\nwang1027\nwang1101\nwang1111\nwang111111\nwang1119\nwang1120\nwang1122\nwang112233\nwang1123\nwang1124\nWang1125\nwang1126\nwang1128\nwang1204\nwang1205\nwang1206\nwang1207\nwang1208\nwang1210\nwang1211\nwang1212\nwang1213\nwang1213626\nwang1215\nwang1216\nwang1217\nwang1219\nwang1220\nwang1224\nwang1225\nWang1226\nwang1227\nwang1228\nwang1229\nwang123.\nwang1230\nwang1230.\nwang1231\nwang123124\nwang123321\nwanG123456\nwang1234567\nwang12345678\nWANG123456789\nwang1234567890\nwang123654\nWANG123WANG\nwang13101141\nwang13579\nwang1452\nwang147258\nwang147258369\nwang159357\nwang1688\nwang1963\nwang1966\nwang1969\nwang1970\nwang1972\nwang1974\nwang1975\nwang1976\nwang1977\nwang1977124\nwang1978\nWANG1979\nwang1980\nwang19801224\nwang1981\nwang1982\nwang1983\nwang1984\nwang19840515\nwang19841018\nwang198527\nwang1988218\nwang1989wang\nwang1991\nwang1992\nwang1997\nwang1998\nwang2000\nwang2001\nwang2002\nwang2003\nwang2004\nwang2005\nwang2006\nwang2007\nwang2009\nwang2010\nwang201314\nwang2729\nwang31415926\nwang315600\nwang318097\nwang3333\nwang350452563\nwang450516\nwang4510\nwang456789\nwang4585\nwang520520\nwang534386.\nwang546607\nwang5566\nwang5678\nwang580422\nwang589589\nwang6188\nwang65391141\nwang654321\nwang6562\nwang666661g\nWANG666666\nwang6688\nwang697095\nwang75798081\nwang7788\nwang811227\nwang820121\nwang830327\nwang841219\nwang850912\nwang8512154251\nwang85324\nwang85736963\nwang860116\nwang880710\nwang886058\nwang8888\nwang888888\nwang8899\nwang8dan\nwang9264\nwang9294\nwang932936\nwang9353\nwang961129\nwang@123\nwang@1980\nwang_130\nwang_gongshang\nwangaijun\nwanganqi\nWANGBA31\nwangbadan111\nWANGBADANG\nwangbaolei\nwangbaoqi\nwangbeibei\nwangbiao\nwangbin123\nwangbin840728\nwangbinbin\nwangbingxiao\nwangbo123\nwangbo520\nwangbo521\nwangbobo\nwangboyu\nwangbuliao\nwangcaiyun881024\nwangchan\nwangchang\nwangchangpei\nwangchen123\nwangchenchen\nwangchengsnd\nwangchenxi\nwangchi617\nwangchong\nwangchuan\nwangchuang\nwangchun\nwangchunanqusi8\nwangchunhua\nWANGCHUNLI\nwangchunlin\nwangchunxia\nwangchunyan\nwangchunyu\nwangcuicui\nwangdafa\nwangdahai\nwangdahu\nwangdali\nwangdan1\nwangdan123\nwangdan124\nwangdan520\nwangdapeng\nwangdawei\nwangdaye\nwangddye\nwangdean\nwangdeli\nwangdelong\nwangdezhou\nwangdi1020\nwangdian\nwangdian2009\nwangdiao\nwangding\nwangdong1234\nwangdongcheng\nwangdongli\nwangdongyang\nwangfaju\nwangfang123\nwangfang520\nwangfangfang\nwangfei1\nwangfei1023\nWANGfei520\nwangfei521\nwangfeifei\nwangfeng123\nwangfeng521\nwangfeng98029\nwangfujie\nwangfujun\nwangfuqiang\nwanggang77\nwangge123\nwanggeng\nwanggong\nwanggougo\nwangguan\nwangguang\nwangguangyu\nwangguanyu888\nwangguodong\nwangguohua\nwangguolong\nwangguoqing\nwangguotian\nwangguowei\nwanghabcx\nwanghai119\nwanghai123\nwanghai8487\nwanghaibin\nWANGHAIBO\nwanghaifeng\nwanghaijiao\nwanghaijuan\nwanghaijun\nwanghaili\nwanghailong\nwanghaipeng\nwanghairong\nwanghaitao\nwanghaiwei\nwanghaixia\nwanghaiyang\nwanghaiying\nwanghaiyu\nwanghan123\nwanghang\nwanghangwh\nwanghanq\nwanghao1\nwanghao1988\nwanghao2008\nwanghao520\nwanghaodang\nwanghaohao\nwanghaojie\nwanghaonan\nwanghaoran\nwanghaowen\nwanghaoyu\nwanghb1024\nwanghejiayou\nwangheng\nwanghong123\nwanghongbo\nwanghongfei\nwanghongjun\nwanghongli\nwanghongtao\nwanghongwei\nwanghongxia\nwanghongxu\nwanghongyan\nwanghongyu\nwanghongyuan\nwanghu123\nwanghua123\nwanghuai\nwanghuaiyu\nwanghuan12\nwanghuan123\nwanghui1\nwanghui520\nwanghui521\nwanghuihui\nwanghuijuan\nwanghuijun\nwanghuilan\nwanghuili\nwanghuimin\nwangji119\nwangji123\nwangJI1314\nwangji2009\nwangji2323223\nWANGJI520\nwangji521\nWANGJIA123\nwangjia19821014\nWANGJIA520\nwangjiahui\nwangjiajia\nwangjiajie\nwangjiajun\nwangjiale\nwangjialei\nwangjiali\nwangjialin\nwangjialong\nwangjialu\nwangjiaming\nwangjian6006\nwangjianan\nwangjianbin\nwangjianbo\nwangjianfei\nwangjianfeng\nwangjiang\nwangjianhui\nwangjianing\nwangjianli\nwangjianming\nwangjianq\nwangjianwei\nwangjianxin\nwangjianye\nwangjiaoyan\nwangjiaqi\nwangjiarui\nwangjiawei\nwangjiaxin\nwangjiayi\nwangjiayu\nwangjiba\nWANGJICHAO\nwangjie1\nwangjie520\nwangjie521\nwangjifeng\nWANGJIGUOQU\nwangjihua\nwangjilong\nwangjimima\nwangjin0713\nWANGJIN123\nwangjin15888\nwangjinbao\nwangjinbo\nwangjing0717\nwangjing1314\nwangjing28\nwangjing520\nWANGJING521\nwangjing794178\nwangjingbo\nwangjinghui\nwangjingjing\nwangjingls\nwangjingshan\nwangjingwei\nwangjingwen\nwangjingyan\nwangjingyi\nwangjingyu\nwangjinhua\nwangjinhui\nwangjinjin\nwangjinling\nwangjinlong\nwangjinpeng\nwangjintao\nwangjinwei\nwangjinwen\nwangjinxin\nwangjinyu\nwangjiong\nwangjita\nWANGJIWANGJI\nwangjiwei\nwangjixing\nwangjiyiqie\nwangjiyuan\nwangjj144\nwangju1988\nwangjuan520\nWANGJUANJUAN\nwangjucaifu\nwangjun0112\nwangjun1\nwangjun123456\nwangjun520\nwangjun521\nwangjunbo5566\nwangjunfeng\nwangjunhui\nwangjunjie\nwangjunjun\nwangjunli\nwangjunwei\nwangjunxia\nwangjunyi\nwangjunyu\nwangjuxiang\nWANGKAI123\nwangkaikai03\nwangkaixin\nwangkaixiwkx6\nwangkaixiwkxwkx\nwangkelly\nwangking\nwangkuan\nwangkun123\nwangkunwu\nwanglan797140\nwanglang\nwanglanlan\nWangLaoJi\nwanglaowu\nwangle0914\nwangle123\nwangleba\nwangleehom\nwanglei1\nwanglei520\nwanglei521\nwanglei81\nwangleilei\nwanglele\nwanglemima\nwangleni\nwangleta\nwangli123456\nwangli1987\nwangli2046\nwangli323211\nwangli520\nwangli5201314\nwangli521\nwanglian\nwanglianchao\nwanglibin\nwanglibo\nwanglidong\nwanglifei\nwanglifeng\nwangligao\nwangliguo\nwanglihong\nwanglihui\nwanglijia\nwanglijie\nwanglijing\nwanglijun\nwanglikun\nwanglimei\nwanglimin\nwangliming\nwanglin123\nwanglin2008\nwanglin521\nwanglina\nWANGling520\nwanglingfeng\nwanglingling\nwanglinlin\nwangliping\nwangliqiang\nwangliu1\nwangliwangli\nwangliwei\nwangliwen\nwanglixia\nwanglixiao\nwanglixin\nwangliying\nwangliyuan\nwanglizhi\nwanglj624\nWANGLONG\nwanglong123\nwanglove\nwanglu123\nwanglulu\nwanglulu1987\nwanglunzhu\nwangluobu\nwangluomima\nwangluotg\nwangluww\nwangluyao\nwanglv123\nwangmanli\nwangmei520\nwangmeili\nwangmeiling\nwangmeiyan\nwangmeizhu\nwangmeng123\nwangmengjie\nwangmian\nwangmiao\nwangmin123\nwangming123\nwangminghui\nwangmingli\nwangmingming\nwangmingxin\nwangmingyu\nwangminmin\nwangna1986\nwangna520\nwangnan123\nwangnan520\nwangnana\nwangneng\nwangnenghao88925\nwangnian\nwangning1095\nwangning123\nwangning26\nwangpang\nwangpeipei\nwangpeng123\nwangpengyu\nwangping520\nwangpu2001\nwangqi123\nwangqi520\nwangqian49\nwangqian520\nwangqian521\nwangqian7071314\nwangqiangsidiao\nwangqianqian\nWangQianyu\nwangqiao\nwangqiming\nwangqing123\nwangqing520\nwangqinghua\nwangqingjun\nwangqingyu\nwangqingzyx\nwangqinlan\nwangqinqin\nwangqiong\nwangqiqi\nwangqiu517\nwangqiu7355\nwangqiushi\nwangqiushi8798\nwangqiuying\nwangqiuyu\nwangqiwei\nwangqiwen\nwangquan\nwangrenhua\nwangrenjun\nwangrui123\nwangrui520\nwangruifeng\nwangruiqi\nwangruoqi\nwangruoting\nwangruoyu\nwangsantao\nwangshang\nwangshanshan\nwangshao\nwangshaohu\nwangshasha\nwangshen\nwangsheng26\nwangshichao\nwangshijie\nwangshijun\nwangshili\nwangshilong7310\nwangshiqi\nwangshiqiang\nwangshirufeng\nwangshiruyan\nwangshisuifeng\nWangShiwei\nwangshiwen\nwangshiying\nwangshiyu\nWANGSHUAI\nwangshuai520\nwangshuhui\nwangshui\nwangshujie\nwangshujun\nwangshulin\nwangshun\nwangshuqi\nwangshuyi\nwangshuyu\nwangshz@19851124\nwangsijia\nwangsijie\nwangsiqi\nWANGSISI\nwangsiwei\nwangsiwen\nwangsiyao\nwangsiyi\nwangsiyu\nwangsiyuan\nwangslfsy\nwangsujuan\nwangsuming\nwangtalent84\nwangtang\nWangtao520\nwangtao521\nwangtaowoaini\nwangteng\nwangtian\nwangtian0111\nwangtianqi\nwangtianya\nwangtianyi\nwangtianyu\nWANGTIEJUN\nwangting5188\nwangting520\nwangtingting\nwangtong\nwangwang000\nwangwang123\nWANGWANG1980\nwangwang512\nwangwang521\nwangwangbao\nwangwangwang\nwangwanxin\nwangwei0820202\nwangwei1\nwangwei11\nwangwei110\nwangwei123456\nwangwei1981\nwangwei1985\nwangwei1989\nwangwei521\nwangweidong\nwangweifeng\nwangweihua\nwangweijia\nwangweijie\nwangweijun\nwangweili\nwangweimin\nwangweina\nwangweinan\nwangweiqi\nwangweishen\nwangweiwei\nwangweixi\nwangweiyi\nwangwen0919\nwangwenbin\nwangwenbo\nWANGWENCHAO\nWANGWENFEI\nwangwenhua\nwangwenhui\nwangwenjie\nwangwenjing\nwangwenjuan\nwangwenjun\nwangwenli\nwangwenqing\nwangwentao\nwangwenting\nwangwenwen\nwangwenyan\nwangxhsd\nwangxi123\nWANGXIAN\nwangxiangyu\nwangxiao123\nwangxiaobing\nwangxiaobo\nwangxiaochen\nwangxiaodan\nwangxiaodong\nwangxiaoer\nwangxiaofang\nwangxiaofei\nwangxiaofeng\nwangxiaohu\nwangxiaohua\nwangxiaohui\nwangxiaojie\nwangxiaojing\nwangxiaojun\nwangxiaokun\nwangxiaolei\nwangxiaoli\nwangxiaolin\nwangxiaoling\nwangxiaolong\nwangxiaolu\nwangxiaomao\nwangxiaomei\nwangxiaomin\nwangxiaoming\nwangxiaona\nWANGXIAOPING\nwangxiaoqian\nWANGXIAOQING\nwangxiaowei\nwangxiaowen\nwangxiaowu\nwangxiaoxi\nwangxiaoxia\nwangxiaoxian\nwangxiaoxiao\nwangxiaoxu\nwangxiaoya\nwangxiaoyan\nwangxiaoyang\nwangxiaoyi\nwangxiaoying\nwangxiaoyong\nwangxibo\nWANGXIJUN\nwangxin1\nwangxin123456\nwangxin520\nwangxin521\nwangxingyu\nwangxinhua\nwangxinjie\nwangxinkai\nwangxinli\nwangxinling\nwangxinqi\nwangxinrong\nwangxinwei\nwangxinxin\nwangxinyan\nWangXinYi\nwangxinying\nwangxinyu\nwangxinyue\nwangxiong\nwangxitao\nwangxiujuan\nwangxiujun\nwangxiuli\nwangxiwen\nwangxixi\nwangxiyuan\nwangxizhi\nwangxu123\nwangxuan\nwangxuanzi\nwangxudong\nwangxue123\nwangxue521\nwangxuefe\nWANGXUEFEI\nwangxuefeng\nwangxuelei\nwangxuemei\nwangxuewei\nwangxueyan\nwangxueying\nwangyadong\nwangyafang\nwangyafei\nwangyahui\nwangyajie\nwangyajing\nwangyajuan\nwangyajun\nwangyali\nwangyaming\nwangyan1\nwangyan123456\nwangyan1981\nwangyan520\nwangyanbo\nwangyanchao\nwangyaner\nwangyanfei\nwangyang12\nwangyang521\nwangyanhong\nwangyanhua\nwangyanhui\nwangyanjie\nwangyanjun\nwangyanli\nwangyanling\nwangyanlong\nWangYanMei\nwangyanni\nwangyanqi\nwangyanqing\nwangyanqing86\nwangyanwangyan\nwangyanxia\nwangyanyan\nwangyanyinger\nwangyao123\nwangyaping\nwangyaqi\nWANGyating\nwangyawei\nwangye5521\nwangyi123\nwangyi163\nwangyi1988\nwangyi2008\nwangyi520\nwangyi521\nwangyibing\nwangyibo\nwangyicheng\nwangyifan\nwangyifei\nwangyifeng\nwangyihan\nwangyihao\nwangyijie\nwangyijun\nwangyilin\nWANGYIMING\nwangyin0621\nwangyinan\nwangying0432\nwangying123\nwangying1986\nWangYing520\nwangying521\nwangyinghui\nwangyingjie\nwangyingnan\nwangyingni\nwangyingying\nwangyinuo\nwangyipeng\nwangyiqing\nwangyiran\nwangyiwei\nwangyiwen\nwangyixian\nwangyixin\nwangyixuan\nwangyiyu\nwangyizhaodao1\nwangyong123\nwangyongli\nwangyongna\nwangyongsheng\nwangyongwei\nwangyoucao\nwangyouwei\nWangytong\nwangyu1314\nwangyu520\nwangyu521\nwangyuan0\nwangyuanyuan\nwangyubao\nwangyubin\nwangyubo\nwangyuchao\nwangyuchen\nwangyucheng\nwangyudong\nWangYue0515\nWANGYUE1\nwangyue123\nwangyuehui\nwangyueli\nwangyuexin\nwangyufan\nwangyufang\nwangyufang00\nwangyufei\nwangyufeng\nwangyufu\nwangyuguang\nwangyuhan\nwangyuhang\nwangyuhao\nwangyuhong\nwangyujia\nwangyujiao\nwangyujie\nwangyujing\nwangyujue\nwangyujun\nwangyuliang\nwangyulin\nwangyuling\nwangyulong\nWANGYUMENG\nwangyuming\nwangyunfei\nwangyunfeng\nwangyunlong\nwangyupeng\nwangyuqi\nwangyuqin\nwangyuqing\nwangyushan\nwangyuting\nwangyuwangyu\nwangyuwei\nwangyuxi\nwangyuxian\nwangyuxin\nwangyuxuan\nwangyuyang\nwangyuyu\nwangyuzi\nwangzeng\nwangzeyu\nwangzhan\nwangzhang\nwangzhao\nwangzhe123\nwangzheguilai\nwangzhen123\nwangzheng123\nwangzhenhua\nwangzhenyu\nwangzhenzhen\nwangzhibin\nwangzhichao\nwangzhicheng\nwangzhigang\nwangzhiguo\nwangzhihao\nwangzhihong\nwangzhihui\nWangZhiJie\nwangzhijun\nwangzhili\nwangzhilin\nwangzhimin\nwangzhipeng\nwangzhiping\nwangzhiwei\nwangzhiwen\nwangzhixin\nwangzhiyang\nWANGZHIYONG\nwangzhiyu\nwangzhong\nwangzhou\nwangzhuang\nwangzhuo\nwangzi123\nwangzi520\nwangzi521\nwangzi86\nwangzifeng\nwangzihan\nwangzihan888\nwangzihao\nwangzijian\nwangzijun\nwangzilong\nwangziming\nwangzinan\nwangziqi\nwangziwei\nwangzixi\nwangzixian\nwangzixuan\nwangziyan\nwangziyang\nwangziyi\nwangziyu\nwangziyue\nwangzong\nwangzyht\nwangzznn\nwani1314\nwanjxlsadm\nwankof99\nWANKWANK\nwanli123\nwanliang\nwanlixing\nwanliyuxiao\nwanlp1314\nwanmei123\nwanmeishenghuo\nwanmeishijie\nwanqiang\nwanqiwen\nwanrenmi\nwansandqinra\nwansandqinre\nwanshang\nwansheng\nwanshi871234\nwanshiruyi\nwanshuai198202\nwansijie\nWant2005\nwantgirl\nwantxwan33\nwanwan123\nwanwan520\nwanwan5200\nwanwan521\nwanwan7005\nwanwanwan\nwanwhr1314\nwanxiang\nwanxuejiaoyu\nwanyi668\nwanzheng\nwanzhengyin\nwanzhong\nwanzhuan\nwanzi1986\nwanzi421115\nwaq963528417\nwaqq6599\nwaqwaq1314\nwarcraft3\nwarmblue\nwasaidashu\nwasam888\nwasd1234\nwasd603729\nwasgodgg\nwash1314\nWashington\nwassssaw\nWatchdog\nwater123\nwater1234\nwater1981\nwater2008\nwater321\nwater520\nwater521\nwaterboy\nwaterfire\nwaterfish\nwaterfly\nwaterlily\nwaterloo\nwaterman\nwatermark\nwatermoon\nwaternocean58420\nwatersky\nwaterstar\nwaterstart\nwaterwater\nwaterwood\nwatll1982\nwatls456852\nwatngsjyundi\nwavewave\nwawa123456\nwawalian\nwawdbbmm\nwawj0128\nwawj1314\nwawjwawj\nwawzj1314\nwaxberry\nwaxhc769x\nwaxjlwaxjl\nwaxq424325\nwaxq520614\nwaxx1314\nwaxxwaxx\nwaxy1314\nwaynebing\nwaynelong\nwaynerooney\nwaynewayne\nwayqq108\nwayy112!