deardaniel/secdata-raw huggingface dataset:
Metasploit Module: Microsoft SRV.SYS Pipe Transaction No Null
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/ms06_063_trans.rb
References: OSVDB-27644, MSB-MS06-063, CVE-2006-3942, BID-19215

Description:
This module exploits a NULL pointer dereference flaw in the
          SRV.SYS driver of the Windows operating system. This bug was
          independently discovered by CORE Security and ISS.
Metasploit Module: Microsoft SRV2.SYS SMB2 Logoff Remote Kernel NULL Pointer Dereference
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/ms09_050_smb2_session_logoff.rb
References: CVE-2009-3103, OSVDB-57799, MSB-MS09-050

Description:
This module triggers a NULL pointer dereference in the SRV2.SYS kernel driver when processing
          an SMB2 logoff request before a session has been correctly negotiated, resulting in a BSOD.
          Affecting Vista SP1/SP2 (and possibly Server 2008 SP1/SP2), the flaw was resolved with MS09-050.
Metasploit Module: Microsoft RRAS InterfaceAdjustVLSPointers NULL Dereference
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/rras_vls_null_deref.rb
Disclosure date: 2006-06-14
References: OSVDB-64340

Description:
This module triggers a NULL dereference in svchost.exe on
          all current versions of Windows that run the RRAS service. This
          service is only accessible without authentication on Windows XP
          SP1 (using the SRVSVC pipe).
Metasploit Module: Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/ms10_054_queryfs_pool_overflow.rb
References: CVE-2010-2550, OSVDB-66974, MSB-MS10-054, URL-https://seclists.org/fulldisclosure/2010/Aug/122

Description:
This module exploits a denial of service flaw in the Microsoft
          Windows SMB service on versions of Windows prior to the August 2010 Patch
          Tuesday. To trigger this bug, you must be able to access a share with
          at least read privileges. That generally means you will need authentication.
          However, if a system has a guest accessible share, you can trigger it
          without any authentication.
Metasploit Module: Microsoft Windows DNSAPI.dll LLMNR Buffer Underrun DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/llmnr/ms11_030_dnsapi.rb
Disclosure date: Apr 12 2011
Authors: jduck
References: CVE-2011-0657, OSVDB-71780, MSB-MS11-030

Description:
This module exploits a buffer underrun vulnerability in Microsoft's DNSAPI.dll
        as distributed with Windows Vista and later without KB2509553. By sending a
        specially crafted LLMNR query, containing a leading '.' character, an attacker
        can trigger stack exhaustion or potentially cause stack memory corruption.

        Although this vulnerability may lead to code execution, it has not been proven
        to be possible at the time of this writing.

        NOTE: In some circumstances, a '.' may be found before the top of the stack is
        reached. In these cases, this module may not be able to cause a crash.
Metasploit Module: Microsoft Windows EOT Font Table Directory Integer Overflow
Type: auxiliary
Path: modules/auxiliary/dos/windows/browser/ms09_065_eot_integer.rb
Disclosure date: 2009-11-10
Authors: hdm
References: CVE-2009-2514, MSB-MS09-065, OSVDB-59869

Description:
This module exploits an integer overflow flaw in the Microsoft Windows Embedded
          OpenType font parsing code located in win32k.sys. Since the kernel itself parses
          embedded web fonts, it is possible to trigger a BSoD from a normal web page when
          viewed with Internet Explorer.
Metasploit Module: Kaillera 0.86 Server Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/windows/games/kaillera.rb
Disclosure date: 2011-07-02
Authors: Sil3nt_Dre4m
References: CVE-2011-10020

Description:
The Kaillera 0.86 server can be shut down by sending any malformed packet
          after the initial "hello" packet.
Metasploit Module: Guild FTPd 0.999.8.11/0.999.14 Heap Corruption
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/guildftp_cwdlist.rb
Disclosure date: 2008-10-12
Authors: kris katterjohn
References: CVE-2008-4572, OSVDB-49045, EDB-6738

Description:
Guild FTPd 0.999.8.11 and 0.999.14 are vulnerable
          to heap corruption.  You need to have a valid login
          so you can run CWD and LIST.
Metasploit Module: Microsoft IIS FTP Server Encoded Response Overflow Trigger
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/iis75_ftpd_iac_bof.rb
Disclosure date: 2010-12-21
References: CVE-2010-3972, OSVDB-70167, BID-45542, MSB-MS11-004, EDB-15803, URL-https://msrc-blog.microsoft.com/2010/12/22/assessing-an-iis-ftp-7-5-unauthenticated-denial-of-service-vulnerability/

Description:
This module triggers a heap overflow when processing a specially crafted
          FTP request containing Telnet IAC (0xff) bytes. When constructing the response,
          the Microsoft IIS FTP Service overflows the heap buffer with 0xff bytes.

