1 00:00:00,300 --> 00:00:05,980 Hi, within this lecture, we're going to continue where we left off from the previous one. 2 00:00:06,270 --> 00:00:13,230 So remember, we have this data that we filed and each side of this data, that text file, we have 3 00:00:13,230 --> 00:00:15,700 a hex dump of a file. 4 00:00:16,230 --> 00:00:22,020 So first of all, we need to convert this into a file, leveraging that hex dump. 5 00:00:22,200 --> 00:00:27,590 OK, so if we get the data that we can see the hex dump of that file. 6 00:00:28,380 --> 00:00:30,630 So maybe you know how this works. 7 00:00:30,630 --> 00:00:33,980 Maybe you don't know I'm going to show you anyway. 8 00:00:34,380 --> 00:00:37,700 And in the tips, we have what we need, actually. 9 00:00:38,190 --> 00:00:47,760 OK, so we have this tool called Xixi or XDA in order to leverage the hex and convert it into a file, 10 00:00:47,970 --> 00:00:50,250 then we're going to focus on this one. 11 00:00:50,280 --> 00:00:54,960 So this file apparently has been repeatedly compressed. 12 00:00:55,380 --> 00:01:00,990 So this file has been compressed and it's it has been repeatedly compressed. 13 00:01:00,990 --> 00:01:06,710 So multiple compression that we were dealing with and we're going to decompress that file. 14 00:01:06,720 --> 00:01:09,950 It sounds easy, but I believe it's going to take some time. 15 00:01:10,470 --> 00:01:14,910 And anyway, we have this temp file again. 16 00:01:14,910 --> 00:01:21,810 So it suggests us to work with inside of the temp file, we temp folder. 17 00:01:21,810 --> 00:01:33,660 I mean, and the general reason for this is that we get to write some files into the temp folder as 18 00:01:33,930 --> 00:01:36,050 we move along over here. 19 00:01:36,750 --> 00:01:39,330 So I'm going to show you what I mean. 20 00:01:39,330 --> 00:01:43,240 If we write where my we get this Bendat 12. 21 00:01:43,500 --> 00:01:52,110 So in the band of 12, I believe we don't have any permission to write files over here in the current 22 00:01:52,110 --> 00:01:54,150 directory that we are into. 23 00:01:54,720 --> 00:02:00,500 So we need to go into the TMB folder and we need to work it over there. 24 00:02:00,510 --> 00:02:07,590 So if I come over here and write make dear to and I'm just going to write my name, which is until you 25 00:02:07,590 --> 00:02:10,490 can do it with your own name as well. 26 00:02:10,560 --> 00:02:11,110 OK. 27 00:02:11,730 --> 00:02:17,190 And over here I'm going to go into that file or actually let me copy this. 28 00:02:17,640 --> 00:02:21,390 OK, let me copy this data that takes me to that folder. 29 00:02:21,700 --> 00:02:28,980 I'm going to come over here and say copy data that texte to Patil and I'm going to go into that folder 30 00:02:28,980 --> 00:02:29,610 right now. 31 00:02:29,610 --> 00:02:31,040 TMP Atheel. 32 00:02:31,500 --> 00:02:32,520 And here we are. 33 00:02:32,520 --> 00:02:35,700 We have the data that you see over there right now. 34 00:02:35,700 --> 00:02:38,980 I can just do what I had to do and just write a new file. 35 00:02:39,270 --> 00:02:42,090 Why would I need to write a file? 36 00:02:42,270 --> 00:02:49,270 Because again, we have a hex dump and we're going to create a file using that hex dump. 37 00:02:49,800 --> 00:02:53,490 OK, so we're going to use this Xixi. 38 00:02:53,810 --> 00:03:01,380 I'm going to run the dash dash help in order to see the manual of this xixi now here go. 39 00:03:02,640 --> 00:03:06,840 As you can see, we have a lot of parameters over here that we can give. 40 00:03:07,260 --> 00:03:13,500 And what are we going to do with this tool is that we're going to give the text on file and we're going 41 00:03:13,500 --> 00:03:17,490 to say convert this hex dump into an actual file. 42 00:03:17,760 --> 00:03:25,950 OK, so as you can see, dush our stance for a reverse operation, we generally use Xixi to create a 43 00:03:25,950 --> 00:03:31,800 hex dump also file, but if we have a hex we can create a file from it as well. 44 00:03:32,430 --> 00:03:33,910 All you have to do is just write. 45 00:03:33,910 --> 00:03:40,750 Does the dash are data that you in the temporary folder that you have created. 