\nWAYY1314\nwayywayy\nwazc1314\nwazch1314\nwazctgaw\nWAZHRMGHG\nwazj1314\nwazwhh127\nwazx1314\nwazxqdwx\nwb123456789\nwb13472287762y\nwb19860521\nwb337053\nwb5201314\nwb873780\nwbcq2003\nwbflywbfly\nwbwbwbwb\nwbxrnmzdwdmm\nwc111111\nwc123123\nWc123456\nwc123456789\nwc5201314\nwcaonima\nwccep2002\nwcf851225\nwcg12345\nwcg860303\nwch101815\nwch123456\nwch123456789\nwchwoaini\nwcj12315114558\nwcj123456\nwcl5201314\nwcl=790313\nwcm51628\nwcmm66226\nwcnmgtwq\nwcnmwcnm\nwcsz1980\nwcw1987226\nwcw200045\nwcwcwcwc\nwcy123456\nwcy13928788869\nwcywcywcy\nwczhersunny\nwd*7s8x?\nwd123123\nwd123654\nwd1314520\nwd230026\nwd81wd81\nwd861125\nwd8903161512\nwda13665775141\nWDAZWLNCZ\nwdazwncz\nwdbb8888\nwdd123456\nwdd9930910\nwddongfeihu\nwddptwd357\nwddzyjxxzh\nwdelaopo\nwdf123456\nwdf5201116\nwdf6891116\nwdfawdfa\nwdg19801231\nwdh753159\nwdhlogin\nwdhsr520\nwdj19851026gyt\nwdjideal\nwdkbg750326\nwdl123456\nwdmcwfcidtf\nwdmmnbzd\nWDmms123\nwdmms519\nwdmmshitf\nwdmmwdmm\nwdmmzywzd\nwdmzshyx\nwdmzsjilin\nwdnqt055\nwdq123wdq\nwdq315411\nwdqswdqs\nwdqwdq123\nwdqwdq321\nwdrq9196\nwds123456\nwds20070811\nwdsrs72n\nwdszds234\nwdt123456\nwdtc8031\nwdw013856\nwdw12310\nwdy123456\nwdyyu0134\nwdza121457\nWDZHMYMM\nwe111111111\nwe1234998\nwe456456\nwearegood\nwearehappy\nweareone\nwearethebest\nwearetheone\nwearetheworld\nweareyou\nweasel28\nweb12345\nweb123456\nweb12345678\nweb989898\nwebgle2009\nwebthing\nwebwebweb\nweddream\nweds198201\nweemote2621\nweepingfish82\nweh1364k\nweh998800\nwei113113\nwei123123\nwei12345\nwei1314521\nwei19821003\nwei198600\nwei4_xin\nwei520520\nwei5211314\nwei7758521\nwei811006\nwei819915\nwei850510\nweiaijing\nweiaini+-*/07\nweiaiwei\nweibo123\nweicai88\nweichang\nweichen520\nweicheng\nweichong\nweichuan\nweiclaire\nweicuiping\nweidabudiao\nweidadao\nweidadelb860221\nweiduaini\nweifeng123\nweifenjie\nweig2dang\nweiguang\nweihaijun\nweihaiyan\nweihaiyunqing\nweihejia\nweihong.\nweiiminn\nweijiajia\nweijianfei\nweijiang\nweijiaqi\nweijiaqing\nweijinfeng\nweijing123\nweijishi\nweilanying\nweileshui\nweili520\nweiliang\nweilihua\nweilijie\nweilijun\nweiminghu\nweiminwoo\nweinierlai\nweinihaoma\nweiniqidao\nweinixieshi\nweinixiong\nweioumei2008\nweioumei2009\nweiqinan\nweiqiong\nweiqizhou\nweirdkiss\nweirenminfuwu\nweiruinan\nweisheng\nweishengjin\nweishenm\nweishenme1\nweishenmea\nweishenmene\nweishenmo\nweishuai\nweishuang\nweisiyuan\nweitao123\nweiwei00\nweiwei0108\nweiwei051118\nweiwei0828\nweiwei11\nweiwei1126\nweiwei1234\nweiwei123456\nweiwei1314\nweiwei168\nweiwei1982\nweiwei1983\nweiwei1984\nweiwei1985\nweiwei1986\nweiwei22\nweiwei712\nweiwei77\nweiwei83\nweiwei88\nweiwei911\nWEIWEI917\nweiweiai\nweiweiaini\nweiweian\nweiweibaobao\nweiweide\nweiweidounai\nweiweilin\nweiweishiwo\nweiweiweiwei\nweiweixiao\nweiweiyixiao\nweiweiyu\nweiwoaini\nweiwoduzun\nweixiang\nWEIxiangrikui\nweixiao123\nweixiao520\nweixiaobao\nweixiaoli\nweixiaoqing\nweixiaowei\nweixin520\nweixinjoy\nweixiong\nweiy1020\nweiyan5519\nweiyeandy\nweiyi111\nweiyi123\nweiyi520\nweiyideai\nweiyideni\nweiyisecai\nweiyongfeng007lc\nweiyunyin\nweizhang\nweizhe1985\nweizheng\nweizhong\nweizhuang\nwelcome..\nwelcome007\nWelcome1234\nWelcome2\nwelcome2009\nwelcome8\nwelcome868\nwelcome88\nwelcomedearbook\nwelcomelhs\nwelcomeme\nwelcometo\nwelcomewe\nwelcomewelcome\nwelcomeyou\nwelkinking\nwell4321\nwellcome\nwelldone\nwellgood\nwellhope\nwellwell\nwen12345\nwen123456789\nwen19890618\nwen1jia2bao3\nwen=0341\nwenaihuali1314\nwenchang\nwencheng\nwenchong\nwenchuan\nwenchuan512\nwendaniu52\nwendatesting\nwenddy760105\nwendoo123\nwendy.622.820\nwendy123\nwendy1234\nwendy1982\nwendy1983\nwendy1986\nwendy2009\nwendy520\nwendy622512\nwendy699669\nwendy_70\nwendychen\nwendysday\nwendywendy\nwenfawang123456\nweng1179\nweng123456\nweng1987\nweng723365\nwengcheng\nwengfeng\nwengjian\nwengjing\nwengling\nwenglong\nwenguang\nwengweng\nwengyiyi78\nwenhan1988\nwenhui5201314\nwenjg627\nwenjia51420518\nwenjiabao\nwenjie123\nwenjie333\nwenjie520\nwenjiewen\nwenjing123\nwenjing1984\nwenjing520\nwenJING521\nwenjipeng\nwenjuan1008\nwenjuan1984\nwenjuan520\nwenli520\nwenli928\nwenliang\nwenliyan\nwenlov1977\nwenlu959\nwenni13698003791\nwenqiang\nwenquxing\nwenrou4p\nwenrouyidao\nwenrui2000\nwensheng\nwenshu:)\nwenshuai\nwentin1632\nWENTWORTH\nwentworthmiller\nwenv4meng\nwenwei22\nwenwen001\nwenwen123456\nwenwen1314\nwenwen1982\nwenwen1987\nwenwen5239\nwenwen911\nwenwenwen\nwenxiang\nwenxianjun\nwenxiaolong\nwenxinwukui\nWENXIONG\nwenxiwenxi\nwenxuan250858966\nwenxuan9449\nwenxuecity\nwenxueyuan\nweny820106\nwenyan89\nwenYApeiJUN\nwenyifan\nwenyu131\nwenyu520\nwenzhang\nwenzheng\nwenzhong\nwenzi520\nwer5510033\nwerewolf\nwero823hqwe\nwersdfxcv\nwertsdfg\nwerwerwer\nwesewq1982\nwest1234\nwest8250\nwestgames\nwestlake\nwestpoint\nwestwest\nwestwind\nWESTWOLF\nwewhawiwha\nwezyn1260\nwf112233\nwf1314520\nwf198106\nwf376872\nwf5201314\nwf654321\nwf68866463\nwf780110\nwfang198134\nwfbql810329\nwfclient\nwfddwfdd\nwfdg6650025\nwfdyj2009\nwff2284159\nwff6785298\nwfj458224032960\nwfkb963852\nwfkbmmqu\nwflcm3568\nwfnhpynn\nwfnydskf\nwfr112118\nwfsaegsdrhfdj@12\nwfshnwq126\nwftcjfwh\nwfwfwfwf\nwfy1984912\nwfywfn230\nwg123456\nwg412425ll\nwg5201314\nwg8366cn\nwgb319620\nwgdzh123\nwgf123456\nwggihggw\nwgh123456\nwgh19790619\nwgh830830\nwghsdry5\nwgm123456\nwgq123456\nwgs430wl715\nwgs821219\nWgtx1314\nwgvfhpusr\nwgx123456\nwgyxf301\nwgzalburni\nwgzwjr168\nwh123123\nwh123456789\nwh1314520\nwh30213227\nwh518akm\nwh5201314\nWh5211314\nwh850518\nwh858160\nwh86446152\nwh8659835\nwh880112\nwhakm36RJ\nwhangjij\nwhat0210\nwhat800114\nwhatareyou\nwhatcanido\nwhatisit\nwhatisjava\nwhatislove\nwhatisthis\nwhatisyourname\nwhatname\nwhattime\nwhatwhat\nwhatyouname147\nwhb198373\nwhbs999999\nwhcgd199961\nwhcristy\nwhctygyh\nwhd123456\nwhdxwhdx\nwhenever\nwheneverjo\nwhengthr123\nwhenxhwdmima\nwhenyoubelieve\nwhereami\nwhereareyou\nwhfwhf619\nwhfylabq\nwhg77428428\nwhh123456\nwhht85363866\nwhirligig\nwhirlwind\nwhite123\nwhitecat\nWhiteCloud\nwhitefox\nwhitehouse\nwhitelove\nwhiterose\nwhitescar\nwhitesnow\nwhitewhite\nwhitewolf\nwhj0135790\nwhj123456\nwhj198386\nwhj19861013\nwhj520630\nwhjdnssdm\nwhkeqihb\nwhl123456\nwhl198711\nwhl780112\nwhllxlwtt\nwhm121710\nwhm123456\nwhm218418\nwhm780705\nwho123456\nwhoajing\nwhoami//..\nwhoami12\nWhoami123\nwhoamicpu\nwhoamidearbook\nwhoamiii\nwhoamiwhoami\nwhoareme\nwhoismylove\nwhoiswho\nwhoknows\nwholoveme\nwhopawho\nwhosyour\nwhoyouare\nwhp02260846\nwhq123456\nwhq721102\nwhqgwhqg\nwhs123456\nwhsdjhbwd\nwht123456\nwht810202\nwhtnfvf520\nwhu123456\nwhueducn\nwhw!@028\nwhw83622740\nwhwgpwhwgp\nwhwgpxdr8y\nwhwhwhwh\nwhxqhnfz\nwhxttbtnxm\nwhy123123\nwhy12345\nwhy123456\nwhy123456789\nwhy123654\nwhy123why\nwhy23825\nwhy320751\nwhy5201314\nwhyB8425\nwhylhy29\nwhynotplay\nwhyq5758227\nwhytshpy\nwhywhywhy\nwhz520love\nWIBsH56kec\nWIBsH66kec\nWIBsI66kec\nWIBtI56lfd\nwicq2008\nWICrI66kfc\nWICsI66kfc\nwidec2394\nwihkerld\nwildbird\nwildfire\nwildhorse\nwildwind\nwildwolf\nwilh2566\nwilinlin\nwill123456\nwill1982\nwill2006\nwill2008\nwill86197\nwillenella\nwillgate\nwilliam123\nwilliam1986\nwilliam7\nwillking\nwillpower\nwillsmith\nwillstock1\nwillwill\nwilson4628\nwilsondx\nwin12345\nwin123456\nwin805553\nwin86022236\nwina1324\nwinadmin\nwind-cat\nwind103099\nwind1234\nwind162300\nwind1668\nwind1979\nwind1982\nwind1984\nwind198726\nwind2000\nwind2002\nwindancer\nwindbell\nwindcloud\nwindfeng\nwindflower\nwindflowers\nwindforce\nwindmill\nwindmoon\nwindow123\nwindow2000\nwindow98\nwindows0\nwindows007\nwindows01\nwindows11\nwindows110\nwindows1234\nwindows2003\nwindows2007\nwindows2009\nWindows2010\nwindows2k\nwindows36\nWindows7\nwindows76\nwindows83\nwindows88\nwindows888\nwindows99\nwindows999\nwindowsa\nwindowsdearbook\nwindowsdir\nwindowsjjl\nwindowsme\nwindowsnt\nwindowsok\nwindowsuh\nwindowsx\nwindowxp\nwindpower\nwindrain\nwindscwt\nwindsnow\nwindson001\nwindsor521\nwindstar\nwindtalker\nwindwave\nwindwind\nwindwing\nwindwolf\nwindy123\nwindy1326\nwindy870301\nwindywindy\nwindzlfyp\nwinersnakec7\nwinforever\nwing.071\nWING1028\nwing1981\nwing1985117\nwing2008\nwing2314fly\nwing5201314\nwing57yao02\nwing@167\nwingamy86\nwingcall\nwinghost\nwingkei912\nwingochu\nwingwing\nwingzero0\nwinipcfg\nwinkwink\nwinmicrosoft\nwinner0824\nwinner123\nwinner2001\nwinner2008\nwinner2009\nwinner99\nwinnerwinner\nwinnie123\nwinnie716\nwinning11\nwinshell\nwinter01\nwinter12\nwinter123\nwinter1988\nwintersnow\nwinwin2008\nwinwinwin\nwinxcwinxc\nwinxiong\nwinxp13501\nwinylovedon\nwinzy027\nwira601028\nwireless\nwirhf525857\nwisdom123\nwish1314\nwish1982\nwishwish\nwisteria\nWIT945DAWN819\nwitch1031\nwitch2519\nwitchgirl\nwithlove\nwithoutlove\nwithoutme\nwithoutu\nwithoutyou\nwithwind\nwiwi811122\nwj100200\nwj1106099hoot\nwj111111\nwj123123\nwj123321\nwj1234567\nwj12345678\nwj1314520\nwj133373822\nwj161304\nwj171717mk\nwj19831003\nwj198781\nwj250320\nwj3344520\nwj3893818\nwj4515168\nwj5211314\nwj55699827\nwj654321\nwj730524\nwj800519\nwj801104\nwj851012\nWJ91526220\nwj979304\nwjb123456\nwjb6788655123\nWJBtI56lfd\nwjbzxp780925\nwjc123456\nwjc19800706\nWJCrI66kfc\nWJCrI66kfd\nWJCtI56lfd\nWJCtI57lfd\nWJCtI67lgd\nwjd101212\nwjd123456\nwjd6267931\nwjdcyr27149\nwjdd0123\nwjdd312312312\nwje322we\nwjf123456\nwjf623528\nwjfuke0451\nwjgljwjglj\nwjgLkiH523\nwjgLkiH623\nwjgLkjH623\nwjgMkjH623\nwjh123456\nWJH123456789\nwjh132132\nwjh3409714\nwjh690118\nwjh771208\nwjh820505\nwjh884585\nwjh8998agz\nwjj00700\nwjj123456\nwjj19630108\nwjj198110\nwjj20020521\nwjj3910351\nwjjlxjn23-ssang\nwjl123456\nwjl991460\nwjloveflower520\nwjlwjlwjl\nwjm123456\nwjm960403\nwjn1114125\nwjn28ysan\nwjp133225\nwjpsuihwfn\nwjq012786\nwjq19820207\nwjq419419\nwjs123456\nwjs36785659\nwjsw5945\nwjt123456\nwjt536968\nwjtsly522\nwjw123456\nwjwj1869\nwjwwyp54wjw82654\nwjwychao\nwjx123456\nwjx324ww\nWJXIN231\nwjy123456\nwjy820620\nwjyrfylx\nwjywawbm\nwjywjywjy\nwjz123456\nwjzgr321\nwjzsq12s\nwjzzhtgp\nwk000000\nwk123456\nwk5619758\nwk78225522\nwk787878\nwkazukiren721\nwkbxldd12271616\nwkgMkjH623\nwkgMmjH623\nwkgMmjI623\nwkgMmjI633\nwkgNmjI633\nwkingsun\nwkj123456\nwkk0101029\nwknhhlq123\nwkopmh899659\nWKP1125929\nwkwkwkkk\nwky666777\nwl-751103\nwl.8203309\nwl123123\nwl123456789\nwl1314520\nwl13329869956\nwl19851219\nwl19880729\nwl276434123\nwl383123\nwl4223179\nwl57356729\nwl668355\nwl800716\nwl888888\nwl900503\nwlazxxqq\nwlb26617528\nwlc123456789\nwlcqxlx89\nwlei2300\nwlf123456\nwlf131366\nwlg592713\nwlgu24578ega\nwlh123456\nwlhMllI622\nwlhNllI622\nwlhNmlI622\nwliu5211314\nwlj123456\nwljc2696110\nwljqinqin5240\nwljshhdxx\nwlk20081103\nwll123456\nwllg52054513\nwlm31312626\nwlm7603168\nWln1986Dfl\nwlp3228110\nwlp3237460\nwlq123456\nwlq362432\nwlq_19851015\nwlr2713338\nwls123456\nwlshwlsh\nwltc8934\nwltg2010123\nwltg2010888\nwlwlwlwl\nwlx12345\nwlx123456\nwly123456\nwlysln8233880\nwlyx2010\nwlz1985220\nwlz5518971\nwm111111\nwm123123\nwm123456789\nwm19925201314\nwm520007\nwm5201314\nwm6108866016\nwm6911580\nwmdsjhjc\nwmdzgshy\nwmengf327\nwmhNmlI622\nwmhNmmJ622\nWMJ6336784566\nwml1985514\nwml200431\nwmm19871011\nwmnbnbfswan\nwmnellen\nwmshpynsn\nwmsyydf4\nwmw211297\nwmy981023\nwmylove8888\nwmz123456\nwn123123\nwn123456\nwn19791979\nwndjsj6078251\nwnnsj2888999\nwnoicjjyjf\nwntd781007\nwo000000\nwo111111\nwo112233\nwo121984\nwo123321\nWO12345678\nwo123654\nwo131131\nwo131421\nwo1314258\nwo1314aini\nwo13193602730\nwo19891211\nwo1ai2ni3\nwo258258\nwo26260008\nwo2ni1314\nWO2wojia\nwo2xiaona\nwo333333\nwo33333338\nwo3ai4ni3\nwo4183336\nwo4shaoni4shao\nwo4tiancai\nwo4xiaozi\nwo518518\nwo520520\nWO5AI2NI0\nwo5ai2ni1\nwo615615\nwo666666\nwo668899\nwo6ai27ni\nwo888888\nwo94aini\nwoai1234\nwoai15936301998\nwoai1983\nwoai1986\nwoai1987\nwoai1989\nwoai2006\nwoai2009\nwoai3jing\nwoai51766\nwoai5200\nwoai5566\nwoai5jia\nwoai88mama\nwoai88mm\nwoaiaiwoderen\nwoaiamei\nwoaianan\nwoaiangel\nwoaiapple\nwoaiba1984120816\nwoaibaba\nwoaibabamama1314\nwoaibaby\nwoaibaixue\nwoaibama\nwoaibama123\nwoaibama1314\nwoaibaobao1314\nwoaibaozi\nwoaibasiteng\nwoaibbmm\nwoaibeibei\nwoaibeida\nwoaibeijing\nwoaibeijing123\nWOaibenben\nwoaibibi\nwoaibinbin\nwoaibing\nwoaibingbing\nwoaibinghuo\nwoaibobo\nwoaicaicai\nwoaicenyao\nwoaichangge\nwoaichao\nwoaichen\nwoaichenchen\nwoaichenhj\nWOAICHENSHAN\nwoaichidongxi\nwoaichiyu\nwoaichouchou\nwoaichun\nwoaichunchun\nwoaicici\nwoaicoco\nwoaicong\nwoaicsdn\nwoaicyn2321865\nwoaiD508!