          This issue can be triggered pre-auth and may in fact be exploitable for
          remote code execution.
Metasploit Module: WinFTP 2.3.0 NLST Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/winftp230_nlst.rb
Disclosure date: 2008-09-26
Authors: kris katterjohn
References: CVE-2008-5666, OSVDB-49043, EDB-6581

Description:
This module is a very rough port of Julien Bedard's
          PoC.  You need a valid login, but even anonymous can
          do it if it has permission to call NLST.
Metasploit Module: FileZilla FTP Server Malformed PORT Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/filezilla_server_port.rb
Disclosure date: 2006-12-11
References: BID-21542, BID-21549, CVE-2006-6565, EDB-2914, OSVDB-34435

Description:
This module triggers a Denial of Service condition in the FileZilla FTP
          Server versions 0.9.21 and earlier. By sending a malformed PORT command
          then LIST command, the server attempts to write to a NULL pointer.
Metasploit Module: XM Easy Personal FTP Server 5.6.0 NLST DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/xmeasy560_nlst.rb
Disclosure date: 2008-10-13
Authors: kris katterjohn
References: CVE-2008-5626, OSVDB-50837, EDB-6741

Description:
This module is a port of shinnai's script.  You need
          a valid login, but even anonymous can do it as long
          as it has permission to call NLST.
Metasploit Module: Microsoft IIS FTP Server LIST Stack Exhaustion
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/iis_list_exhaustion.rb
Disclosure date: 2009-09-03
References: CVE-2009-2521, BID-36273, OSVDB-57753, MSB-MS09-053, URL-http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0040.html

Description:
This module triggers Denial of Service condition in the Microsoft Internet
          Information Services (IIS) FTP Server 5.0 through 7.0 via a list (ls) -R command
          containing a wildcard. For this exploit to work in most cases, you need 1) a valid
          ftp account: either read-only or write-access account 2) the "FTP Publishing" must
          be configured as "manual" mode in startup type 3) there must be at least one
          directory under FTP root directory. If your provided an FTP account has write-access
          privilege and there is no single directory, a new directory with random name will be
          created prior to sending exploit payload.
Metasploit Module: FileZilla FTP Server Admin Interface Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/filezilla_admin_user.rb
Disclosure date: 2005-11-07
References: BID-15346, CVE-2005-3589, EDB-1336, OSVDB-20817

Description:
This module triggers a Denial of Service condition in the FileZilla FTP
          Server Administration Interface in versions 0.9.4d and earlier.
          By sending a procession of excessively long USER commands to the FTP
          Server, the Administration Interface (FileZilla Server Interface.exe)
          when running, will overwrite the stack with our string and generate an
          exception. The FileZilla FTP Server itself will continue functioning.
Metasploit Module: XM Easy Personal FTP Server 5.7.0 NLST DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/xmeasy570_nlst.rb
Disclosure date: 2009-03-27
Authors: kris katterjohn
References: CVE-2008-5626, OSVDB-50837, EDB-8294

Description:
You need a valid login to DoS this FTP server, but
          even anonymous can do it as long as it has permission
          to call NLST.
Metasploit Module: Solar FTP Server Malformed USER Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/solarftp_user.rb
Disclosure date: 2011-02-22
References: CVE-2011-10029, EDB-16204

Description:
This module will send a format string as USER to Solar FTP, causing a
          READ violation in function "__output_1()" found in "sfsservice.exe"
          while trying to calculate the length of the string. This vulnerability
          affects versions 2.1.1 and earlier.
Metasploit Module: Titan FTP Server 6.26.630 SITE WHO DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/titan626_site.rb
Disclosure date: 2008-10-14
Authors: kris katterjohn
References: CVE-2008-6082, OSVDB-49177, EDB-6753

Description:
The Titan FTP server v6.26 build 630 can be DoS'd by
          issuing "SITE WHO".  You need a valid login so you
          can send this command.
Metasploit Module: Victory FTP Server 5.0 LIST DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/ftp/vicftps50_list.rb
Disclosure date: 2008-10-24
Authors: kris katterjohn
References: CVE-2008-2031, CVE-2008-6829, OSVDB-44608, EDB-6834