46 00:03:41,460 --> 00:03:49,830 So once we do that, we're going to get some kind of a zip file, I believe, but we don't know the 47 00:03:49,830 --> 00:03:50,910 extension yet. 48 00:03:51,150 --> 00:03:53,400 So I'm going to output this. 49 00:03:53,550 --> 00:03:58,320 And in order to do in order to do that, you have to just write greater design. 50 00:03:58,530 --> 00:04:03,050 And I'm going to call mine until, OK, you can call it your own name. 51 00:04:03,600 --> 00:04:09,550 So I have a file called Still, and it's basically a zip file, most probably. 52 00:04:09,630 --> 00:04:12,440 OK, I'd say so in the description. 53 00:04:12,780 --> 00:04:15,870 So we have to find out what kind of file is there. 54 00:04:15,900 --> 00:04:18,300 So I'm going to write file a tilt. 55 00:04:18,690 --> 00:04:22,600 And as you can see, until is a G zip compress data. 56 00:04:23,070 --> 00:04:24,960 So this is Guiseppe. 57 00:04:25,440 --> 00:04:34,290 So Jizzy, Jesus is a tool or kind of an extension, like a window zip like that zip doctora. 58 00:04:34,470 --> 00:04:42,000 So maybe you're aware of that zip doctora files, but Giuseppe's something like that and we also have 59 00:04:42,000 --> 00:04:46,940 B zip as well and we have also the tower as well. 60 00:04:46,950 --> 00:04:49,140 But right now we are dealing with Guiseppe. 61 00:04:49,380 --> 00:04:52,670 Maybe we will deal with the other ones later on. 62 00:04:53,400 --> 00:04:59,640 So right now I have to use Gizab tool in order to decompress this one. 63 00:05:00,000 --> 00:05:08,040 So I'm going to decompress the atheel file, OK, so that we can see the contents of the compressed 64 00:05:08,040 --> 00:05:12,200 files or folders or whatever are facing, we don't know yet. 65 00:05:13,170 --> 00:05:18,580 So we can use this file comment whenever we need to identify a file, as you can see. 66 00:05:18,600 --> 00:05:23,430 Let's now try to use Guiseppe in order to decompress this. 67 00:05:23,880 --> 00:05:27,630 And of course, you can see the manual of the GUISEPPE as well. 68 00:05:27,930 --> 00:05:29,250 But it's very easy. 69 00:05:29,280 --> 00:05:36,540 All you have to do is just say Dashty and write the file over here like Gizab Dashty until. 70 00:05:37,660 --> 00:05:45,970 But as you can see, we got on air and most probably our file does not have an extension, that's why 71 00:05:45,970 --> 00:05:47,330 we are getting this error right. 72 00:05:47,350 --> 00:05:52,570 So this is all still, but it doesn't have the extension like until that. 73 00:05:53,560 --> 00:05:57,000 So we have to make sure that it has the extension. 74 00:05:57,010 --> 00:06:00,370 So I'm going to rename this in order to rename this. 75 00:06:00,370 --> 00:06:02,790 We can use move comment and we comment. 76 00:06:02,800 --> 00:06:07,960 OK, so we can use this comment in order to move a file to another folder. 77 00:06:08,110 --> 00:06:13,930 But if we leave it inside of the same folder, we can also rename it in a way that we want. 78 00:06:14,140 --> 00:06:17,590 OK, we can change the extension, we can rename it. 79 00:06:17,800 --> 00:06:25,870 We can do whatever we want as long as we just leave it in the next in the same folder that we are currently 80 00:06:25,870 --> 00:06:26,260 in. 81 00:06:26,620 --> 00:06:29,160 So what are we what we want to do over here? 82 00:06:29,170 --> 00:06:35,000 We can just write more until to Atheel that Jesus or get. 83 00:06:35,620 --> 00:06:36,520 So here you go. 84 00:06:36,520 --> 00:06:41,920 Right now we have this until that get over here, which is the Guiseppe extension. 85 00:06:42,160 --> 00:06:44,350 So I'm going to try this one more time. 86 00:06:44,360 --> 00:06:45,220 And here you go. 87 00:06:45,430 --> 00:06:47,110 Now we have another file. 88 00:06:47,110 --> 00:06:50,830 We have Uncompress this decompressed this I believe. 