@\nwoaidabao\nwoaidada\nwoaidahai\nwoaidaidai\nwoaidajia\nwoaidajiba\nwoaidali\nwoaidami\nwoaidamimi\nwoaidanmei\nwoaidapigu\nwoaidashu\nwoaidaxiang\nwoaidayu\nwoaidazhi\nwoaidejiushini\nwoaideni\nwoaiderenzaina\nwoaidiandian\nwoaidiannao\nwoaididi\nwoaiding\nwoaidingding\nwoaidingtie\nwoaidiudiu\nwoaidjhdjh\nwoaidong\nwoaidongdong\nwoaidongman\nwoaidoudou\nwoaiduan\nwoaidudu\nWOAIDUJUAN\nwoaiduoduo\nwoaidushu\nwoaiduxin\nwoaielva\nwoaieric\nwoaierzi\nwoaiFANFAN\nwoaifang\nwoaifangfang\nwoaifayu\nwoaifeier\nwoaifeiji\nwoaifeng\nwoaifengfeng\nwoaiff918k\nwoaifujia\nwoaifumu\nwoaifuxinbo\nwoaigaga\nwoaigaoqq\nwoaigege\nwoaigigi\nwoaigogo\nwoaigongda\nwoaigougou\nwoaiguagua\nwoaiguaiguai\nwoaiguangzhou\nwoaigufeng\nwoaiguoguo\nwoaiguozhen\nwoaihaiyan\nwoaihangeng\nwoaihanghang\nwoaihanhan\nWOAIHANLU\nwoaihaofen\nwoaihaohao\nwoaihebe\nwoaihehe\nwoaihide\nwoaihong\nwoaihouzi\nwoaihs99\nwoaihuaer\nwoaihuahua\nwoaihuan\nwoaihuang\nwoaihuanhuan\nwoaihuazi\nwoaihudie\nwoaihuge\nwoaihuhu\nwoaihuihui\nwoaihuiyun\nwoaihuli\nwoaiilovenba\nwoaijack\nwoaijane\nwoaijava\nwoaijayzl\nwoaijiaju\nwoaijiang\nwoaijianjian\nwoaijiao\nwoaijiaojiao\nwoaijiaqi\nwoaijiaren\nwoaijiaxiang\nwoaijiayi\nwoaijie1314\nwoaijiejie\nwoaijielun\nwoaijiji\nwoaijing1314\nwoaijingfen\nwoaijinjin\nwoaijipa\nwoaijiqimao\nwoaijojo\nwoaijolin\nwoaijuan\nwoaijuanjuan\nwoaijuanzi\nwoaijunjun\nwoaijuzi\nwoaikafei\nWoaikaikai\nwoaikaka\nwoaikangkang\nwoaikangta\nwoaikeke\nwoaikele\nwoaikelei\nwoaiketing\nwoaikikyo\nwoaikimi\nwoaikobe\nwoailafang\nwoailaji\nwoailala\nwoailang\nwoailanlan\nwoailanqiu\nwoailanse\nwoailaoba\nwoailaoda\nwoailaogongaiwo\nwoailaoma\nwoailaop\nwoailaopo1\nwoailaopo123\nwoailaoshu\nwoaileilei\nwoailele\nwoaili1314\nwoailian\nwoailiang\nwoailiangliang\nwoailianhua\nwoailidan\nwoailigang\nwoailihong\nwoailihua\nwoailihui\nwoailijia\nwoailijie\nwoailijin\nwoailijing\nwoailijuan\nwoailijun\nwoailike\nwoaililing\nwoailily\nwoailimei\nwoailiming\nwoailina\nwoailindi1982\nwoailiner\nwoailing1314\nwoailingege\nwoailinger\nwoailingling\nwoailiningning\nwoailinlin\nwoailinxinru\nwoailiping\nwoailiqing\nwoailisa\nwoailiudan\nwoailiudehua\nwoailiufen\nwoailiujia\nwoailiujie\nwoailiujing\nwoailiujun\nwoailiulei\nwoailiuli\nwoailiuqi\nwoailiuqian\nwoailiuwei\nwoailiuxu\nwoailiuyan\nwoailiuyang\nwoailiuyu\nwoailiuyue\nwoailiwei\nwoailixi\nwoailixia\nwoailixiao\nwoailixin\nwoailiyan\nwoailiyang\nwoailiying\nwoailiyu\nwoailiyuan\nwoailiyuchun\nwoailiyue\nwoailizhen\nwoailizi\nwoaill1314\nwoailong\nwoailongma\nwoailulu\nwoailulu1314\nwoailuntan\nwoailuo123\nwoailuobi\nwoaimailebuding\nwoaimama1\nwoaimama123\nwoaimama1314\nwoaimama520\nwoaimama521\nwoaimama88\nwoaimami\nwoaimanman\nwoaimaomao\nwoaimaomi\nwoaimaozhuxi\nwoaimayi\nwoaimei1314\nwoaimeimei\nwoaimeiqi\nwoaimeizi\nwoaimeng\nwoaimengmeng\nwoaimiao\nwoaimiaomiao\nwoaimilan\nwoaimimi\nwoaimin1314\nwoaiming\nwoaimingming\nwoaiminmin\nwoaimmbb\nwoaimoli\nwoaimomo\nwoaimoney\nwoaimonv\nwoainainai\nwoainanjing\nwoainankai\nwoainannan\nwoaini0000\nwoaini001\nwoaini007\nwoaini0123\nwoaini0927\nwoaini10\nWOAINI100\nwoaini10000\nwoaini101YAOLEI\nwoaini1020\nwoaini1125\nwoaini119\nwoaini125\nWOAINI1314521\nwoaini1314@\nwoaini134\nwoaini139\nwoaini14\nwoaini1413\nwoaini168\nwoaini18\nwoaini1908guomi\nwoaini1978\nwoaini1981\nwoaini1982\nWOAINI1983\nwoaini1984\nWOAINI1985\nwoaini19861128\nwoaini1990\nwoaini1999\nwoaini20\nwoaini2000\nwoaini2005\nwoaini2006\nwoaini2007\nWOaini2009\nWOAINI2010\nwoaini21\nwoaini22\nwoaini23\nwoaini299\nwoaini312\nwoaini33\nwoaini333\nwoaini421\nwoaini503\nwoaini5200\nwoaini521@\nwoaini527\nwoaini555\nwoaini654321\nwoaini66\nwoaini666\nwoaini71\nwoaini77\nwoaini777\nwoaini78\nWoaini80\nwoaini86\nwoaini880911\nwoaini8888\nwoaini921\nwoaini9999\nwoaini``1\nwoainia123\nwoainiai\nwoainiaini\nwoainiaiwo\nwoainiao\nwoainiba\nwoainibaba\nwoainibabamama\nwoainibaby\nwoainibao\nWOAINIBB\nwoainibin\nwoainibulaha\nwoainicai\nwoainicc\nwoainichao\nwoainichen\nwoainicm\nwoainicy\nwoainidaijing\nwoainidao\nwoainide\nwoainidearbook\nwoainidong\nwoainierzi\nwoainifan\nwoainifang\nwoainifei\nWOAINIFENG\nwoainiff\nwoainigege\nwoainiguo\nwoainiha\nwoainihaha\nwoainihan\nwoainihao\nwoainihehe\nwoainihh\nwoainihong\nwoainihua\nwoainijay\nwoainijian\nwoainijiao\nwoainijingjing\nwoainijj\nwoainikai\nwoainike\nwoainikk\nwoainila\nwoainilan\nwoainilanlan\nwoainilaop\nwoainile\nwoainilei\nwoainilele\nwoainilili\nwoainilin\nwoainilina\nwoainiliu\nwoainilj\nwoainill\nwoainilm\nwoainilong\nwoainilove\nwoainilp\nwoainilr\nwoainils\nwoainily\nwoainilz\nwoainima1\nwoainima?\nwoainime\nwoainimei\nwoainimeimei\nwoainimin\nwoainiming\nwoainimj\nwoainina\nwoaininan\nwoaininana\nwoaining\nwoainingning\nwoainini\nwoaininine\nwoainiok\nwoainioo\nwoainiping\nwoainipp\nwoainiqi\nwoainiqian\nwoainiqing\nwoainiqiqi\nwoainiqiu\nwoainisa\nwoainishan\nwoainishou\nwoainisj\nwoainisong\nwoainiss\nwoainitianya\nwoainitoo\nwoainiuniu\nwoainiweiwei\nwoainiwen\nwoainiwj\nwoainiwo\nwoainiwoai\nwoainiwodejia\nwoainiwq\nwoainiwu\nwoainiwutong\nwoainiww\nwoainiwy\nwoainixia\nwoainixian\nwoainixiao\nwoainixiaoxin\nwoainixiaoyu\nwoainixixi\nwoainixm\nwoainixu\nwoainixx\nwoainixxx\nwoainixy\nwoainiyangjia\nwoainiye\nwoainiyi\nwoainiyj\nwoainiyl\nwoainiyongyuan\nwoainiysys\nwoainiyuan\nwoainiyue\nwoainiyun\nwoainiyy\nwoainizdma\nwoainizhen\nwoainizhende\nwoainizhongguo\nwoainizhu\nwoainizhuzhu\nwoainizj\nwoainizjj\nwoainizl\nwoainizm\nwoainizp\nwoainizq\nwoainizx\nwoainizy\nwoainjnj\nwoainokia\nwoainver\nwoainvhai\nwoainvren\nwoaiorange\nwoaiowen\nwoaipangpang\nwoaipanpan\nwoaipaopao\nwoaipeipei\nwoaipeng\nwoaipengpeng\nwoaiping\nwoaipingping\nwoaipipi\nwoaiplmm\nwoaiprogram\nwoaipupu\nwoaiqi2222\nwoaiqian1314\nwoaiqiang\nwoaiqianqian\nwoaiqiji\nwoaiqing\nwoaiqingqing\nwoaiqinna\nwoaiqinqin\nwoaiqiqi\nwoaiqiuqiu\nwoaiqq1314\nwoaiquan\nwoaiqunan\nwoairain\nwoairanran\nwoairenli\nwoairenminbi\nwoairimnm\nwoairong\nwoairuirui\nwoaisammi\nwoaisansan\nwoaishan\nwoaishang\nwoaishangwang\nwoaishangwenjie\nwoaishanshan\nwoaishasha\nwoaisheia\nwoaishen\nwoaishenghuo\nwoaishenhua\nwoaishenqi\nwoaishifen\nWOAISHIJIE\nwoaishishi\nwoaishuang\nwoaishuia\nwoaishuine\nwoaisini\nwoaisinila\nwoaisisi\nwoaisiyuan\nwoaisong\nwoaisudan\nwoaisunshine\nwoaisunyan\nwoaisunyanzi\nwoaisusu\nWOAISUXING\nwoaita5201314\nwoaitang\nwoaitangtang\nWOAITAOTAO\nwoaitaozi\nwoaitian\nwoaitianqian\nwoaitianshi\nwoaitiantian\nwoaitianya\nwoaitianyu\nwoaitiaowu\nwoaitingfeng\nwoaitong\nwoaitongtong\nwoaitt1314\nwoaitudou\nwoaitutu\nwoaituzi\nwoaitvxq\nwoaitwins\nwoaivivi\nwoaivv312\nwoaiwang\nwoaiwangdan\nwoaiwangfei\nwoaiwangguo\nwoaiwanghui\nwoaiwangjian\nwoaiwangjing\nwoaiwangjuan\nwoaiwangli\nwoaiwangna\nwoaiwangwei\nWOAIWANGWOAIWANG\nwoaiwangxi\nWOAIWANGXIN\nwoaiwangxue\nwoaiwangyan\nwoaiwangyi\nwoaiwangying\nwoaiwangyu\nwoaiwanli\nwoaiwawa\nwoaiweichen\nwoaiweilai\nwoaiwen520\nwoaiwenli\nwoaiwenwen\nwoaiwenzi\nwoaiwo123\nwoaiwo1314\nwoaiwo525\nwoaiwoai\nwoaiwoaiwoai\nwoaiwoba\nwoaiwobama\nwoaiwode\nwoaiwodebabamama\nwoaiwodebaobei\nwoaiwodejiaren\nwoaiwodelaopo\nwoaiwodemama\nwoAIwoJIa.\nwoaiwojia...\nwoaiwojia0\nwoaiwojia1\nwoaiwojia110\nwoaiwojia1209\nwoaiwojia1234\nwoaiwojia1983\nwoaiwojia1984\nwoaiwojia1986\nwoaiwojia1987\nwoaiwojia1988\nwoaiwojia2008\nwoaiwojia2009\nwoaiwojia5\nwoaiwojia753\nwoaiwojia88\nwoaiwojia888\nwoaiwojia99\nwoaiwojia999\nwoaiwojiaa\nwoaiwojiaren\nwoaiwolaop\nwoaiwolp\nwoaiwoma\nwoaiwomama\nwoaiwoqi\nwoaiwoxifu\nwoaiwoziji520\nwoaiwp32\nwoaiwp42\nwoaiwukong\nwoaiwuli\nwoaiwuyan\nwoaiwuyu\nwoaixian\nwoaixiang\nwoaixiao\nwoaixiaobai\nwoaixiaobao\nwoaixiaocao\nwoaixiaohan\nWOAIXIAOHEI\nwoaixiaohong\nwoaixiaohui\nwoaixiaoji\nwoaixiaojie\nwoaixiaojing\nwoaixiaoli\nwoaixiaolong\nwoaixiaolu\nwoaixiaomao\nwoaixiaomei\nwoaixiaomin\nwoaixiaoming\nwoaixiaona\nwoaixiaoqi\nwoaixiaoqin\nwoaixiaowangshu\nwoaixiaowei\nwoaixiaoxia\nwoaixiaoxiao\nwoaixiaoxin\nWOAIXIAOXIONG\nwoaixiaoxue\nwoaixiaoya\nwoaixiaoyan\nwoaixiaoyao\nwoaixiaoyi\nwoaixiaozhu\nwoaixiatian\nwoaixiaxia\nwoaixiayutian\nwoaixiei\nwoaixiena\nwoaixigua\nwoaixing\nwoaixingxing\nwoaixinxin\nWOAIXINXIN1314\nwoaixinyu\nwoaixiong\nwoaixiuxiu\nwoaixixi\nwoaixizang\nWOAIXIZAO\nwoaixuan\nwoaixuanxuan\nwoaixueer\nwoaixuejun\nwoaixuewei\nwoaixuex\nwoaixuexi\nwoaixujing\nwoaixuyan\nwoaiyali\nwoaiyan1314\nwoaiyanan\nwoaiyaner\nwoaiyangguang\nwoaiyangli\nwoaiyangmi\nwoaiyangyi\nwoaiyanyan\nwoaiyanzi\nwoaiyaoer\nwoaiyaogun\nwoaiyaoyao\nwoaiyatou\nwoaiyaya\nwoaiyesu\nwoaiyeye\nwoaiyezi\nwoaiyidali\nwoaiyifan\nwoaiyifei\nwoaiyigeren\nwoaiyihe\nwoaiying1314\nwoaiyingying\nwoaiyingzi\nwoaiyinyue\nwoaiyiran\nwoaiyiyi\nwoaiyouxi\nwoaiyouyou\nwoaiyoyo\nwoaiyu11\nwoaiyu1314\nwoaiyuan\nwoaiyuanai\nwoaiyuer\nwoaiyueru\nwoaiyueyue\nWOAIYUFANG\nwoaiyujie\nwoaiyuyang\nwoaiyuyu\nwoaiyy1314\nwoaizaizai\nwoaizaizhong\nwoaizhang\nwoaizhanghao\nwoaizhanghe\nwoaizhangjie\nwoaizhanglei\nwoaizhangwei\nwoaizhangyan\nwoaizhangyang\nwoaizhangyi\nwoaizhangying\nwoaizhangyu\nwoaizhao87\nwoaizhaolin\nwoaizhaolu\nwoaizhaomin\nWOAIZHAOQI198411\nwoaizhaowei\nwoaizhen\nwoaizheng\nwoaizhengqi\nwoaizhenzhen\nwoaizhong\nwoaizhongguo\nWOAIZHONGHUA\nwoaizhou\nwoaizhoujielun\nwoaizhuer\nwoaizhutou\nwoaizhuzi\nwoaiziji1\nwoaiziji123\nwoaiziji1314\nwoaiziji520\nwoaiziji7689\nwoaiziyou\nwoaizizi\nwoaizj1314\nwoaizuguo\nwoaizuoai\nwoaizuqiu\nwobawoma\nwobengudu\nWoBenShanLiang\nwobianle\nwobisheng\nwobishini\nwobuaile\nwobuaini1314\nwobuaita\nwobuakeudi\nwobudong\nwobuguai\nwobugudan\nwobukuaile\nwobunanguo\nwobushi123\nwobushiliusha\nwobushini\nwobushiren\nwobushitianshi\nwobushiwo\nwobushizhu\nwobushuo\nwobuxiang\nwobuxiangshuo\nwobuxiangwo\nwobuxiaode\nwobuxihuanni\nwobuyaoai\nwobuzaiai\nwobuzaiaini\nwobuzaihu\nwobuzhidao1\nwobuzhidao123\nwocao5201314\nwocaocao\nwocaodenglei345\nwocaonidaye\nwocaonima1\nwocaonimab\nwocaotama\nwocaowocao\nwochaonima\nwocknibi\nwodanshen\nwode0794\nwode1234\nwode123456\nwode13523593069\nwode1919\nwode1919GHZX\nwode1981\nwode1987\nwode1988\nwode1989\nwode1999\nwode2003\nwode2006\nwode2007\nwode2008\nwode2009\nwode2010\nwode3721\nwodeai1314\nwodeai520\nwodeaiqing\nwodeairen8\nwodebaba\nwodebaobao\nwodebing\nwodeboke\nWODECSDN\nwodecsdnMIMA\nwodedadi\nwodedaxue\nwodedaxue521\nwodedianhua\nwodediannao\nwodedipan0923\nwodedongxi\nwodeerzi\nwodefendou\nwodefuqin\nwodegege\nwodeguaiguai\nwodegushi\nwodehaoma\nwodehaoyou\nwodejia521\nwodejiaoao\nwodejiaren\nwodejiaxiang\nwodejiazu1\nwodejiejie\nWODEKONGJIAN\nwodekuaile\nwodelaopo\nwodelixiang\nwodelt77\nwodeluntan\nwodemajia\nwodemama\nwodemaomao\nwodemaya\nwodemeimei\nwodemengxiang\nwodemima1\nwodemima123\nwodemima860125\nwodemima9\nwodemimashi\nwodemimawodemima\nwodemimi\nwodeming\nwodeminggo\nwodemingtian\nwodemingzishi\nwodemm8729380\nwodengni13\nwodeni1314\nwodenide\nwodenver\nwodenvhai\nwodenvren\nwodepengyou\nwodeqingren13\nwodeQQhao\nwodeqqmima\nwoderensheng\nwoderiji\nwodeshenghuo\nwodeshengri\nwodeshequ\nwodeshilong\nwodetaiyang\nwodetian\nwodetiana\nwodetiankong\nwodetianna\nwodetianshi\nwodetianxia\nwodetianya\nwodeTIANYAmima\nwodetianyashequ\nwodetongxue\nwodewang\nwodeweiyi\nwodewode\nwodexiaokeai\nwodexingfu\nwodexinmima\nwodexinqing\nwodeyanzi\nwodeyijia\nWODEYIQIE\nwodeyiqie951258\nwodeyouxi\nwodeyouxiang\nwodezhiai\nwodezhuzhu\nwodeziyou\nwodiaoai\nwodiaoni\nwodiaonima\nwodiaosi\nwodnlmdh\nwofengle\nwofocibei\nwogaimimale\nwogaizenmeban\nwogaoxing\nwogooo2009\nwohaiaini\nwohaoainia\nwohaofan\nwohaolei\nwohaoren\nwohaoshuai\nwohaoxiang\nwohaoxihuanni\nwohechuntian\nwohenaiJZ522\nwohenainia\nwohenbang\nwohenben\nwohendiao\nwohenfan\nwohengaoxing\nwohengni\nwohengudu\nwohenhao!