Description:
The Victory FTP Server v5.0 can be brought down by sending
          a very simple LIST command
Metasploit Module: Sysax Multi-Server 6.10 SSHD Key Exchange Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/windows/ssh/sysax_sshd_kexchange.rb
Disclosure date: 2013-03-17
Authors: Matt "hostess" Andreko <mandreko[at]accuvant.com>
References: CVE-2013-10065, OSVDB-92081, URL-https://www.mattandreko.com/2013/04/sysax-multi-server-610-ssh-dos.html

Description:
This module sends a specially-crafted SSH Key Exchange causing the service to
          crash.
Metasploit Module: Microsoft IIS 6.0 ASP Stack Exhaustion Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/windows/http/ms10_065_ii6_asp_dos.rb
Disclosure date: 2010-09-14
References: CVE-2010-1899, OSVDB-67978, MSB-MS10-065, EDB-15167

Description:
The vulnerability allows remote unauthenticated attackers to force the IIS server
          to become unresponsive until the IIS service is restarted manually by the administrator.
          Required is that Active Server Pages are hosted by the IIS and that an ASP script reads
          out a Post Form value.
Metasploit Module: Pi3Web ISAPI DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/http/pi3web_isapi.rb
Disclosure date: 2008-11-13
Authors: kris katterjohn
References: CVE-2008-6938, OSVDB-49998, EDB-7109

Description:
The Pi3Web HTTP server crashes when a request is made for an invalid DLL
          file in /isapi for versions 2.0.13 and earlier. By default, the non-DLLs
          in this directory after installation are users.txt, install.daf and
          readme.daf.
Metasploit Module: Windows IIS HTTP Protocol Stack DOS
Type: auxiliary
Path: modules/auxiliary/dos/windows/http/http_sys_accept_encoding_dos_cve_2021_31166.rb
Platform: win
Disclosure date: 2021-05-11
References: CVE-2021-31166, URL-https://nvd.nist.gov/vuln/detail/CVE-2021-31166, URL-https://github.com/mauricelambert/CVE-2021-31166, URL-https://twitter.com/metr0/status/[PII_REDACTED]92076805, URL-https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-31166

Description:
This module exploits CVE-2021-31166, a UAF bug in http.sys
          when parsing specially crafted Accept-Encoding headers
          that was patched by Microsoft in May 2021, on vulnerable
          IIS servers. Successful exploitation will result in
          the target computer BSOD'ing before subsequently rebooting.
          Note that the target IIS server may or may not come back up,
          this depends on the target's settings as to whether IIS
          is configured to start on reboot.
Metasploit Module: MS12-020 Microsoft Remote Desktop Use-After-Free DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/rdp/ms12_020_maxchannelids.rb
Disclosure date: 2012-03-16
References: CVE-2012-0002, MSB-MS12-020, URL-http://www.privatepaste.com/ffe875e04a, URL-http://web.archive.org/web/[PII_REDACTED]4803/http://pastie.org/private/4egcqt9nucxnsiksudy5dw, URL-http://web.archive.org/web/[PII_REDACTED]1634/http://pastie.org/private/feg8du0e9kfagng4rrg, URL-http://stratsec.blogspot.com.au/2012/03/ms12-020-vulnerability-for-breakfast.html, EDB-18606, URL-https://www.rapid7.com/blog/post/2012/03/21/metasploit-update/

Description:
This module exploits the MS12-020 RDP vulnerability originally discovered and
          reported by Luigi Auriemma.  The flaw can be found in the way the T.125
          ConnectMCSPDU packet is handled in the maxChannelIDs field, which will result
          an invalid pointer being used, therefore causing a denial-of-service condition.
Metasploit Module: rsyslog Long Tag Off-By-Two DoS
Type: auxiliary
Path: modules/auxiliary/dos/syslog/rsyslog_long_tag.rb
Disclosure date: Sep 01 2011
Authors: hdm
References: CVE-2011-3200, URL-https://www.rsyslog.com/potential-dos-with-malformed-tag/, URL-https://bugzilla.redhat.com/show_bug.cgi?id=727644

Description:
This module triggers an off-by-two overflow in the
        rsyslog daemon. This flaw is unlikely to yield code execution
        but is effective at shutting down a remote log daemon. This bug
        was introduced in version 4.6.0 and corrected in 4.6.8/5.8.5.
        Compiler differences may prevent this bug from causing any
        noticeable result on many systems (RHEL6 is affected).
Metasploit Module: FreeBSD Remote NFS RPC Request Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/freebsd/nfsd/nfsd_mount.rb
References: BID-16838, OSVDB-23511, CVE-2006-0900

Description:
This module sends a specially-crafted NFS Mount request causing a
          kernel panic on host running FreeBSD 6.0.
Metasploit Module: TDS Protocol Login Request Corruption Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/tds/tds_login_corrupt.rb