89 00:06:51,460 --> 00:06:59,710 So the term is decompressing and if we write file until one more time, as you can see now we get another 90 00:06:59,710 --> 00:07:01,130 thing, which is B, zip. 91 00:07:01,630 --> 00:07:06,940 So again, this has been repeatedly compressed, as it says over here. 92 00:07:07,300 --> 00:07:14,710 And B, zip is just another extension, another tool that we need to use to decompress this file one 93 00:07:14,710 --> 00:07:15,450 more time. 94 00:07:16,090 --> 00:07:23,200 So I'm going to move still to that because this I'm busy to so busy, too. 95 00:07:23,200 --> 00:07:27,290 The is the extension of busy to like Guiseppe. 96 00:07:27,370 --> 00:07:35,710 OK, so I'm going to use two and say Dashty and until that Beezy to one more time. 97 00:07:35,710 --> 00:07:40,150 So the command is the same D for decompressing. 98 00:07:40,480 --> 00:07:42,990 So I'm going to write file still and here you go. 99 00:07:43,000 --> 00:07:45,470 We have another GCIB compressed data. 100 00:07:46,120 --> 00:07:49,030 So again this is getting ridiculous. 101 00:07:49,030 --> 00:07:52,030 As you can see, it's being repeatedly compressed. 102 00:07:52,720 --> 00:07:55,290 However, we need to do what we gotta to do. 103 00:07:55,300 --> 00:08:03,340 So I'm going to move this to chilidogs and I'm going to use one more time to decompress this. 104 00:08:03,730 --> 00:08:04,450 Let's see. 105 00:08:04,450 --> 00:08:06,220 Yeah, we have until one more time. 106 00:08:06,220 --> 00:08:07,690 I'm going to call file still. 107 00:08:07,870 --> 00:08:08,590 And here we go. 108 00:08:08,590 --> 00:08:11,960 We have another format over here, which is the archive. 109 00:08:12,160 --> 00:08:18,520 So again, this is kind of a zip format and we can use TR in order to decompress this. 110 00:08:18,700 --> 00:08:22,060 The usage is a little bit different when it comes to TR. 111 00:08:22,260 --> 00:08:28,720 If you have worked with Linux before, I believe you came across with TR, even though you haven't seen 112 00:08:28,720 --> 00:08:31,570 the B, zip or zip is very common. 113 00:08:31,690 --> 00:08:37,670 So I'm going to move this to till later and I'm going to say tr until Docteur. 114 00:08:38,130 --> 00:08:39,930 OK, so here you go. 115 00:08:39,940 --> 00:08:47,740 Once we do that, as you can see in the TAA, we still have the attitude that it didn't go away or something 116 00:08:47,740 --> 00:08:48,280 like that. 117 00:08:48,430 --> 00:08:51,400 But we have this data five that been filed. 118 00:08:51,760 --> 00:08:55,240 So we have a binary file over here, which is a good thing. 119 00:08:55,240 --> 00:08:57,100 I believe we're making progress. 120 00:08:57,520 --> 00:09:07,240 So but if you run file data files that by being we can get another TR file, which is something that 121 00:09:07,240 --> 00:09:10,940 we really don't want, but it's the case. 122 00:09:10,960 --> 00:09:13,240 OK, so this is a type of file as well. 123 00:09:13,600 --> 00:09:18,370 So I'm going to decompress this as we have done before, OK? 124 00:09:18,550 --> 00:09:21,610 And we're going to see what it gives us back. 125 00:09:22,360 --> 00:09:29,380 So again, we are still decompressing, even though we managed to decompress it multiple times. 126 00:09:29,620 --> 00:09:31,150 We're going to do this one more time. 127 00:09:31,150 --> 00:09:36,520 So I'm going to move this data five dubbin to another file. 128 00:09:37,060 --> 00:09:41,860 We I believe we have until later, but it will overwrite it. 129 00:09:42,220 --> 00:09:45,400 So I'm going to run TR except for Tailgater. 130 00:09:45,580 --> 00:09:46,360 And here we go. 131 00:09:46,360 --> 00:09:51,520 We have data six that bin which is a B zip to file. 132 00:09:51,670 --> 00:09:52,720 Yeah, very good. 133 00:09:53,200 --> 00:09:57,940 So I'm going to use the same technique that we have been doing so far. 134 00:09:58,250 --> 00:10:06,430 OK, I'm going to turn this into a B zip file and then we're going to just decompress it until we get 135 00:10:06,430 --> 00:10:07,180 the password. 