\nwohenhuai\nWOHENI123\nwohenkaixin\nwohenkeai\nwohenliangzai\nwohenniu\nwohensha\nwohenshangxin\nwohenshuai\nwohenwoziji\nwohenwunai\nwohenxiangaita\nwohenxiangni\nwohenxingfu\nwohenyumen\nwohuainiande\nwohuiaini\nwohuichenggong\nwohuifacai\nwohuilaile\nwohuixingfu\nwohuixingfu1212\nwohuixingfude\nwohuiying\nwojia3612554\nWOJIADIANHUA\nwojiao123\nwojiaoac\nwojiaolbz007\nwojiaolong\nwojiaoshenme\nwojiaosunlin\nwojiaoxiangdan\nwojiawoai\nwojiehunle\nwojioushiwo\nwojiu1168\nwojiucao\nwojiugaosuni\nwojiushi\nwojiushi007\nwojiushini\nwojiushishen\nWOJIUSHIWO\nwojiushiwo123\nwojiushiwoziji\nwojiuswo\nwojiuxihuan\nwokaixin\nwokankan\nwokao106\nwokao110\nwokao123\nwokao517\nwokaokao\nwokaolinux\nwokaonizui\nwokaosini\nwokaowokao\nwoke12593\nwokuaile\nwolaile123\nwolailiao\nwolf0116\nwolf0811\nwolf1107\nwolf12966\nWolf1314\nwolf1982\nwolf1984\nwolf2000\nwolf2008\nwolf998877\nwolfking\nwolfmike\nwolfwolf\nwolianaile\nwoliuxia\nwollongong\nwolong111\nwoloveluji\nwoloveni\nWoLoveYou\nwomeimima\nwomeiqian\nwomeiyou\nwomeiyoumima\nwomen123\nWOmen1314\nwomendeai123\nwomendege\nwomendegushi\nwomendejia\nwomendejinian\nwomendouyiyang\nwomenhao\nwomenjiehunba\nwomenshi\nwomenshuohaode\nwomenyaoxingfu\nwomenzaiyiqi\nwomenzhijian\nwonanguo\nwonderful123\nwondering\nwonengxing\nwongfaye\nwongjing\nwongwong\nwongwong81\nwongyon0363\nwoniaoni\nwonihao789\nwoo2883795\nwood076214\nwood123456\nwood892740\nwooddoor85\nwoodenenly\nwoodfire\nwoodfish\nwoodhead\nwoodpecker\nwoods0000001\nwoodwood\nwoohyuk35\nwopashui\nwopianbuai\nword3sys\nWORDEXCEL\nworidaohaode\nworinibaba\nworinidaye\nworinima1\nworinimab\nworinimabi\nworinimadebi\nworinizui\nworisini\nworiwori\nwork123456\nworkgroup\nworkharder\nworkroom\nworkshop\nWORKWORK\nworld028\nworld123\nworldcup\nworldpeace\nworldwar\nworldworld\nworm830918\nwornimama\nworuidaddd\nwoshangxin\nwoshengri\nwoshi.beyond\nwoshi001\nwoshi008\nwoshi088\nwoshi111\nwoshi119\nwoshi1234\nwoshi12345\nWOSHI123456\nwoshi168\nwoshi188\nwoshi1983\nwoshi1984\nwoshi1985\nwoshi1986\nwoshi1987\nwoshi1988\nwoshi1989\nwoshi1991\nwoshi2008\nwoshi22hao\nwoshi250\nwoshi2hai\nwoshi520\nwoshi521\nwoshi628\nwoshi777\nwoshi789\nwoshi888\nwoshi911\nwoshi9527\nwoshiabo\nwoshiabu\nwoshiada\nwoshiade\nwoshiafei\nwoshiaiai\nwoshiaim\nwoshiaini\nwoshiainid\nwoshiajun\nwoshialong\nwoshiamou\nwoshiamu\nwoshiamy\nwoshianan\nwoshianbo\nwoshiandy\nwoshiangel\nwoshiapple\nwoshiaqiang\nwoshibaba\nwoshibaichi\nwoshibanzhu\nwoshibao\nwoshibaobao\nwoshibaobei\nwoshibashen@21cn\nwoshibebe\nwoshibeibei\nwoshibenben\nwoshibihei\nwoshibin\nwoshibing\nwoshibobo\nwoshicai\nwoshicainiao\nwoshicao\nwoshiceo\nwoshichaoren\nwoshichen\nwoshichenchen\nwoshicheng\nwoshichenjian\nwoshichenxi\nwoshichris\nwoshichuanqi\nwoshicuijiao\nwoshicxy\nwoshidabendan\nwoshidage\nwoshidahai\nwoshidahaoren\nwoshidahuaidan\nwoshidamao\nwoshidameinv\nwoshidami\nwoshidan\nwoshidandan\nwoshidasha\nwoshidashuaige\nwoshidatiancai\nwoshidatou\nwoshidaxia\nwoshidaye\nwoshidayu\nwoshidi1\nwoshidie\nwoshidiyi\nwoshidong\nwoshidoudou\nwoshidouzi\nwoshidpc\nwoshidudu\nwoshiduoduo\nwoshidyn\nwoshiemo\nwoshifanfan\nwoshifei\nwoshifeida\nwoshifeifei\nwoshifeng\nwoshifengzi\nwoshigao\nwoshigay\nwoshigege\nwoshigehaoren\nwoshigod\nwoshigongzhu\nwoshigou\nwoshigui\nwoshiguo\nwoshiguoguo\nwoshihaha\nwoshihai\nwoshihanlei\nwoshihao\nwoshihaode\nwoshihaohaizi\nwoshihaoren123\nwoshihaorena\nwoshihaozi\nwoshiheike\nwoshiheizi\nwoshihong\nwoshihouzi\nwoshihua\nwoshihuahua\nwoshihuaidan\nwoshihuang\nwoshihubo\nwoshihuhu\nwoshihui\nwoshihuihui\nwoshihujian\nwoshihuli\nwoshihundan\nwoshihuzi\nwoshijacob\nwoshijay\nwoshijia\nwoshijiajia\nwoshijian\nwoshijiang\nwoshijianren\nwoshijie\nwoshijiejie\nwoshijiji\nwoshijin\nwoshijinbo\nwoshijing\nwoshijingcha\nwoshijingjing\nwoshijiyunbo\nwoshijog\nwoshijuju\nwoshijun\nwoshijune\nwoshijunren\nwoshijushen2009\nwoshikaikai\nwoshikaikai521\nwoshikaiti\nwoshikaka\nwoshikeke\nwoshiking\nwoshikonglong\nwoshilaji\nwoshilala\nwoshilan\nwoshilang\nwoshilanlan\nwoshilaohu\nwoshilaoma\nwoshilaoshi\nWOSHILAOSHU\nwoshilaotang\nwoshilei\nwoshileilei\nwoshilele\nwoshileo\nwoshiles\nwoshiliang\nwoshilibin\nwoshilibo\nwoshilidan\nwoshilifei\nwoshilihao\nwoshilihong\nwoshilihui\nwoshilijia\nwoshilijian\nwoshilijie\nwoshilijin\nwoshilijing\nwoshilijun\nwoSHIliKAI\nwoshilike\nwoshililei\nwoshilili\nwoshililin\nwoshilimin\nwoshilin\nwoshilina\nwoshilinan\nwoshiling\nwoshilining\nwoshilinlin\nwoshilinruo\nwoshiliping\nwoshiliqi\nwoshiliqian\nwoshiliqin\nwoshiliran\nwoshilirui\nwoshiliu\nwoshiliubo\nwoshiliuhui\nwoshiliulei\nwoshiliuli\nwoshiliumang\nwoshiliuna\nwoshiliuqi\nwoshiliuwei\nwoshiliuxin\nwoshiliuyang\nwoshiliuying\nwoshiliuying123\nwoshiliuyong\nwoshiliuyu\nwoshiliwei\nWOSHILIXIN\nwoshiliyan\nwoshiliyi\nwoshiliying\nwoshilizhi\nwoshiljl\nwoshilong\nWOSHILULU\nwoshiluo\nwoshilvbu\nwoshilxy\nwoshilyy\nwoshimaimai\nwoshimajia\nwoshimali\nwoshimalin\nwoshimama\nwoshimao\nwoshimaomao\nwoshimaomi\nwoshimei\nwoshimeimei\nwoshimeizi\nwoshimeng\nwoshimiao\nwoshimima\nwoshimimi\nwoshimin\nwoshiming\nwoshimogui\nwoshimomo\nwoshinage\nwoshinana\nwoshinande\nwoshinannan\nwoshinanren\nwoshini11\nwoshini123\nwoshinia\nwoshiniao\nwoshiniba1\nwoshiniba123\nwoshinibb\nwoshinideshui\nwoshinie\nwoshinige\nwoshinigege\nwoshinigg\nwoshinijie\nwoshiningning\nwoshinini\nwoshiniu\nwoshiniuniu\nwoshino.1\nwoshino1\nwoshinvhai\nwoshinvren\nwoshinvsheng\nwoshipanpan\nwoshipeng\nwoshipeng009\nWOSHIPIANZI\nwoshipiao\nwoshipipi\nwoshiqian\nwoshiqiang\nwoshiqianqian\nwoshiqiao\nwoshiqiding\nwoshiqie\nwoshiqinfu\nwoshiqing\nwoshiqiqi\nwoshiqiu\nwoshiqiuqiu\nwoshirain\nwoshiren1\nwoshirenyanyana\nwoshirxp\nwoshisanba\nwoshiselang\nwoshiseo\nwoshisha\nwoshishagua\nwoshishangdi\nwoshishanli\nwoshishanshan\nwoshishasha\nwoshishazi\nwoshishei123\nwoshisheia\nwoshishen1\nwoshishena\nwoshisheng\nwoshishenxian\nwoshishi\nwoshishili\nwoshishu\nwoshishuai\nwoshishuei\nwoshishui0\nwoshishui1\nWOSHIshui1225\nwoshishui2\nwoshishui520\nwoshishui?\nwoshishuia\nwoshishuine\nwoshishuiya\nwoshishushu\nwoshisisi\nwoshisitu\nwoshisiyu\nwoshisky\nwoshisong\nwoshisui\nwoshisui89\nwoshisun\nwoshisunlin\nwoshisusu\nwoshitaiyang\nwoshitang\nwoshitao\nwoshitaotao\nwoshitata\nwoshitian\nwoshitiancai1\nwoshitiancai123\nwoshitianshi\nwoshitiantian\nwoshitianya\nwoshiting\nwoshitong\nwoshitufei\nwoshitutu\nwoshituzi\nwoshiwan\nwoshiwang\nwoshiwangjing\nwoshiwangli\nWOSHIWANGQI\nwoshiwangyan\nwoshiwangyang\nwoshiwangyi\nwoshiwangyu\nwoshiwangzhen\nwoshiwawa\nwoshiwei\nwoshiweiwei\nwoshiweiyi\nwoshiwen\nwoshiwenwen\nWOSHIWENZI\nwoshiwho\nwoshiwo1\nwoshiwo11\nwoshiwo1981\nwoshiwo84718\nwoshiwoa\nwoshiwod1qi\nwoshiwode\nwoshiwodi\nwoshiwoniu\nwoshiwoshi\nwoshiwoziji\nwoshiwudan\nwoshiwudi\nwoshiwuhao\nwoshiwujing\nwoshiwujun\nwoshiwusi\nwoshiwuwei\nwoshiwyt\nwoshixia\nwoshixiang\nwoshixiao\nwoshixiaobai\nwoshixiaobao\nwoshixiaofeng\nwoshixiaogou\nwoshixiaohua\nwoshixiaoli\nwoshixiaolu\nwoshixiaoma\nwoshixiaomao\nwoshixiaona\nwoshixiaoqi\nwoshixiaoxiao\nwoshixiaoxin\nwoshixiaoyao\nwoshixiaoyu\nwoshixiaozhao\nwoshixiaozhu\nwoshixin\nwoshixingfude\nwoshixingmu2\nwoshixingyuner\nwoshixinxin\nwoshixinyu\nwoshixiong\nwoshixiongyin\nwoshixiuxiu\nwoshixixi\nwoshixubo\nwoshixue\nwoshixuebai\nwoshixuehu\nwoshixuesheng\nwoshixujie\nwoshixuwei\nwoshixuwen\nwoshixuxu\nwoshixuyi\nwoshixwty\nwoshixxx3x\nwoshiyan\nwoshiyanchao\nwoshiyang\nwoshiyang1\nwoshiyangui\nwoshiyangyang\nwoshiyanyan\nwoshiyanzi\nwoshiyao\nwoshiyaojing\nwoshiyaoyao\nwoshiyaya\nwoshiyezi\nwoshiyi88gebing\nwoshiyian21698\nwoshiyige\nwoshiyigebing\nwoshiyigecunzai\nwoshiyigehaoren\nwoshiyigeren\nwoshiyin\nwoshiyinbo\nwoshiying\nwoshiyingying\nwoshiyingZI\nwoshiyipianyun\nwoshiyipilang\nwoshiyiqiong\nwoshiyitiaoyu\nwoshiyiyi\nwoshiyizhimao\nwoshiyizhizhu\nwoshiyoujie\nwoshiyoyo\nwoshiyua\nwoshiyuan\nwoshiyuanyuan\nwoshiyue\nwoshiyuer\nwoshiyujuan\nwoshiyukai\nwoshiyulei\nwoshiyumi\nwoshiyun\nwoshiyuyan\nwoshiyuyang\nwoshiyuyu\nwoshizhang\nwoshizhang123\nwoshiZHANGHAO\nwoshizhangli\nwoshizhangtao\nwoshizhangwei\nwoshizhangxin\nwoshizhangyan\nwoshizhaowei\nwoshizhaoya\nwoshizhen\nwoshizheng\nwoshizhenzhen\nwoshizhong\nwoshizhongguoren\nwoshizhou\nwoshizhouming\nwoshizhu1\nwoshizhu123\nwoshizhu88\nwoshizhu89\nwoshizhuA\nwoshizhubajie\nWOSHIZHUMA\nwoshizhuren\nwoshizhutou\nwoshizhuzhu\nwoshizhy\nwoshizizi\nwoshizuibangde\nwoshizuihaode\nwoshizzy\nwoshuowoaini\nwosiguwozai\nwosnibaba\nwosunlei\nWOTAOYANNI\nwoto123456\nwove691used629\nwow123456\nwowangjile\nwowangle123\nwowanglemima\nwowchina\nwoweixianshou\nwoweiziji\nwowgold789\nwowo123456\nwowo9999\nwowowo123\nwowowowowo\nwoxiangfei\nwoxianghuijia\nwoxiangjia\nwoxiangjiehun\nwoxiangku\nwoxiangni123\nwoxiangnia\nwoxiangnil\nwoxiangsi\nwoxiangWO\nwoxiangwoaini\nwoxiangwoshihai\nwoxiangxin\nwoxiangyougejia\nwoxiaode\nwoxihuan123\nwoxihuan2\nwoxihuanjimu\nwoxihuanjojo\nwoxihuanta\nWOXINFEIXIANG\nwoxinfeiyang\nwoxingfu\nwoxingwosu\nwoxinyijiu\nwoxinyiran\nwoxinyisi\nWOXINYONGHENG\nwoyao123\nwoyao168\nwoyao516\nwoyao888\nwoyaoaini\nwoyaoaiziji\nwoyaochenggong\nwoyaochifan\nwoyaochuguo\nwoyaodeai\nwoyaodexingfu\nwoyaoduli\nwoyaofacai\nwoyaofada\nwoyaofei\nwoyaofeixiang\nwoyaofendou\nwoyaohappy\nwoyaohuijia\nwoyaojianfei\nwoyaojianqiang\nwoyaojiayou\nwoyaokaixin\nwoyaokan\nwoyaokaoyan\nWOYAOKUAILE\nwoyaolikai\nWOYAOMIMA\nwoyaonuli\nwoyaoqian\nwoyaoqumeiguo\nwoyaoshou\nwoyaoshuo\nwoyaosinii\nwoyaowan\nwoyaoxiazai\nwoyaoxuexi\nwoyaoying\nwoyaozhaodaoni\nWOYAOZHUANQIAN\nwoyaoziyou\nwoyaozuoai\nwoyidingxing\nwoyigeren\nwoyiranaini\nwoyiyudeqian\nwoyo123456\nwoyuanyi\nWOYYAINI\nwoyyaita\nwozai123\nwozaideng1\nwozaidengni\nwozaijia\nwozainali\nwozaishanghai\nwozaitianya\nwozaizheli\nwozeinima\nwozhaixian\nwozhenshanmei\nwozhiailanshan\nwozhiaiwo\nwozhiaiwoziji\nwozhiaiziji\nwoziji123\nwozijide\nwozijiwoziji\nwozuiaini\nwozuibang\nwozuidiao\nwozuiguai\nwozuihao\nwozuikeai\nwozuimei\nwozuiniu\nwozuiniubi\nwozuiqiang\nwozuishuai\nwozuixingfu\nwozuizhuai\nwozuozhu_1\nwp106718\nwp123456\nwp197933\nwp5681988\nwp5965198\nwp820322\nwpf-210343\nwphzz111222333\nwpl123456\nwpl520wpl\nwplyj1226\nwpqAfc308Xecon\nwpx19730604\nWpxue1278596259\nwq111111\nwq112233\nwq123123\nwq123321\nwq12341234\nwq147258\nwq19850330\nwq19870903\nwq198764\nwq211211\nwq3255757wq\nwq520520\nwq655164\nwq750411\nwq850524\nwq888888\nwqcxs520\nwqdfiigo\nwqepqkcg\nwqfxxxxxx\nwQI3P8aqkh\nwQI3P8bqkh\nwQI3P9bqkh\nwQI4P9bqkh\nwqivbkcg\nwqjqrepw\nwqjqrjbep\nwqjqrny159753\nwqklovejj\nwql-19871126\nwqlwjj1314\nwqqianmo\nwqr377030\nwqs123456\nwqsk2001\nwqvbkcgzhoufeng\nwqvbwqvb\nwqw87317\nwqwqsn188\nwqx547520\nwqy123456\nwqy3241727\nwr123123\nwr123456\nwr19820309\nwr219q53\nwr3453539\nwr5201314\nwrdirllh\nwreath116\nwrg123456\nwRJ4P9brkh\nwrl369963\nwrl82475\nwrlhydpy\nwrmfw1024\nwrnmnmrw\nwrnmwrnm\nwrp1982222\nwrrhh717\nwrti123456\nwrx114589\nwrylym9374\nwrz801007\nws015566\nws030102\nws0341ws\nws07301011\nws123123\nws12319841128\nws197600\nws19790418\nws19841022\nws1987613\nws372901\nws4444ws\nws456123\nws459dns\nws5201314\nws5211314\nws57587525\nws790111\nws810108ii\nws8505389\nwsad1234\nwsad123456\nwsad8246\nwsaduijk\nwsbttbsw\nwsCC1520Ajy9\nwscgq521\nwschongchong\nwsdba991\nwsdfmmhljcj_964\nwsdmnv87\nwsdmv19870827\nwsdokjcn\nwsdxp610927\nwsf05596746063\nwsf12345\nwsf123456\nwsg198686\nwsght@126.com\nwsgszjgd\nwsgxl001\nwsh123456\nwsh2321931\nwshchjdm\nwshilong\nwshishen\nwshishui\nwshishui2\nwshywrnm\nwshz974998\nwsj123456\nwsj198244\nwsj19880829\nwsj3799024\nwsjmksnn\nwsjs110110\nwsjwsjwsj\nwsk3697788\nwsk6753804\nwskay7316317\nwskdhdufw\nwskdqiqpl\nwskfufsfi\nwskgywxf918\nwskihwfn\nwskldxjl\nwsklwskl\nwskoqmgu\nwskwfx840223\nwsky0o0o0o\nwsl123\nMySecretKey12345\nSuperSecureKey01\nPasswordForJWT12\nJwtSecretKey5678\nTopSecretKey1234\nJwtAuthKey2022\nJwtEncryptionKey\nSecureHmacKey123\nTheBestSecretKey\nJwtPrivateKey001\nJwtHmacSecret123\nStrongKeyForJwt\nJwtTokenKey2023\nJwtSignKey12345\nSecretHmacKey2022\nJwtSignatureKey1\nKeyForJsonWebTkn\nSecretKeyJwtAuth\nJwtVerificationK\nHmacShaKeyForJwt\nJwtSigningKey001\nSecretJwtKey2023\nJwtKeyForSigning\nJwtSecretForAuth\nWebTokenKey1234\nJwtAuthSecret123\nJwtKeyForAuth001\nSecretKeyForJwt1\nJsonWebTokenKey\nJwtAccessKey123\nJwtSecretForAPI\nSecureJwtKey2022\nJwtSecurityKey01\nJwtPrivateKey123\nJwtSecretKey2023\nSecretTokenKey01\nJwtSigningSecret\nJwtHmacKeyForApi\nJwtKeyForApiAuth\nJwtKey12345Secure\nJwtAuthKeyForAPI\nSecureJwtKey1234\nJwtAuthSecretKey\nJwtKeyForToken01\nJwtSecretKeyForApi\nJwtTokenSignKey\nJwtApiSecretKey1\nJwtKeyForSecurity\nJwtKeyForAuth123\nSecretJwtKey1234\nJwtTokenAuthKey\nSecretJwtKey2022\nJwtApiKey12345\nJwtApiSecret1234\nJwtSecretKey2022\nJwtSecurityKey123\nJwtAuthSecret2023\nJwtKeyForToken12\nJwtKeyForSign123\nSecretJwtAuthKey\nJwtSecretKeyAPI\nJwtTokenKey12345\nJwtSecretKey001\nJwtAuthKey12345\nJwtKeyForApi2022\nJwtApiKeyForAuth\nJwtSignKey2023\nJwtKeyForApi123\nJwtTokenKey2022\nJwtSecretKey123\nJwtAuthKeySecure\nJwtKey12345Auth\nJwtSecretKeyForJWT\nJwtApiSecretKey01\nJwtKeyForAuthApi\nJwtKey123Secure\nJwtSecretApiAuth\nJwtAuthSignKey01\nJwtSecretKey01\nJwtAuthKey1234\nJwtKeyForTokens\nJwtApiAuthKey01\nJwtSecretSignKey\nJwtKeyForAuth01\nJwtSignKey1234\nJwtKeyForApiSec\nJwtSecretKeyAPI1\nJwtApiAuthKey123\nJwtSecureKey0001\nJwtSecretKey0002\nJwtEncryption0003\nJwtAuthKey0004\nJwtAccessKey0005\nJwtPasscode0006\nJwtProtection0007\nJwtSafeKey0008\nJwtLockCode0009\nJwtMasterKey0010\nJwtCryptoKey0011\nJwtSecretCode0012\nJwtHiddenKey0013\nJwtSecurityKey0014\nJwtPassphrase0015\nJwtPrivateKey0016\nJwtPublicKey0017\nJwtAuthenticator0018\nJwtValidatorKey0019\nJwtVerification0020\nJwtSigningKey0021\nJwtCipherKey0022\nJwtTokenKey0023\nJwtAuthCode0024\nJwtSafetyKey0025\nJwtPassKey0026\nJwtUnlockKey0027\nJwtPasswordKey0028\nJwtGuardKey0029\nJwtStorageKey0030 ...\nJwtSecurityToken0970\nJwtSafetyToken0971\nJwtPassToken0972\nJwtUnlockToken0973\nJwtPasswordToken0974\nJwtGuardToken0975\nJwtStorageToken0976\nJwtControlToken0977\nJwtProtectionToken0978\nJwtTransferToken0979\nJwtConnectionToken0980\nJwtSessionToken0981\nqfmcPNWGlGq2H2yKGDKnC6tpdbQw0vwjMjVJPW1a0ZO2LJKZwNcVY71FcQE4MyTcQQXMUcS2D2UvSJz3eYGgL1KWmJmPqcP2brrow93qpernCRApdG2DkFE8\ncertRSA\nclient_secret_basic\nclient_secret\nclient_secret_post\ndjango_secret\nprivate_key_jwt\n!null\n!