Description:
This module sends a series of malformed TDS login requests.
Metasploit Module: TDS Protocol Login Request Username Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/tds/tds_login_username.rb

Description:
This module sends a series of malformed TDS login requests.
Metasploit Module: SMB Create Pipe Request Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/smb/smb_create_pipe.rb

Description:
This module sends a series of SMB create pipe
          requests using malicious strings.
Metasploit Module: SMB Tree Connect Request Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/smb/smb_tree_connect.rb

Description:
This module sends a series of SMB tree connect
          requests using malicious strings.
Metasploit Module: SMB Negotiate SMB2 Dialect Corruption
Type: auxiliary
Path: modules/auxiliary/fuzzers/smb/smb2_negotiate_corrupt.rb

Description:
This module sends a series of SMB negotiate requests that advertise a
          SMB2 dialect with corrupted bytes.
Metasploit Module: SMB Negotiate Dialect Corruption
Type: auxiliary
Path: modules/auxiliary/fuzzers/smb/smb_negotiate_corrupt.rb

Description:
This module sends a series of SMB negotiate requests with corrupted bytes
Metasploit Module: SMB NTLMv1 Login Request Corruption
Type: auxiliary
Path: modules/auxiliary/fuzzers/smb/smb_ntlm1_login_corrupt.rb

Description:
This module sends a series of SMB login requests using
          the NTLMv1 protocol with corrupted bytes.
Metasploit Module: SMB Tree Connect Request Corruption
Type: auxiliary
Path: modules/auxiliary/fuzzers/smb/smb_tree_connect_corrupt.rb

Description:
This module sends a series of SMB tree connect requests with corrupted bytes.
Metasploit Module: SMB Create Pipe Request Corruption
Type: auxiliary
Path: modules/auxiliary/fuzzers/smb/smb_create_pipe_corrupt.rb

Description:
This module sends a series of SMB create pipe requests with corrupted bytes.
Metasploit Module: DNS and DNSSEC Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/dns/dns_fuzzer.rb

Description:
This module will connect to a DNS server and perform DNS and
        DNSSEC protocol-level fuzzing. Note that this module may inadvertently
        crash the target server.
Metasploit Module: NTP Protocol Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/ntp/ntp_protocol_fuzzer.rb
Authors: Jon Hart <jon_hart[at]rapid7.com>

Description:
A simplistic fuzzer for the Network Time Protocol that sends the
        following probes to understand NTP and look for anomalous NTP behavior:

        * All possible combinations of NTP versions and modes, even if not
          allowed or specified in the RFCs
        * Short versions of the above
        * Short, invalid datagrams
        * Full-size, random datagrams
        * All possible NTP control messages
        * All possible NTP private messages

        This findings of this fuzzer are not necessarily indicative of bugs,
        let alone vulnerabilities, rather they point out interesting things
        that might deserve more attention.  Furthermore, this module is not
        particularly intelligent and there are many more areas of NTP that
        could be explored, including:

        * Warn if the response is 100% identical to the request
        * Warn if the "mode" (if applicable) doesn't align with what we expect,
        * Filter out the 12-byte mode 6 unsupported opcode errors.
        * Fuzz the control message payload offset/size/etc.  There be bugs
Metasploit Module: Simple FTP Client Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/ftp/client_ftp.rb
References: URL-http://www.corelan.be:8800/index.php/2010/10/12/death-of-an-ftp-client/

Description:
This module will serve an FTP server and perform FTP client interaction fuzzing
Metasploit Module: Simple FTP Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/ftp/ftp_pre_post.rb

Description:
This module will connect to a FTP server and perform pre- and post-authentication fuzzing
Metasploit Module: SSH 2.0 Version Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/ssh/ssh_version_2.rb

Description:
This module sends a series of SSH requests with malicious version strings.
Metasploit Module: SSH Version Corruption
Type: auxiliary
Path: modules/auxiliary/fuzzers/ssh/ssh_version_corrupt.rb

Description:
This module sends a series of SSH requests with a corrupted version string
Metasploit Module: SSH Key Exchange Init Corruption
Type: auxiliary
Path: modules/auxiliary/fuzzers/ssh/ssh_kexinit_corrupt.rb

Description:
This module sends a series of SSH requests with a corrupted initial key exchange payload.
Metasploit Module: SSH 1.5 Version Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/ssh/ssh_version_15.rb

Description:
This module sends a series of SSH requests with malicious version strings.
Metasploit Module: HTTP GET Request URI Fuzzer (Fuzzer Strings)
Type: auxiliary
Path: modules/auxiliary/fuzzers/http/http_get_uri_strings.rb