=null\nnil\nThe client secret key\ninvalid-secretabc-secret\nOriginal secret string\na secret string\nmystery\nhdhd0244k9j7ao03\ncode-secret\nshhhhhh\npriv\n./compute_secret\ncompute_secret\nfoo\nHmacSHA256\ntoo many secrets\nSuperSecret$!\ngetSecretKey()\nHS256\nMy$ecretK3y\n9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60\n4ccd089b28ff96da9db6c346ec114e0f5b8a319f35aba624da8cf6ed4fb8a6fb\nalice and bob's secret\nsymmetric key\nthis is 16 bytes\nkeep it secret! Keep it safe!\nthis is the secret\notherSecret\nfoo-de-fafa\nSecret key. You can use `mix guardian.gen.secret` to get one\nThisIsTheSecret\nitsa16bytesecret\nterces\nwhats up yall\nyour-own-jwt-secret\nsuper_fancy_secret\nHS$hashBits\nfirst\nSuper Secret Key\nSo Secret! 🔥🌵\nkkey\nYoUR sUpEr S3krEt 1337 HMAC kEy HeRE\nunsafe_secret\nmy-very-secret\nsecret!\nsupersafe\nmy_very_long_and_safe_secret_key\nMySuperSecretEncryptionKey\nsecret|$ecRet\n$ecRet\n$ecretKey\nMIGTAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBHkwdwIBAQQgofYVrV6I5TvcM1Gc\\n\nMIGTAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBHkwdwIBAQQgofYVrV6I5TvcM1Gc\n?`wdc6g2wUp8NpeIm9__=]CO9(LVe\\xwx7yt\nChooseASentenceAndAddNumbers\n64X1Isp6QuPjyzdBKVI3xH0+tLYc02jaop2URrolenza31OI\nXPMQwiRS6aE8pHeUyVDotWCI92F50Ynu\nKb24t0LDVPoen8jmGXBWdCJTUapSqz1s\nreSeguroxD\n324ABC\nminhachave\nCLAV3Sup3rS3cr3t4\nMTIzNDU2NzgxMjM0NTY3ODEyMzQ1Njc4MTIzNDU2Nzg=\ne8b39d21993342afe1335d339\nufc92ufn0nw0n923c\nXXXX101\noluwafemi-has-created-this-long-and-secure-secret-for-notify-app\nfe46d037d0832d49a79810d1b440cd62bc0edb194c32c4b41f8bbf8051791e1a\nGPF*9%PE64$euSd?\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\nDon't tell anybody and don't check in in source control\nThi$-Is-@-$eCrEt-W0Rd\nsugarcanepoundingmilkshake\nlalocuranuncatuvomaestro\ncardsForHumanityIsAwesomeAndYouNot!\nbe526d3ccf221731b831fc78974cb2f6\n0123456789ABCDEF0123456789ABCDEF\nRaqO3qLPISCU5ZQiYX8LGFjs3f0QH94v+nBlpuuWGxDEtLkvgYJTY5gH5wiz/axUtTm2rZUothj42VVA4PzzPg==s\ncc24ab2e09f83748bb0e05498da0e9a8f45ab94881ae60749dfe5d3cf59e4897\n5A7234753778214125442A472D4A614E645267556B58703273357638792F423F4528482B4D6250655368566D597133743677397A24432646294A404E63526654\n2A462D4A614E645267556B58703273357638782F413F4428472B4B6250655368\nVfhM0XDqDzmobsu90rvnrxTd55Tk5nOA+oyQnTu0AsZBR3PP4tK5kqY12j/GB9HC2jFJQeqjO15sJsqGxAjCSw==\nYlhsemRYQXpjbk16WTNJemRHTXdaRE5tTUhKcWQzUT0=\niDqcWxAE8Tz4j0qVBj7Riu6VtjEa0EdFeFe\nc4acb350a779eb0bef442e50a9aaaba1f41610604ec4016ab1fd254a584f3ca3\nQRNsyqvEm01Ir7qh4psea8UNqApsJD\nthe-final-accord\nLocalTestKey\n3b62c09d7f076a1a0f108c0f74c65dc766d28e6328f9ccf51045414b57cacf00\na1d99c8b-91b6-47b2-8f3c-aa7d9a9ad20f\nShivamwilllove@69$\nrandomstringthatissolongandpowerfulthatnoonecanguess\nplace your jwt secret here\npmsRHuOihHkFQzMo1m\nnny0beeOdyFyf9COHmw5\nenglishstudysecretkey!@#\n9ec57c275a5cf84700f78ad91fc19e09ff85c42923d4e5e258930fea9c197b5da5500679e7d488eab2fb3ae1c8a3dce48fa9739d8bfcf90260d98eb5b21ccb68\nq3t6w9z$C&F)J@NcQfTjWnZr4u7x!A%D*G-KaPdSgUkXp2s5v8y/B?E(H+MbQeTh\n\"&{cQq_9Z\"\nnot-secret-development-only\n129a2ce0def84ef1eea78260c08c639f137a3d89987add27e76615c4bfb7353e8d76bf6a872350901d35cc71f23138246748fe52b2e6bfcfb50119152756b84b\nm4L65xpHaRavfc36c+vh26pdS6A=\nbc6ff37fdaf41b9131046620d482a5af\nlms-secret\n85c2f16af43e3f710301a69b497ea7bfdbc2639cc3af3b3e22257f7e7e56c161\na93a2b758a0e4784b6bfa0a202f97d6ccdbbed6e06f11904f8a2ea2d2b6a8d7e\n0369124a8a120faea7f6d5d8db7ad709ac409ea386306a880b6adb3cbdb2d58d\n6ce00f4a95b1fa962000e64b918004d985f6445c66af0c1965c2b6932f5d2d98\npahzc4nXz1evgskPW61ptRSPTE6k3j0boVL0ASK057eYUtj7R3L4O00qJLM0BRaX\n4db9e983c2027409abf11ae5e0e996cf444d5edaada20041a9c17034e9486f62\n@awesomeconf-jwt-secret\nFREQBOT_JWT_SECRET\n!ChangeThisMercureHubJWTSecretKey!\njs2onsecrete@dsd1$$$@Dsda1dD3Vsaso###\n7c3b6dfaba5d90c481532b79e4a5e2629ae64d5a0cb4b1027d16278675b972ae\n2324eb55c97423af2b3f0ba64135b6703b9419a948c52ec83b58e2ea52cac589\n493aa5a699f20dfd87f39a8c23174266105ba4eb3dd4846620303ca0e690654f\n36f745e2b8be7ee8dc990e03df51b61bd673cd6eb08008773985c9ba6e5a3c3a\nc38bf6b1032754be6f096e30fd220e4d72de9c1811a57ba92804ecb4cbb03e44\n73a5d418ef03ca2e646fa0ae15a391e7fe0e53f29ffb4cfaace9d7aa4d34d6a5\ne6026fe22d33eda44376cb2ad3b976e20ae1d626c8db09727d0dfbedbec88f90\nawesomekey0ac342809de37f\n1c7c77adc68a1cdbee7f3072cb5f03409fe0b3abee953d84912ee8b0862fe080\nRandomSeed\njt+OVWY6WqKJXw3xF5qOxN5L5/f4u2jlIlCQgWS3E4w=\n6866a51d820a7579e44365b3fca11f19df932e6b32c4ae87222d985a4dd5a67c\n%ONLYOFFICE_SECRET%\nSSO_JWT_SECRET\ngeneral-server-assistant\n$2a$10$zMv2skn0DWEfsZGG91rC/O\nNodeJSIsCool\na49fc400c72f4ee0387f75efa16fb1c414225070a17f68d0d4fbfa591aab0ac0\naqnzr0pD2c0yv1o*0{C6!99^aQ*1fk<4|*][4Jh2X*jK4)N2sXIY8Wxj/1YWGr>\nFORMIO_JWT_SECRET\ngithub-profile-chart\nsuperTESTsecret\n8k8zvx2krrrh7qcsqnsn73e5bvfesupy3b75\ncollabisawesome\nkingsland\nariefyusron\na_jwt_secret_such_as_a_guid\n__AREA_JWT_SECRET_VALUE__\nMY_JWT_SECRET_VALUE\nbuitansang\nverySecretSecret\nsupersecretconstantthatyoucannotbreak\ndummy_jwt_secret\nFaZaa4KeeZoo2ahgoh2uenahd3Uta4Ei\nY3JIG4vxT22wn9cq\ngood_luck_have_fun\nT3Fad68htrGs89hsAS\nS3cr3T\nee0213800871a08b9bde05a9107e380a3693345dec9c9b20c448d9c07cd182c7\n6m1RH@cO4XW7F4Z\nwa4k3r\nseriedad\nc34f4eb6f949afdb26cb5239c80bf688\np8e-EIRF6kY6EHLBSdw2b-pLUWKodDqJqSz3\n5Dck4izVEXsP52AOcVxaFUsTzA8uwUiP\nsdfaswerwrwerwerwer\nQH9TH244T2H9TH9HJWAOIETWIOT28T8H209T2EW\nkoa_react_secret\nruoyi_rust_vue3\nabs_admin\nJWT-ARY-STARK\nc71336cfb4c32c0266ba636cf449e71e64e2c3cfe01728182cf5c3ddb33e357b\n%^DSFSD*&\nbLp@bi!oqo-2U+hoTRUG\nemqxsecret\nasjhczxiucipoiopiqm2376\nwPB1mQ6ADZrc0ouxMCYJfiBbMC14IAV0\nlzc_jwt_secret\ncodelieche\nai*))!@wlamrhnsdk$%*@u~ksdu34id^\n@java110_JWT\nucb-admin-chris-950602\nasdcgajkl1234567890\nwebsite_csrf_filter12111111111111111111111111111111111\njiamimiwen\nfengyuan201906190852\nMDk4ZjZiY2Q0NjIxZDM3M2NhZGU0ZTgzMjYyN2I0ZjY=\nf356cdce935c42328ad2001d7e9552a3\ncXdlcmFzZGZ6eGN2\nLessIsMore\nhulqFrame\nSJTUSE2021\nAngular5d50e0283ccf@#dfg/1234asdfjl;asdjf\nd56b4eff15bdea0ca46d8e5312bde24a\nlyanna\nT2BYL6#]zc>Byuzu\n5g1yk7pD9q3YL0iBEuUlPwOiWLj3I5tK+/rhHm+jgdE=\noqpdwyffgxncqamwlyebkaifyazvqgso\nWDpojmXTH4ZPl3N2khUPPcAezLLpc8Mm\nnm78a7s8f9d7s8f8d9s09saf7d89saf78\n7kNCc9LwBWbkSctsCq2NEGzzTTNcXCf0FPxDlHJmBcJpRUIYDPn2EgmsdDzXNBnS\nyour_jwt_secret_that_is_at_least_32_symbols_long\nAC59075B964B0715\nJwt3ecRETKEY9837\nmy_jwt_secret\nN#xTe4>IGSWfH#M&MYXxI~#w9yj@X8X/g8-N{;n)5D>kFh~AaW\nc3VwZXJzZWtyaXQ=\nMTAxNTkwMTg1Mw==\nk2ya2iTNRdlsixVuTi00\nZTQyZDhkZDI4YWRmMzRmYzQ4OTA0NGQ1YWEyMWU1MTY2ZjIyYTZlZgo=\n298b8610-6835-4d12-b8ae-efba3dbcccad\nFU&3$#gy5ZAZ5rgQ5g8MT3SD&M63%YwY\nbdbq-elastiquill-some-random-string\nAAABABgBYrYNZFwFjWAGHvomv+TkhJXiiK4gIEMkBtRMh64zyXOWBAil2GDEdVmhqhHhD+eqtuyI/SlwJtldFhO3hVJOls+O\nJWTWithJyamiSuperSecretKey\nanNucVF1ampuRWRvTmY0NFE1cGxqa1ZwcThhTEc3Ujc=\nddff0a63e06816ddd7b7d2e2ebc1e40205\ns!v^%W.Y80Mp$g$\nnaughty!\nIlovecoding\nsecretkeythatgoesbeyondandbeyond\nTAacs6cvkPGiPpqlPUT3vtCC7hFqWJmWfrSk25znrtJ3FAmi5SzFxYfzithgjzVZ\nasecretforjwttoken\ngdjhvvdhjddhdbhdbjhonsbdvuhbqwnkqxsab\nsome-secret-jwt-key-goes-here\nQWERTYUIOP~!@#$%^&*()_+ASDFGHJKL:\"~!@#$%^&*()_+ZXCVBNM<>?~!@#$%^&*()_+\"\ncubist-by-studio-slash-production\nasdfaiwuerbro27y3482bhjfbai34q2b4irajkshdfiq34t87trbfhbjksd\nyour-selected-JWT-secret-here\nframeAntDesignToken\neffeefewerfewrwqrwqe\n#yoloMojeBi #sweg trolololo lel\ncodeworkrauthentication\nthis_must_be_a_super_secret\nsnimay-secret\nsecret_example\nsecretkeythoiemoi\nIjTccFjAFvqYeNe9vuTOxHH6hu6vd4eiDCXumkGxDufKjmu4VGVN4h0ibIZx9L6Lr3KimVFiH05TUE4HPeQhhm01RcCfutq5Vlx\nHLNn92qqtznZSMkD_TzR_XFVdiZ5E87oaus6pyH7tiI\npocassist\nstatejwtsecret\n9b6de5cc-0738-4bf1-acs1-0f568ac9da37\nlqOTTMi1wSphb7chGMfcHLCDZ1YHVFkdn6fnp0vj45U=\n78sfdgg3t3gwv7avjheh43\nX35rffWpS9BR.=^#LDt&z3ykYOd7h@w*\nilovetim\nYOUR_SMASHING_JWT_SECRET\nbXktc2VjcmV0\n7tiqSgZY8kb8JthmoVoHWja2 \nC57E160E9CE711D214BF4CCF407DE6C64FCF19A7C20E7C6D7C2FF18826A7E1AA\n9b6de5cc-0731-edge-peax-0f568ac9da37\n计算登陆的密钥\nMnpuzsExftskYGOMgaTYDKfw\nYmFuYW5h\njwt_secret_strong_xxxxxxxxxxxxxxxxxxxxxxx\nDphJJcoCO2aXK666tq3d2AgMQ8gaugukKsUjKzMciA\njljcc8j3rq8fjec8jreijrcle\nZwfJtS3muY65CaeZ\"\nzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz==\njwt_local1234\nSBVi5nVGukNnYA8GkfcANw==\nQHM0ax3XAuKYeQJVIVnM9A==\nFF9912A0D4C13F32C1E7831DE21B409120EDC35EFEA236D633B42485DFA004C8\nTndzVnNYdjRZQ0FGOXN1eFdabVQ3TjZQU3ptb3VDREhxVnB6YlM1bmlCS280OWI3clRSRW13RmU2cm9Lc3dmNA==\nNwsVsXv4YCAF9suxWZmT7N6PSzmouCDHqVpzbS5niBKo49b7rTREmwFe6roKswf4\nvo7ZdrC5qIBvq1Mq3smVrlKfyLiZhzsw\nmysecretkeytoencryptjwt\n`q.%Spn#PqETS3A!n<4CaEAja6NrA$55Yxx2h;}z+S.e#N%,_wCc*5\"4q{K>Ban[&`\n135b8378904571a649516713c9b3bbffc14f3464a3131504aec324cde5327b4d\n2k66QfKeTRk3MdZ5vpDYgZCu2k66QfKeTRk3MdZ5vpDYgZCu\n9879879878787878\n1592e2945cc2e8153171e692c44ceeffd98128be9a79b2d6\nqwerty-123456\ntuyen\nHeLlOTheRE-gEneRalKenoBI\nrahul\ngovlepel@$&\nTOP$@&!!!\n280ba7e4-d323-4232-8107-3b8c1b0832a8\nPLACEHOLDER_PLACEHOLDER_PLACEHOLDER_PLACEHOLDER_PLACEHOLDER_PLACEHOLDER\nChangeTh1sToSom3LongRand0mString!!\n8d0b2d7b81744cc99baa567353519ed4\nsomethingverysecretohyes\naaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\nThisIsTheWebApiSecret\nTW9zaGVFcmV6UHJpdmF0ZUtleQ==\nwGxqIr4EFM5NQQ/SECRETKEYTOEDIT\nwoweewoweeeoweeeee\nSomeWOwowow\nyour-long-and-secure-jwt-secret-key\nMITSECRET2019\nd859509273b3f89381f664760e6951336fc488d4f17fd2d26f76d2d6fe681aef\ne14f669183c5cd41afbf146b7098154a14651dd30c5478a576ac67424d1c9897\nENTLyda6LI34qOgDLLe/5t79u8wPzgQUO7TwcDUxAIYOoITisNvtDnUKGmZ6zDX45MjJV0FYzaPD\nIW9O1FWsRQ==\nbf549f5188556ce0951048ef467ec93067bc4ea21acebe46ef675cd4e8e015ff\nzti2hyI1ASJwVDmDHYnP\n688f5d737bad920bdfb2fc2f488d6b6209eebda1dae949a8de91398d932c517a\n2f9df4f86340e01aa7eff5b4457c56f8c5f27315364a6ef812355f63f63d0ced\n$2a$10$42JbXnjOIeJuM1yelY5rYum3uXcFS/dCDOuaD0scHwU1SokNsQUs6\nAyM1SysPpbyDfgZld3umj1qzKObwVMkoqQ-EstJQLr_T-1qS0gZH75aKtMN3Yj0iPS4hcgUuTwjAzZr1Z9CAow\na0a2abd8-6162-41c3-83d6-1cf559b46afc\n\\u52A0\\u5BC6\na234567890a234567890a23456789012\nyour_jwt_pass\nMAKE_ME_SOMETHING_REALLY_LONG\nDatabasirJwtSecret\nmake_me_something_really_long\n!@Andrade#$%¨\nwtSB6bFrfJWLBmfhtyJbpF1L17F7XrGX\nchange-this-in-production-key\n123456789654564564dsa65f4s56d4f65sdf56sd564f65sdf65sd6f54sd6f\nAnzdz9l4TG8N5y18oaTDueqJQca1aX7loaz0U8Hz\nsquadjoaquina\nNmWgbwC5YOdGwJsTTqQf\nu7x!A%D*G-KaPdSgVkYp2s5v8y/B?E(H+MbQeThWmZq4t6w9z$C&F)J@NcRfUjXn\nsecretjwttokenkey\n8sknjlO3NPTBqo319DHLNqsQAfRJEdKsETOds\nBQby6J0BWgJHTF0yE5OO8/+CMSqFINbh7LbiLNno8yVCt787DdsfTDOAjfMrHL46SKjwB8oj6XMAGdwGcs+ZgA==\n>#Wbu35)M\\u0005X3\n\n\n>\\\"3(9;@Uf8hUPcWx\\\"?v\\\"2\\\\}@&7{U}!>}]2,^N1Gkwt;\\\\j]$LV/SH<4-O}@RHJ{h\nA-VERY-LONG-SECRET-KEY\nAdd your secret key\nCHANGE_ME_TO_A_COMPLEX_RANDOM_SECRET\nD0ntUs3Th\\u00a1$S3cr3T!\nDOFJEO@DLEDK@@OEJFE52385239523LRJDJD9\\\"23452535325#%#%#\nDgdfliyERbvd77\\u00f1flgk\\u00b7&%/&6dsd4$EWE\\u00b7$%DS345345\nFD1!$*NAJafr@@%13FFFADFAqp\\u01795!Ad\nGENERATE_NEW_SECURE_RANDOM_KEY\nHolaSoyUnaClaveSuperSecretaQueNadieNuncaSabraParaLosTokens!\\\"#!\\\"#\nJ}:{\\\\k.^qxDxC'5d?h4WJbJL]v,(d!t&E7'Y/vpeEaHveTma'.@Pp6;5mSG92S\nKLJASHK\\\"#!(W/EAJ#O9a8sd7)\nLzm^o>Q-lGO)xg1UcAcEtMaFN$XX\\\"m@T0FsbO3Rd!whxt*>e,6ej-XYBYAd.#BR\nLzm^o>Q-lGO)xg1UcAcEtMaFN$XX\\\"m@T0FsbO3Rd!whxt*>e,6ej-XYBYAd.#BR'),\nMememememmememexk\\u00e5dkksokfopsekfskfdfpkapkdapwkdpakdpokpokkkKPOKPOKPKkPOkPkpkPkpkPOkPOkPkPkkpkpkpKpOKpOKPOKPkPokPkpKpkPkppkmememems\nS#perS3crEt_007\nSecret \\u00e0 changer\nSomethingNotEntirelySecret\nTEST_NON_DEV_SECRET\nThis is an UNSECURE Secret. CHANGE THIS for production environments.\nU,E<48\\\\*jLs7e'q\\\"6\\\"5]x4K/3AK%'VAdzG>\\\"WBSZAs{v&w7ZJ%\nYOUR_OWN_RANDOM_GENERATED_SECRET_KEY\nY^$B,FVseZ~d,+mrP,#@DM4:U~BU6.=m9QDD+.U'yL\\\"bp-hTS#H+f;UR(+z7./Yf!2z.^-@<}\\\\h**9)2Lbm[#z}ELwvU\n__TODO:_GENERATE_YOUR_OWN_RANDOM_VALUE_HERE__\naaaaaaaaaaaa\naaaaaaaaaaaaa\naaaaaaaaaaaaaa\naaaaaaaaaaaaaaa\nasdfghjkl\\u00f1123456\nb6af09f5\nbZBc2sEbQLKqv7GkJD/VB8YuTC3eC0R0kRvJ5/xX37P=\nbZJc2sWbQLKos6GkHn/VB9oXwQt8S0R0kRvJ5/xJ89E=\nbZJc2sWbQLKoscdGkHn/VytuyfgXwQt8S0R0kRvJ5/xJ89E=\nbar\nblahblahblah\nc292a0a3aa32397cdb050e233733900f\ncOOk!e-$ecR@T\ncf9b3588\nd0w6Lq(cXUA@Mwp6+!^CQ;ZC7qMWz\\\\pi5Z.w65^\\\\YRAb.Cpnwb\ndasfewwg589639652251515%$QE#T#$YT$UYU\\u00f1sdxDXase324\ndelilahRest\\u00f3123\ndev\ne951e5a1f4b94151b360f47edf596dd2\nehudyyfofyfhfezfizuozhddeifgy\\u00e9duzgdeiyeifzyufrgfigztrfuyzgfzgzu\nj*7Hsa#js0(a*1xv\nj76h5PEMx3FIGr3caArJ5g==\njsksfnfisdjdsjsdjdskdfvmfdfs\\u00e5psd\\u00e42348ej383j\nkK8Z<$hm8BxkujGM\\n7N}{W34q`~H,XFmUcE]*dLXT`X#ty,\\\"y\nm==?8AG\\\"Ik^str0}qxS_4Q%lsb~DUK\nmaclesecretedontjesuisleseule\\u00e0connaitrezehahahahahahaha\nmude isso em produ\\u00e7\\u00e3o\nmy\\\\$ecreEtKeY@123\nn2r5\\u00f15x/A4D*G-KmPdSgVkYp226v9y$B&E(H+MbQeThWmZq4t7w!z%C*F=J@NcRf\nnode.js Andrew Mead\\u00b4s Udemy course secret seed 123@#$%\\u00a8&*(~\\u00e7\nold keys here (for key rotation)\nq.nF9L\\u000b8gLT\\\\M:KxYd$#f*m#3`gJ*uZ\nsW$q@re,q8w{eg!4+d-\\\\>xE3k+}5#WHZznQXdzf8=Znnddffdj7E)ApKV_ypd9_n(W-S%hd>83;USkU+aFwe+`5~c\\\\(KR?&PfsfsY~4t2VRBVu9r(p44z?_$j:yhS`Ms9(HjyYf/z9C[fcajn{n;)Key'!\nverysecrettestkey123454321\nsecretkey23456\nsmilegate_hap_kyuk_ha_go_ship_da\nI_LOVE_LL\nthis_is_private_key_for_crud\nthisissecretkey\n2c89956d186a75693f2be77a79874107ed7fc7e2f860f0156abe8e2c20e5b12d\nyour-json-web-token\nCTCHEN\nmynameisaayushisharma\nSSBDOASDIMOASMOCSMPCMSAPOMCA\n43242355ghbvhh234bjjn\nsdjlhagmlamlsdkfjgh\nFAE8649B15526F4349498C51D8552452\nMh15O0JNMZVZhEO4E8sQVD9PWFeaBhnKPvUy\nwRnjBKd}ECd8.'yqA8[cK44!pN5ay2yCQ]!_JS7m[c~-=tpak>t^HPukh=.d@HHc\nasdfl9cqdfafds4a3ds29878f2\nswempresarial2023*\nsharedkey\nfdasfkjlsadfkljsdah\nEDJb34y267rv3Cu6ibupaWQBjOFM6escz8ht5gTVqly4OUd7nywdRXKNwwixeJ6toUpHCPmnSpIqFEB6hZvJGGGG\njustasecret\nINSERT_SECRET_KEY\nO7mzVJbE1IhtNqFdXn8yRpswAe9jYl6B\nae732ca3cca8dbb8348d6a08ef65b9ce75e85d61ad820394e569472a4fc4295e111448394a9715b7a2207c14f57c3a248a97c8e767d1604c410e07be080d834e\n84006397748da2821f7ad4689a6efafb8cf653581f623d2eb2436ff2944735f1bf6751b899c9c4589555171940076c3e850d054d144305b003d7f96bd334cf9d\nfaztwebblog\nSECRET TOKEN STRING\nMargarita\nQUFLTOKENKEY\nABCD\nnotmysecret\nhellob\nprocess.env.jwtSecret\nthis is a secret\n8Xn8@z&A3Bv%vG4#*E$z\nmysecret123\njwtsecret123\nerty\n_secure|\nbiblioteca@ifsp\npierre_dev\nkeyboard-cat\nso-secret\ncookies\nThe GBA is awesome\nrendrom\njson-server-auth-123456\nt7w3P8X6472qWc3u\ngo-mall\nsecure\n9mVKZz6Hg4h7zx5zX8Tf\n0xdc49981516e8e72b401a63e6405495a32dafc3939b5d6d83cc319ac0388bca1b\n7ad9cfdec75eceb662f5e48f5765701c17f51a5233a60fbcfa5f9e495fa99d18\n\"m/ATjN6q8rEjMyXaX/QIoKrhyn9Cw3wtkSwQPrTe4KosTVX3wTRyo7r8Bz03dneK\nB5OeJVIOHzeorY5dkPINOc/3hNiRQzgffqQA1dzGzhbZK+waZrIEbpFu5t8xRIzM\nek9mDvzK7K8NGA2m/QDYQa7v1R2yXcCBJgwUv5koTvxhRGbcFjYEMJG8/NIt5zfg\noyvEgyD2oqPpD1n4iJLVrgkQjnNPasABVvX3Gylj13LDnqWkqbWMnkQE4qz0fbMi\nqnebAGPgYLDbEd7M/XCHXsSQXGI0InZeNZECUqfA0Oc4eq1GpQXwFcIF9QsDJveg\nlv+C3Vv+mTSAcrv/tmGsbg==\"\nsegredosecreto\nGoiasOMaiorClube\nmetTaClefDeDecryptageDeJwtDTC\niamuzairtasawarmynameiskhanandiamnotaterrorist\nJwtYourSecretStoreKey\nU2FtcGxlU2VjcmV0S2V5\n2020hypertube42\n5f6f968254f6fe5c30d0d9f0e520af705c60160201435e82d50596604d41dd67\n89cbffaddc4948ee97d87a44edff6af4b2583fffe2e9e1575be293102763ee67\n7ad9cfdec75eceb662f5e48f5765701c17f51a5233a60fbcfa5f9e495fa99d20\n833087d55e3478bfb24c2116d5a194645452a03b10996976b2b74c4f881a5d60\n4R5T6YGHU896GCBDFW24C43F64G64G67\nCHANGE_ME!@#$%\nKVvSh8Wkb@9~#FtnUfsS0@xy%xn2nvkek14DA48Dks~0Tc|Bq~QAalqF7Gk$VO64|@?rZgYuCWDxl}~$tmuF7R~zjoeqezVcKt~\nV^Z5cbXUD]sw->2{Rm_f/g%YQM:6`4&a\nsupersecretkungfury\nhh4khjh324h324jk3$#@$n32\n37I55x+uqygp+G2VIRXczS6Wew77xm6iJ37L7J5CnY0=\nu9+udaYDqC1+2Hw2faJszg==\numeshSecret\nnotesApp#12345\nserucity_is_secure_beacuse_it_is\n@token2F5e84cb2610411b048c16probono4e60553855ebd5827918\n!@2222222fasdhiohDCWQA" }, { "path": "seclist/lists/swagger.txt", "content": "swagger/index.html\nswagger/v1/swagger.json\nswagger-ui.html\nswagger-resources\nswagger/static/index.html\nswagger-ui/swagger.json\nswagger/ui/index\napidocs/swagger.json\napi-docs/swagger.json\nswagger-ui/\napi-docs\napidocs\nswagger\nv1/swagger.json\napi/apidocs\napi/openapi.json\napi/v1/apidocs\napi/v2/apidocs\napi/api-docs\napi/v1/api-docs\napi/v2/api-docs\nswagger\nswagger/\nswagger.json\nswagger-ui.html\nswagger-ui.json\nswagger.yml\nswagger.yaml\napi/swagger\napi/swagger/\napi/swagger.json\napi/swagger-ui/\napi/swagger-ui.html\napi/swagger-ui.json\napi/v1/swagger\napi/v1/swagger/\napi/v1/swagger.json\napi/v1/swagger-ui/\napi/v1/swagger-ui.html\napi/v1/swagger-ui.json\napi/v2/swagger\napi/v2/swagger/\napi/v2/swagger.json\napi/v2/swagger-ui/\napi/v2/swagger-ui.html\napi/v2/swagger-ui.json\napi\napi/v1/\napi/v2\napi/v3\nopenapi.json\nopenapi.yml\nopenapi.yaml\n.well-known/openapi.json\n.well-known/openapi.yaml" }, { "path": "seclist/lists/well-known.txt", "content": ".well-known/apple-app-site-association\n.well-known/security.txt\n.well-known/jwks.json\n.well-known/oauth-authorization-server\n.well-known/openid-configuration\n.well-known/openid-federation" }, { "path": "seclist/seclist.go", "content": "package seclist\n\nimport (\n\t\"bufio\"\n\t\"embed\"\n\t\"errors\"\n\t\"io\"\n\t\"io/fs\"\n\t\"net/http\"\n\t\"os\"\n\t\"path\"\n\n\t\"github.com/cerberauth/vulnapi/internal/request\"\n)\n\n//go:embed lists/*.txt\nvar sectlistsFolder embed.FS\n\ntype SecList struct {\n\tName string\n\tItems []string\n}\n\nfunc fileNameFromURL(url string) string {\n\treturn path.Base(url)\n}\n\nfunc hasSecList(name string) bool {\n\t_, err := sectlistsFolder.Open(\"lists/\" + name)\n\treturn err == nil\n}\n\nfunc NewSecList(name string) *SecList {\n\treturn &SecList{\n\t\tName: name,\n\t\tItems: []string{},\n\t}\n}\n\nfunc NewSecListFromURL(name, url string) (*SecList, error) {\n\tfilename := fileNameFromURL(url)\n\tif hasSecList(filename) {\n\t\treturn NewSecListFromEmbeddedFile(name, filename)\n\t}\n\n\ts := NewSecList(name)\n\terr := s.DownloadFromURL(url)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\treturn s, nil\n}\n\nfunc (s *SecList) loadFile(file fs.File) error {\n\tscanner := bufio.NewScanner(file)\n\tfor scanner.Scan() {\n\t\tline := scanner.Text()\n\t\ts.Items = append(s.Items, line)\n\t}\n\n\tif err := scanner.Err(); err != nil {\n\t\treturn err\n\t}\n\n\treturn nil\n}\n\nfunc (s *SecList) loadFromEmbeddedFile(filepath string) error {\n\tfile, err := sectlistsFolder.Open(\"lists/\" + filepath)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\treturn s.loadFile(file)\n}\n\nfunc NewSecListFromEmbeddedFile(name, filename string) (*SecList, error) {\n\ts := NewSecList(name)\n\terr := s.loadFromEmbeddedFile(filename)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\treturn s, nil\n}\n\nfunc (s *SecList) loadFromTmpFile(filepath string) error {\n\tfile, err := os.Open(filepath)\n\tif err != nil {\n\t\treturn err\n\t}\n\tdefer file.Close()\n\n\treturn s.loadFile(file)\n}\n\nfunc (s *SecList) DownloadFromURL(url string) error {\n\tclient := request.GetDefaultClient()\n\treq, err := request.NewRequest(http.MethodGet, url, nil, client)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\tres, err := req.Do()\n\tif err != nil {\n\t\treturn err\n\t}\n\n\tif res.GetStatusCode() != http.StatusOK {\n\t\treturn errors.New(\"sec list download failed\")\n\t}\n\n\ttempFile, err := os.CreateTemp(\"\", \"seclist\")\n\tif err != nil {\n\t\treturn err\n\t}\n\tdefer tempFile.Close()\n\n\t_, err = io.Copy(tempFile, res.GetBody())\n\tif err != nil {\n\t\treturn err\n\t}\n\n\tfilepath := tempFile.Name()\n\terr = s.loadFromTmpFile(filepath)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\terr = os.Remove(filepath) //nolint:gosec\n\tif err != nil {\n\t\treturn err\n\t}\n\n\treturn nil\n}\n" }, { "path": "seclist/seclist_test.go", "content": "package seclist_test\n\nimport (\n\t\"net/http\"\n\t\"net/http/httptest\"\n\t\"testing\"\n\n\t\"github.com/cerberauth/vulnapi/seclist\"\n\t\"github.com/stretchr/testify/assert\"\n)\n\nfunc TestNewSecListFromURL(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.Write([]byte(\"line 1\\n\"))\n\t\tw.Write([]byte(\"line 2\\n\"))\n\t\tw.Write([]byte(\"line 3\\n\"))\n\t}))\n\tdefer server.Close()\n\n\tseclist, err := seclist.NewSecListFromURL(\"seclist\", server.URL)\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, 3, len(seclist.Items))\n\tassert.Equal(t, \"line 1\", seclist.Items[0])\n\tassert.Equal(t, \"line 2\", seclist.Items[1])\n\tassert.Equal(t, \"line 3\", seclist.Items[2])\n}\n\nfunc TestNewSecListFromURLWhenResponseNotOk(t *testing.T) {\n\tserver := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tw.WriteHeader(http.StatusNotFound)\n\t}))\n\tdefer server.Close()\n\n\t_, err := seclist.NewSecListFromURL(\"seclist\", server.URL)\n\n\tassert.Error(t, err)\n}\n\nfunc TestNewSecListFromURLWhenEmbeddedFileExists(t *testing.T) {\n\tseclist, err := seclist.NewSecListFromURL(\"seclist\", \"http://example.com/graphql.txt\")\n\n\tassert.NoError(t, err)\n\tassert.Equal(t, \"___graphql\", seclist.Items[0])\n\tassert.Equal(t, \"altair\", seclist.Items[1])\n\tassert.Equal(t, \"explorer\", seclist.Items[2])\n}\n" }, { "path": "test/stub/basic_http_bearer.openapi.json", "content": "{\n \"openapi\": \"3.0.2\",\n \"info\": {\n \"title\": \"API\",\n \"description\": \"API\",\n \"version\": \"1.0.0\"\n },\n \"servers\": [\n {\n \"url\": \"http://localhost:8080\"\n }\n ],\n \"paths\": {\n \"/\": {\n \"get\": {\n \"parameters\": [],\n \"responses\": {\n \"204\": {\n \"description\": \"successful operation\"\n }\n },\n \"security\": [\n {\n \"bearer_auth\": []\n }\n ]\n }\n },\n \"/resources/{id}\": {\n \"post\": {\n \"parameters\": [\n {\n \"name\": \"id\",\n \"in\": \"path\",\n \"required\": true,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"responses\": {\n \"204\": {\n \"description\": \"successful operation\"\n }\n },\n \"security\": [\n {\n \"bearer_auth\": []\n }\n ]\n }\n }\n },\n \"components\": {\n \"securitySchemes\": {\n \"bearer_auth\": {\n \"type\": \"http\",\n \"scheme\": \"bearer\"\n }\n }\n }\n}\n" }, { "path": "test/stub/basic_http_bearer_jwt.openapi.json", "content": "{\n \"openapi\": \"3.0.2\",\n \"info\": {\n \"title\": \"API\",\n \"description\": \"API\",\n \"version\": \"1.0.0\"\n },\n \"servers\": [\n {\n \"url\": \"http://localhost:8080\"\n }\n ],\n \"paths\": {\n \"/\": {\n \"get\": {\n \"parameters\": [],\n \"responses\": {\n \"204\": {\n \"description\": \"successful operation\"\n }\n },\n \"security\": [\n {\n \"bearer_auth\": []\n }\n ]\n }\n },\n \"/resources/{id}\": {\n \"post\": {\n \"parameters\": [\n {\n \"name\": \"id\",\n \"in\": \"path\",\n \"required\": true,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"responses\": {\n \"204\": {\n \"description\": \"successful operation\"\n }\n },\n \"security\": [\n {\n \"bearer_auth\": []\n }\n ]\n }\n }\n },\n \"components\": {\n \"securitySchemes\": {\n \"bearer_auth\": {\n \"type\": \"http\",\n \"scheme\": \"bearer\",\n \"bearerFormat\": \"JWT\"\n }\n }\n }\n}\n" }, { "path": "test/stub/complex.openapi.json", "content": "{\n \"openapi\": \"3.0.2\",\n \"info\": {\n \"title\": \"Complex API\",\n \"description\": \"API with complex and recursive parameters\",\n \"version\": \"1.0.0\"\n },\n \"servers\": [\n {\n \"url\": \"http://localhost:8080\"\n }\n ],\n \"paths\": {\n \"/\": {\n \"get\": {\n \"summary\": \"Get items\",\n \"parameters\": [\n {\n \"name\": \"filter\",\n \"in\": \"query\",\n \"required\": false,\n \"schema\": {\n \"type\": \"object\",\n \"properties\": {\n \"name\": {\n \"type\": \"string\"\n },\n \"tags\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\"\n }\n }\n }\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"successful operation\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/components/schemas/Item\"\n }\n }\n }\n }\n }\n },\n \"security\": [\n {\n \"bearer_auth\": []\n },\n {\n \"api_key_auth\": []\n }\n ]\n },\n \"post\": {\n \"summary\": \"Create an item\",\n \"requestBody\": {\n \"required\": true,\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Item\"\n }\n }\n }\n },\n \"responses\": {\n \"201\": {\n \"description\": \"Item created\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Item\"\n }\n }\n }\n }\n },\n \"security\": [\n {\n \"bearer_auth\": []\n },\n {\n \"api_key_auth\": []\n }\n ]\n }\n }\n },\n \"components\": {\n \"securitySchemes\": {\n \"bearer_auth\": {\n \"type\": \"http\",\n \"scheme\": \"bearer\",\n \"bearerFormat\": \"JWT\"\n },\n \"api_key_auth\": {\n \"type\": \"apiKey\",\n \"in\": \"header\",\n \"name\": \"X-API-Key\"\n }\n },\n \"schemas\": {\n \"Item\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\"\n },\n \"name\": {\n \"type\": \"string\"\n },\n \"details\": {\n \"type\": \"object\",\n \"properties\": {\n \"description\": {\n \"type\": \"string\"\n },\n \"attributes\": {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/components/schemas/Attribute\"\n }\n }\n }\n }\n }\n },\n \"Attribute\": {\n \"type\": \"object\",\n \"properties\": {\n \"key\": {\n \"type\": \"string\"\n },\n \"value\": {\n \"type\": \"string\"\n },\n \"subAttributes\": {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/components/schemas/Attribute\"\n }\n }\n }\n }\n }\n }\n}" }, { "path": "test/stub/petstore.openapi.json", "content": "{\n \"openapi\": \"3.0.2\",\n \"info\": {\n \"title\": \"Swagger Petstore - OpenAPI 3.0\",\n \"description\": \"This is a sample Pet Store Server based on the OpenAPI 3.0 specification. You can find out more about\\nSwagger at [http://swagger.io](http://swagger.io). In the third iteration of the pet store, we've switched to the design first approach!