Description:
This module sends a series of HTTP GET request with malicious URIs.
Metasploit Module: HTTP Form Field Fuzzer
Type: auxiliary
Path: modules/auxiliary/fuzzers/http/http_form_field.rb
References: URL-http://www.corelan.be:8800/index.php/2010/11/12/metasploit-module-http-form-field-fuzzer

Description:
This module will grab all fields from a form,
          and launch a series of POST actions, fuzzing the contents
          of the form fields. You can optionally fuzz headers too
          (option is enabled by default)
Metasploit Module: HTTP GET Request URI Fuzzer (Incrementing Lengths)
Type: auxiliary
Path: modules/auxiliary/fuzzers/http/http_get_uri_long.rb

Description:
This module sends a series of HTTP GET request with incrementing URL lengths.
Metasploit Module: Windows Shortcut (LNK) Padding
Type: auxiliary
Path: modules/auxiliary/fileformat/datablock_padding_lnk.rb
Platform: win
Disclosure date: 2025-07-19
References: ZDI-25-148, URL-https://zeifan.my/Windows-LNK/, URL-https://gist.github.com/nafiez/1236cc4c808a489e60e2927e0407c8d1, URL-https://www.trendmicro.com/en_us/research/25/c/windows-shortcut-zero-day-exploit.html

Description:
This module generates Windows LNK (shortcut) file that can execute
          arbitrary commands. The LNK file uses environment variables and execute
          its arguments from COMMAND_LINE_ARGUMENTS with extra juicy whitespace
          character padding bytes and concatenates the actual payload.
Metasploit Module: Windows SMB Multi Dropper
Type: auxiliary
Path: modules/auxiliary/fileformat/multidrop.rb
References: URL-https://malicious.link/blog/2012/02/11/ms08_068-ms10_046-fun-until-2018, URL-https://malicious.link/post/2012/2012-02-19-developing-the-lnk-metasploit-post-module-with-mona/, URL-https://bohops.com/2018/08/04/capturing-netntlm-hashes-with-office-dot-xml-documents/, URL-https://web.archive.org/web/[PII_REDACTED]1024/https://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-.LIBRARY-MS-FILETYPE-INFORMATION-DISCLOSURE.txt

Description:
This module dependent on the given filename extension creates either
          a .lnk, .scf, .url, .xml, .library-ms, or desktop.ini file which includes
          a reference to the specified remote host, causing SMB connections to be
          initiated from any user that views the file.
Metasploit Module: SpecialFolderDatablock - Windows LNK File Special UNC Path NTLM Leak
Type: auxiliary
Path: modules/auxiliary/fileformat/specialfolder_leak.rb
Platform: win
Disclosure date: 2025-05-10
References: URL-https://zeifan.my/Right-Click-LNK/

Description:
This module creates a malicious Windows shortcut (LNK) file that
          specifies a special UNC path in SpecialFolderDatablock of Shell Link (.LNK)
          that can trigger an authentication attempt to a remote server. This can be used
          to harvest NTLM authentication credentials.

          When a victim browse to the location of the LNK file, it will attempt to
          connect to the the specified UNC path, resulting in an SMB connection that
          can be captured to harvest credentials.
Metasploit Module: Right-Click Execution - Windows LNK File Special UNC Path NTLM Leak
Type: auxiliary
Path: modules/auxiliary/fileformat/environment_variable_datablock_leak.rb
Platform: win
Disclosure date: 2025-05-06
References: URL-https://zeifan.my/Right-Click-LNK/

Description:
This module creates a malicious Windows shortcut (LNK) file that
          specifies a special UNC path in EnvironmentVariableDataBlock of Shell Link (.LNK)
          that can trigger an authentication attempt to a remote server. This can be used
          to harvest NTLM authentication credentials.

          When a victim right-click the generated LNK file, it will attempt to connect to the
          the specified UNC path, resulting in an SMB connection that can be captured
          to harvest credentials.
Metasploit Module: Microsoft Word UNC Path Injector
Type: auxiliary
Path: modules/auxiliary/fileformat/word_unc_injector.rb
References: URL-https://web.archive.org/web/[PII_REDACTED]2608/http://jedicorp.com/?p=534

Description:
This module modifies a .docx file that will, upon opening, submit stored
          netNTLM credentials to a remote host. It can also create an empty docx file. If
          emailed the receiver needs to put the document in editing mode before the remote
          server will be contacted. Preview and read-only mode do not work. Verified to work
          with Microsoft Word 2003, 2007, 2010, and 2013. In order to get the hashes the
          auxiliary/server/capture/smb module can be used.