\\nYou can now help us improve the API whether it's by making changes to the definition itself or to the code.\\nThat way, with time, we can improve the API in general, and expose some of the new features in OAS3.\\n\\nSome useful links:\\n- [The Pet Store repository](https://github.com/swagger-api/swagger-petstore)\\n- [The source API definition for the Pet Store](https://github.com/swagger-api/swagger-petstore/blob/master/src/main/resources/openapi.yaml)\",\n \"termsOfService\": \"http://swagger.io/terms/\",\n \"contact\": {\n \"email\": \"apiteam@swagger.io\"\n },\n \"license\": {\n \"name\": \"Apache 2.0\",\n \"url\": \"http://www.apache.org/licenses/LICENSE-2.0.html\"\n },\n \"version\": \"1.0.19\"\n },\n \"externalDocs\": {\n \"description\": \"Find out more about Swagger\",\n \"url\": \"http://swagger.io\"\n },\n \"servers\": [\n {\n \"url\": \"http://localhost:8080/api/v3\"\n }\n ],\n \"tags\": [\n {\n \"name\": \"pet\",\n \"description\": \"Everything about your Pets\",\n \"externalDocs\": {\n \"description\": \"Find out more\",\n \"url\": \"http://swagger.io\"\n }\n },\n {\n \"name\": \"store\",\n \"description\": \"Access to Petstore orders\",\n \"externalDocs\": {\n \"description\": \"Find out more about our store\",\n \"url\": \"http://swagger.io\"\n }\n },\n {\n \"name\": \"user\",\n \"description\": \"Operations about user\"\n }\n ],\n \"paths\": {\n \"/pet\": {\n \"put\": {\n \"tags\": [\n \"pet\"\n ],\n \"summary\": \"Update an existing pet\",\n \"description\": \"Update an existing pet by Id\",\n \"operationId\": \"updatePet\",\n \"requestBody\": {\n \"description\": \"Update an existent pet in the store\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n },\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n },\n \"application/x-www-form-urlencoded\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n }\n },\n \"required\": true\n },\n \"responses\": {\n \"200\": {\n \"description\": \"Successful operation\",\n \"content\": {\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n },\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n }\n }\n },\n \"400\": {\n \"description\": \"Invalid ID supplied\"\n },\n \"404\": {\n \"description\": \"Pet not found\"\n },\n \"405\": {\n \"description\": \"Validation exception\"\n }\n },\n \"security\": [\n {\n \"petstore_auth\": [\n \"write:pets\",\n \"read:pets\"\n ]\n }\n ]\n },\n \"post\": {\n \"tags\": [\n \"pet\"\n ],\n \"summary\": \"Add a new pet to the store\",\n \"description\": \"Add a new pet to the store\",\n \"operationId\": \"addPet\",\n \"requestBody\": {\n \"description\": \"Create a new pet in the store\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n },\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n },\n \"application/x-www-form-urlencoded\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n }\n },\n \"required\": true\n },\n \"responses\": {\n \"200\": {\n \"description\": \"Successful operation\",\n \"content\": {\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n },\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n }\n }\n },\n \"405\": {\n \"description\": \"Invalid input\"\n }\n },\n \"security\": [\n {\n \"petstore_auth\": [\n \"write:pets\",\n \"read:pets\"\n ]\n }\n ]\n }\n },\n \"/pet/findByStatus\": {\n \"get\": {\n \"tags\": [\n \"pet\"\n ],\n \"summary\": \"Finds Pets by status\",\n \"description\": \"Multiple status values can be provided with comma separated strings\",\n \"operationId\": \"findPetsByStatus\",\n \"parameters\": [\n {\n \"name\": \"status\",\n \"in\": \"query\",\n \"description\": \"Status values that need to be considered for filter\",\n \"required\": false,\n \"explode\": true,\n \"schema\": {\n \"type\": \"string\",\n \"default\": \"available\",\n \"enum\": [\n \"available\",\n \"pending\",\n \"sold\"\n ]\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"successful operation\",\n \"content\": {\n \"application/xml\": {\n \"schema\": {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n }\n },\n \"application/json\": {\n \"schema\": {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n }\n }\n }\n },\n \"400\": {\n \"description\": \"Invalid status value\"\n }\n },\n \"security\": [\n {\n \"petstore_auth\": [\n \"write:pets\",\n \"read:pets\"\n ]\n }\n ]\n }\n },\n \"/pet/findByTags\": {\n \"get\": {\n \"tags\": [\n \"pet\"\n ],\n \"summary\": \"Finds Pets by tags\",\n \"description\": \"Multiple tags can be provided with comma separated strings. Use tag1, tag2, tag3 for testing.\",\n \"operationId\": \"findPetsByTags\",\n \"parameters\": [\n {\n \"name\": \"tags\",\n \"in\": \"query\",\n \"description\": \"Tags to filter by\",\n \"required\": false,\n \"explode\": true,\n \"schema\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\"\n }\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"successful operation\",\n \"content\": {\n \"application/xml\": {\n \"schema\": {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n }\n },\n \"application/json\": {\n \"schema\": {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n }\n }\n }\n },\n \"400\": {\n \"description\": \"Invalid tag value\"\n }\n },\n \"security\": [\n {\n \"petstore_auth\": [\n \"write:pets\",\n \"read:pets\"\n ]\n }\n ]\n }\n },\n \"/pet/{petId}\": {\n \"get\": {\n \"tags\": [\n \"pet\"\n ],\n \"summary\": \"Find pet by ID\",\n \"description\": \"Returns a single pet\",\n \"operationId\": \"getPetById\",\n \"parameters\": [\n {\n \"name\": \"petId\",\n \"in\": \"path\",\n \"description\": \"ID of pet to return\",\n \"required\": true,\n \"schema\": {\n \"type\": \"integer\",\n \"format\": \"int64\"\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"successful operation\",\n \"content\": {\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n },\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n }\n }\n },\n \"400\": {\n \"description\": \"Invalid ID supplied\"\n },\n \"404\": {\n \"description\": \"Pet not found\"\n }\n },\n \"security\": [\n {\n \"api_key\": []\n },\n {\n \"petstore_auth\": [\n \"write:pets\",\n \"read:pets\"\n ]\n }\n ]\n },\n \"post\": {\n \"tags\": [\n \"pet\"\n ],\n \"summary\": \"Updates a pet in the store with form data\",\n \"description\": \"\",\n \"operationId\": \"updatePetWithForm\",\n \"parameters\": [\n {\n \"name\": \"petId\",\n \"in\": \"path\",\n \"description\": \"ID of pet that needs to be updated\",\n \"required\": true,\n \"schema\": {\n \"type\": \"integer\",\n \"format\": \"int64\"\n }\n },\n {\n \"name\": \"name\",\n \"in\": \"query\",\n \"description\": \"Name of pet that needs to be updated\",\n \"schema\": {\n \"type\": \"string\"\n }\n },\n {\n \"name\": \"status\",\n \"in\": \"query\",\n \"description\": \"Status of pet that needs to be updated\",\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"responses\": {\n \"405\": {\n \"description\": \"Invalid input\"\n }\n },\n \"security\": [\n {\n \"petstore_auth\": [\n \"write:pets\",\n \"read:pets\"\n ]\n }\n ]\n },\n \"delete\": {\n \"tags\": [\n \"pet\"\n ],\n \"summary\": \"Deletes a pet\",\n \"description\": \"\",\n \"operationId\": \"deletePet\",\n \"parameters\": [\n {\n \"name\": \"api_key\",\n \"in\": \"header\",\n \"description\": \"\",\n \"required\": false,\n \"schema\": {\n \"type\": \"string\"\n }\n },\n {\n \"name\": \"petId\",\n \"in\": \"path\",\n \"description\": \"Pet id to delete\",\n \"required\": true,\n \"schema\": {\n \"type\": \"integer\",\n \"format\": \"int64\"\n }\n }\n ],\n \"responses\": {\n \"400\": {\n \"description\": \"Invalid pet value\"\n }\n },\n \"security\": [\n {\n \"petstore_auth\": [\n \"write:pets\",\n \"read:pets\"\n ]\n }\n ]\n }\n },\n \"/pet/{petId}/uploadImage\": {\n \"post\": {\n \"tags\": [\n \"pet\"\n ],\n \"summary\": \"uploads an image\",\n \"description\": \"\",\n \"operationId\": \"uploadFile\",\n \"parameters\": [\n {\n \"name\": \"petId\",\n \"in\": \"path\",\n \"description\": \"ID of pet to update\",\n \"required\": true,\n \"schema\": {\n \"type\": \"integer\",\n \"format\": \"int64\"\n }\n },\n {\n \"name\": \"additionalMetadata\",\n \"in\": \"query\",\n \"description\": \"Additional Metadata\",\n \"required\": false,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"requestBody\": {\n \"content\": {\n \"application/octet-stream\": {\n \"schema\": {\n \"type\": \"string\",\n \"format\": \"binary\"\n }\n }\n }\n },\n \"responses\": {\n \"200\": {\n \"description\": \"successful operation\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/ApiResponse\"\n }\n }\n }\n }\n },\n \"security\": [\n {\n \"petstore_auth\": [\n \"write:pets\",\n \"read:pets\"\n ]\n }\n ]\n }\n },\n \"/store/inventory\": {\n \"get\": {\n \"tags\": [\n \"store\"\n ],\n \"summary\": \"Returns pet inventories by status\",\n \"description\": \"Returns a map of status codes to quantities\",\n \"operationId\": \"getInventory\",\n \"responses\": {\n \"200\": {\n \"description\": \"successful operation\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"type\": \"object\",\n \"additionalProperties\": {\n \"type\": \"integer\",\n \"format\": \"int32\"\n }\n }\n }\n }\n }\n },\n \"security\": [\n {\n \"api_key\": []\n }\n ]\n }\n },\n \"/store/order\": {\n \"post\": {\n \"tags\": [\n \"store\"\n ],\n \"summary\": \"Place an order for a pet\",\n \"description\": \"Place a new order in the store\",\n \"operationId\": \"placeOrder\",\n \"requestBody\": {\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Order\"\n }\n },\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Order\"\n }\n },\n \"application/x-www-form-urlencoded\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Order\"\n }\n }\n }\n },\n \"responses\": {\n \"200\": {\n \"description\": \"successful operation\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Order\"\n }\n }\n }\n },\n \"405\": {\n \"description\": \"Invalid input\"\n }\n }\n }\n },\n \"/store/order/{orderId}\": {\n \"get\": {\n \"tags\": [\n \"store\"\n ],\n \"summary\": \"Find purchase order by ID\",\n \"description\": \"For valid response try integer IDs with value <= 5 or > 10. Other values will generate exceptions.\",\n \"operationId\": \"getOrderById\",\n \"parameters\": [\n {\n \"name\": \"orderId\",\n \"in\": \"path\",\n \"description\": \"ID of order that needs to be fetched\",\n \"required\": true,\n \"schema\": {\n \"type\": \"integer\",\n \"format\": \"int64\"\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"successful operation\",\n \"content\": {\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Order\"\n }\n },\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Order\"\n }\n }\n }\n },\n \"400\": {\n \"description\": \"Invalid ID supplied\"\n },\n \"404\": {\n \"description\": \"Order not found\"\n }\n }\n },\n \"delete\": {\n \"tags\": [\n \"store\"\n ],\n \"summary\": \"Delete purchase order by ID\",\n \"description\": \"For valid response try integer IDs with value < 1000. Anything above 1000 or nonintegers will generate API errors\",\n \"operationId\": \"deleteOrder\",\n \"parameters\": [\n {\n \"name\": \"orderId\",\n \"in\": \"path\",\n \"description\": \"ID of the order that needs to be deleted\",\n \"required\": true,\n \"schema\": {\n \"type\": \"integer\",\n \"format\": \"int64\"\n }\n }\n ],\n \"responses\": {\n \"400\": {\n \"description\": \"Invalid ID supplied\"\n },\n \"404\": {\n \"description\": \"Order not found\"\n }\n }\n }\n },\n \"/user\": {\n \"post\": {\n \"tags\": [\n \"user\"\n ],\n \"summary\": \"Create user\",\n \"description\": \"This can only be done by the logged in user.\",\n \"operationId\": \"createUser\",\n \"requestBody\": {\n \"description\": \"Created user object\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n },\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n },\n \"application/x-www-form-urlencoded\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n }\n }\n },\n \"responses\": {\n \"default\": {\n \"description\": \"successful operation\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n },\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n }\n }\n }\n }\n }\n },\n \"/user/createWithList\": {\n \"post\": {\n \"tags\": [\n \"user\"\n ],\n \"summary\": \"Creates list of users with given input array\",\n \"description\": \"Creates list of users with given input array\",\n \"operationId\": \"createUsersWithListInput\",\n \"requestBody\": {\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n }\n }\n }\n },\n \"responses\": {\n \"200\": {\n \"description\": \"Successful operation\",\n \"content\": {\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n },\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n }\n }\n },\n \"default\": {\n \"description\": \"successful operation\"\n }\n }\n }\n },\n \"/user/login\": {\n \"get\": {\n \"tags\": [\n \"user\"\n ],\n \"summary\": \"Logs user into the system\",\n \"description\": \"\",\n \"operationId\": \"loginUser\",\n \"parameters\": [\n {\n \"name\": \"username\",\n \"in\": \"query\",\n \"description\": \"The user name for login\",\n \"required\": false,\n \"schema\": {\n \"type\": \"string\"\n }\n },\n {\n \"name\": \"password\",\n \"in\": \"query\",\n \"description\": \"The password for login in clear text\",\n \"required\": false,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"successful operation\",\n \"headers\": {\n \"X-Rate-Limit\": {\n \"description\": \"calls per hour allowed by the user\",\n \"schema\": {\n \"type\": \"integer\",\n \"format\": \"int32\"\n }\n },\n \"X-Expires-After\": {\n \"description\": \"date in UTC when token expires\",\n \"schema\": {\n \"type\": \"string\",\n \"format\": \"date-time\"\n }\n }\n },\n \"content\": {\n \"application/xml\": {\n \"schema\": {\n \"type\": \"string\"\n }\n },\n \"application/json\": {\n \"schema\": {\n \"type\": \"string\"\n }\n }\n }\n },\n \"400\": {\n \"description\": \"Invalid username/password supplied\"\n }\n }\n }\n },\n \"/user/logout\": {\n \"get\": {\n \"tags\": [\n \"user\"\n ],\n \"summary\": \"Logs out current logged in user session\",\n \"description\": \"\",\n \"operationId\": \"logoutUser\",\n \"parameters\": [],\n \"responses\": {\n \"default\": {\n \"description\": \"successful operation\"\n }\n }\n }\n },\n \"/user/{username}\": {\n \"get\": {\n \"tags\": [\n \"user\"\n ],\n \"summary\": \"Get user by user name\",\n \"description\": \"\",\n \"operationId\": \"getUserByName\",\n \"parameters\": [\n {\n \"name\": \"username\",\n \"in\": \"path\",\n \"description\": \"The name that needs to be fetched. Use user1 for testing. \",\n \"required\": true,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"successful operation\",\n \"content\": {\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n },\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n }\n }\n },\n \"400\": {\n \"description\": \"Invalid username supplied\"\n },\n \"404\": {\n \"description\": \"User not found\"\n }\n }\n },\n \"put\": {\n \"tags\": [\n \"user\"\n ],\n \"summary\": \"Update user\",\n \"description\": \"This can only be done by the logged in user.\",\n \"operationId\": \"updateUser\",\n \"parameters\": [\n {\n \"name\": \"username\",\n \"in\": \"path\",\n \"description\": \"name that needs to be updated\",\n \"required\": true,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"requestBody\": {\n \"description\": \"Update an existent user in the store\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n },\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n },\n \"application/x-www-form-urlencoded\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n }\n }\n },\n \"responses\": {\n \"default\": {\n \"description\": \"successful operation\"\n }\n }\n },\n \"delete\": {\n \"tags\": [\n \"user\"\n ],\n \"summary\": \"Delete user\",\n \"description\": \"This can only be done by the logged in user.\",\n \"operationId\": \"deleteUser\",\n \"parameters\": [\n {\n \"name\": \"username\",\n \"in\": \"path\",\n \"description\": \"The name that needs to be deleted\",\n \"required\": true,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"responses\": {\n \"400\": {\n \"description\": \"Invalid username supplied\"\n },\n \"404\": {\n \"description\": \"User not found\"\n }\n }\n }\n }\n },\n \"components\": {\n \"schemas\": {\n \"Order\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"integer\",\n \"format\": \"int64\",\n \"example\": 10\n },\n \"petId\": {\n \"type\": \"integer\",\n \"format\": \"int64\",\n \"example\": 198772\n },\n \"quantity\": {\n \"type\": \"integer\",\n \"format\": \"int32\",\n \"example\": 7\n },\n \"shipDate\": {\n \"type\": \"string\",\n \"format\": \"date-time\"\n },\n \"status\": {\n \"type\": \"string\",\n \"description\": \"Order Status\",\n \"example\": \"approved\",\n \"enum\": [\n \"placed\",\n \"approved\",\n \"delivered\"\n ]\n },\n \"complete\": {\n \"type\": \"boolean\"\n }\n },\n \"xml\": {\n \"name\": \"order\"\n }\n },\n \"Customer\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"integer\",\n \"format\": \"int64\",\n \"example\": 100000\n },\n \"username\": {\n \"type\": \"string\",\n \"example\": \"fehguy\"\n },\n \"address\": {\n \"type\": \"array\",\n \"xml\": {\n \"name\": \"addresses\",\n \"wrapped\": true\n },\n \"items\": {\n \"$ref\": \"#/components/schemas/Address\"\n }\n }\n },\n \"xml\": {\n \"name\": \"customer\"\n }\n },\n \"Address\": {\n \"type\": \"object\",\n \"properties\": {\n \"street\": {\n \"type\": \"string\",\n \"example\": \"437 Lytton\"\n },\n \"city\": {\n \"type\": \"string\",\n \"example\": \"Palo Alto\"\n },\n \"state\": {\n \"type\": \"string\",\n \"example\": \"CA\"\n },\n \"zip\": {\n \"type\": \"string\",\n \"example\": \"94301\"\n }\n },\n \"xml\": {\n \"name\": \"address\"\n }\n },\n \"Category\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"integer\",\n \"format\": \"int64\",\n \"example\": 1\n },\n \"name\": {\n \"type\": \"string\",\n \"example\": \"Dogs\"\n }\n },\n \"xml\": {\n \"name\": \"category\"\n }\n },\n \"User\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"integer\",\n \"format\": \"int64\",\n \"example\": 10\n },\n \"username\": {\n \"type\": \"string\",\n \"example\": \"theUser\"\n },\n \"firstName\": {\n \"type\": \"string\",\n \"example\": \"John\"\n },\n \"lastName\": {\n \"type\": \"string\",\n \"example\": \"James\"\n },\n \"email\": {\n \"type\": \"string\",\n \"example\": \"john@email.com\"\n },\n \"password\": {\n \"type\": \"string\",\n \"example\": \"12345\"\n },\n \"phone\": {\n \"type\": \"string\",\n \"example\": \"12345\"\n },\n \"userStatus\": {\n \"type\": \"integer\",\n \"description\": \"User Status\",\n \"format\": \"int32\",\n \"example\": 1\n }\n },\n \"xml\": {\n \"name\": \"user\"\n }\n },\n \"Tag\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"integer\",\n \"format\": \"int64\"\n },\n \"name\": {\n \"type\": \"string\"\n }\n },\n \"xml\": {\n \"name\": \"tag\"\n }\n },\n \"Pet\": {\n \"required\": [\n \"name\",\n \"photoUrls\"\n ],\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"integer\",\n \"format\": \"int64\",\n \"example\": 10\n },\n \"name\": {\n \"type\": \"string\",\n \"example\": \"doggie\"\n },\n \"category\": {\n \"$ref\": \"#/components/schemas/Category\"\n },\n \"photoUrls\": {\n \"type\": \"array\",\n \"xml\": {\n \"wrapped\": true\n },\n \"items\": {\n \"type\": \"string\",\n \"xml\": {\n \"name\": \"photoUrl\"\n }\n }\n },\n \"tags\": {\n \"type\": \"array\",\n \"xml\": {\n \"wrapped\": true\n },\n \"items\": {\n \"$ref\": \"#/components/schemas/Tag\"\n }\n },\n \"status\": {\n \"type\": \"string\",\n \"description\": \"pet status in the store\",\n \"enum\": [\n \"available\",\n \"pending\",\n \"sold\"\n ]\n }\n },\n \"xml\": {\n \"name\": \"pet\"\n }\n },\n \"ApiResponse\": {\n \"type\": \"object\",\n \"properties\": {\n \"code\": {\n \"type\": \"integer\",\n \"format\": \"int32\"\n },\n \"type\": {\n \"type\": \"string\"\n },\n \"message\": {\n \"type\": \"string\"\n }\n },\n \"xml\": {\n \"name\": \"##default\"\n }\n }\n },\n \"requestBodies\": {\n \"Pet\": {\n \"description\": \"Pet object that needs to be added to the store\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n },\n \"application/xml\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/Pet\"\n }\n }\n }\n },\n \"UserArray\": {\n \"description\": \"List of user object\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/components/schemas/User\"\n }\n }\n }\n }\n }\n },\n \"securitySchemes\": {\n \"petstore_auth\": {\n \"type\": \"oauth2\",\n \"flows\": {\n \"implicit\": {\n \"authorizationUrl\": \"https://petstore3.swagger.io/oauth/authorize\",\n \"scopes\": {\n \"write:pets\": \"modify pets in your account\",\n \"read:pets\": \"read your pets\"\n }\n }\n }\n },\n \"api_key\": {\n \"type\": \"apiKey\",\n \"name\": \"api_key\",\n \"in\": \"header\"\n }\n }\n }\n}" }, { "path": "test/stub/simple_api_key.openapi.json", "content": "{\n \"openapi\": \"3.0.2\",\n \"info\": {\n \"title\": \"API\",\n \"description\": \"API\",\n \"version\": \"1.0.0\"\n },\n \"servers\": [\n {\n \"url\": \"http://localhost:8080\"\n }\n ],\n \"paths\": {\n \"/\": {\n \"get\": {\n \"parameters\": [],\n \"responses\": {\n \"204\": {\n \"description\": \"successful operation\"\n }\n },\n \"security\": [\n {\n \"api_key_auth\": []\n }\n ]\n }\n }\n },\n \"components\": {\n \"securitySchemes\": {\n \"api_key_auth\": {\n \"type\": \"apiKey\",\n \"in\": \"header\",\n \"name\": \"X-API-Key\"\n }\n }\n }\n}" }, { "path": "test/stub/simple_http_basic.openapi.json", "content": "{\n \"openapi\": \"3.0.2\",\n \"info\": {\n \"title\": \"API\",\n \"description\": \"API\",\n \"version\": \"1.0.0\"\n },\n \"servers\": [\n {\n \"url\": \"http://localhost:8080\"\n }\n ],\n \"paths\": {\n \"/\": {\n \"get\": {\n \"parameters\": [],\n \"responses\": {\n \"204\": {\n \"description\": \"successful operation\"\n }\n },\n \"security\": [\n {\n \"basic_auth\": []\n }\n ]\n }\n }\n },\n \"components\": {\n \"securitySchemes\": {\n \"basic_auth\": {\n \"type\": \"http\",\n \"scheme\": \"basic\"\n }\n }\n }\n}" }, { "path": "test/stub/simple_http_bearer.openapi.json", "content": "{\n \"openapi\": \"3.0.2\",\n \"info\": {\n \"title\": \"API\",\n \"description\": \"API\",\n \"version\": \"1.0.0\"\n },\n \"servers\": [\n {\n \"url\": \"http://localhost:8080\"\n }\n ],\n \"paths\": {\n \"/\": {\n \"get\": {\n \"parameters\": [],\n \"responses\": {\n \"204\": {\n \"description\": \"successful operation\"\n }\n },\n \"security\": [\n {\n \"bearer_auth\": []\n }\n ]\n }\n }\n },\n \"components\": {\n \"securitySchemes\": {\n \"bearer_auth\": {\n \"type\": \"http\",\n \"scheme\": \"bearer\"\n }\n }\n }\n}" }, { "path": "test/stub/simple_http_bearer_jwt.openapi.json", "content": "{\n \"openapi\": \"3.0.2\",\n \"info\": {\n \"title\": \"API\",\n \"description\": \"API\",\n \"version\": \"1.0.0\"\n },\n \"servers\": [\n {\n \"url\": \"http://localhost:8080\"\n }\n ],\n \"paths\": {\n \"/\": {\n \"get\": {\n \"parameters\": [],\n \"responses\": {\n \"204\": {\n \"description\": \"successful operation\"\n }\n },\n \"security\": [\n {\n \"bearer_auth\": []\n }\n ]\n }\n }\n },\n \"components\": {\n \"securitySchemes\": {\n \"bearer_auth\": {\n \"type\": \"http\",\n \"scheme\": \"bearer\",\n \"bearerFormat\": \"JWT\"\n }\n }\n }\n}\n" }, { "path": "test/stub/simple_http_bearer_jwt.openapi.yaml", "content": "openapi: \"3.0.2\"\n\ninfo:\n title: API\n version: \"1.0\"\n contact: {}\n\nservers:\n - url: \"http://localhost:8080\"\n\npaths:\n \"/\":\n get:\n parameters: []\n responses:\n \"204\":\n description: \"successful operation\"\n security:\n - bearer_auth: []\ncomponents:\n securitySchemes:\n bearer_auth:\n type: \"http\"\n scheme: \"bearer\"\n bearerFormat: \"JWT\"\n" }, { "path": "test/stub/simple_no_scheme.openapi.json", "content": "{\n \"openapi\": \"3.0.2\",\n \"info\": {\n \"title\": \"API\",\n \"description\": \"API\",\n \"version\": \"1.0.0\"\n },\n \"servers\": [\n {\n \"url\": \"http://localhost:8080\"\n }\n ],\n \"paths\": {\n \"/\": {\n \"get\": {\n \"parameters\": [],\n \"responses\": {\n \"204\": {\n \"description\": \"successful operation\"\n }\n }\n }\n }\n }\n}" }, { "path": "vulnapi.rb", "content": "# typed: false\n# frozen_string_literal: true\n\n# This file was generated by GoReleaser. DO NOT EDIT.\nclass Vulnapi < Formula\n desc \"Scan your APIs for security vulnerabilities and weaknesses\"\n homepage \"https://www.cerberauth.com/vulnapi/\"\n version \"0.8.10\"\n license \"MIT\"\n\n on_macos do\n if Hardware::CPU.intel?\n url \"https://github.com/cerberauth/vulnapi/releases/download/v0.8.10/vulnapi_Darwin_x86_64.tar.gz\"\n sha256 \"a27180dd0e8762eca0f3f8b9bfb92c7ace2c4eba0b09f43e176d7920cefdc01d\"\n\n def install\n bin.install \"vulnapi\"\n end\n end\n if Hardware::CPU.arm?\n url \"https://github.com/cerberauth/vulnapi/releases/download/v0.8.10/vulnapi_Darwin_arm64.tar.gz\"\n sha256 \"fcef9d1377a4385825fa3a2ca0a575a84462112eaeb8f5cff738e68cee5d1f68\"\n\n def install\n bin.install \"vulnapi\"\n end\n end\n end\n\n on_linux do\n if Hardware::CPU.intel? && Hardware::CPU.is_64_bit?\n url \"https://github.com/cerberauth/vulnapi/releases/download/v0.8.10/vulnapi_Linux_x86_64.tar.gz\"\n sha256 \"2d9e2464a6d45d26fcd6151f8a8eda0fb47b165f23f8d77a7ee06aa7ebbf9360\"\n def install\n bin.install \"vulnapi\"\n end\n end\n if Hardware::CPU.arm? && Hardware::CPU.is_64_bit?\n url \"https://github.com/cerberauth/vulnapi/releases/download/v0.8.10/vulnapi_Linux_arm64.tar.gz\"\n sha256 \"f2a57e74013b2e91e1a13822219187af52e68bb3b652051c5f0c81a3edbae424\"\n def install\n bin.install \"vulnapi\"\n end\n end\n end\nend\n" } ]