136 00:10:07,180 --> 00:10:12,910 So I'm going to move this data six that been to Atheel that Beezy to. 137 00:10:13,300 --> 00:10:17,200 OK, so this is the extension that we need to work with. 138 00:10:17,410 --> 00:10:23,650 So we have this busy too busy to Dashty till that busy too. 139 00:10:24,100 --> 00:10:25,300 And here we go. 140 00:10:26,080 --> 00:10:27,610 Once we do that, yeah. 141 00:10:27,610 --> 00:10:36,280 We have this until file over here, which is weird if we're on file until this is a Takaya of. 142 00:10:36,920 --> 00:10:44,490 I'm sick of this, so we need to work with Atheel, so I'm going to remove this until Docteur, I'm 143 00:10:44,490 --> 00:10:52,070 going to remove data that we only have this atheel over here, which is what we're going to work with. 144 00:10:52,080 --> 00:10:57,230 And I'm going to convert it to tar and I'm going to say tar filled that tar. 145 00:10:57,570 --> 00:11:06,660 And once we do that, we have data état, that bean and Data eight up in is, again a zip file. 146 00:11:07,170 --> 00:11:13,800 And I believe we need to decompress this to get data nine that been. 147 00:11:14,130 --> 00:11:19,170 But let's see, I'm going to move this into the format. 148 00:11:19,410 --> 00:11:27,000 So can we call this out or we can call this anything else as well, whatever you want over here. 149 00:11:27,000 --> 00:11:31,380 But I'm going to call this my name till that Guiseppe, OK? 150 00:11:32,610 --> 00:11:38,850 And I'm going to use Gizab to decompress until the Guiseppe if we run, unless we're going to see the 151 00:11:38,850 --> 00:11:41,720 article, which is an ASCII text. 152 00:11:41,730 --> 00:11:46,690 Finally, I believe we have finally the password over here. 153 00:11:47,160 --> 00:11:49,970 So right now we only have the Sutil. 154 00:11:50,460 --> 00:11:54,470 What I'm going to do, I'm going to run file one more time to make sure. 155 00:11:54,480 --> 00:11:59,190 Yep, this is just a text file, so I'm going to cut it. 156 00:11:59,190 --> 00:12:01,170 And here you go. 157 00:12:01,200 --> 00:12:06,680 Finally, we have the password for the level 213 again. 158 00:12:06,690 --> 00:12:12,480 Guys, this is a little bit overboard, I believe, repeatedly compressing. 159 00:12:12,480 --> 00:12:18,150 I haven't seen something like this in another CTF, but this is what they want. 160 00:12:18,420 --> 00:12:24,200 And I believe after this, you all know how to use Giuseppe's Panta. 161 00:12:24,450 --> 00:12:27,570 So in a way, maybe it makes sense. 162 00:12:27,600 --> 00:12:34,770 So let me start off this one and let me go into 2013 to see if this works or not. 163 00:12:35,130 --> 00:12:39,660 And if it doesn't work, then we just I don't know. 164 00:12:40,980 --> 00:12:43,130 We have been working for ten minutes I believe. 165 00:12:43,140 --> 00:12:43,320 Yeah. 166 00:12:43,320 --> 00:12:43,920 Here you go. 167 00:12:43,920 --> 00:12:44,600 It works. 168 00:12:45,210 --> 00:12:50,760 So we are inside of Bendit 13 and now we want to go to the Bendit fourteen. 169 00:12:51,330 --> 00:12:53,040 So let me clear this up. 170 00:12:53,040 --> 00:12:55,500 So let's see what it says. 171 00:12:55,710 --> 00:13:02,970 The password for the next level is stored in Etsi Bend Pass, banded fourteen and can only be read by 172 00:13:02,970 --> 00:13:04,380 user Bendit fourteen. 173 00:13:04,470 --> 00:13:05,150 Very good. 174 00:13:05,580 --> 00:13:07,950 So this makes sense for this level. 175 00:13:07,950 --> 00:13:16,470 You don't get the next password, but you get a private H key that can be used to log in to the next 176 00:13:16,470 --> 00:13:16,980 level. 177 00:13:17,550 --> 00:13:19,170 So here you go. 178 00:13:19,170 --> 00:13:22,260 We don't need to find the password over here. 179 00:13:22,290 --> 00:13:26,490 All we need to do is just find and SSA key. 180 00:13:27,150 --> 00:13:30,420 So I'm going to show you what this is does. 181 00:13:30,630 --> 00:13:33,960 Let's see if it's just standing over there or sitting over there. 182 00:13:34,440 --> 00:13:36,540 And we have a note over here. 183 00:13:36,540 --> 00:13:40,590 Localhost is a hostname that refers to the machine you're working on. 184 00:13:40,590 --> 00:13:42,240 OK, we know that already. 185 00:13:42,720 --> 00:13:47,400 So SSL key, that private is just actually starting over here. 186 00:13:47,580 --> 00:13:49,380 So we already have that one. 187 00:13:49,620 --> 00:13:55,470 We can just do MSH from Bendit, thirteen to Bendit, fourteen assists. 188 00:13:55,470 --> 00:13:58,650 Each key is a key that we use. 189 00:13:58,740 --> 00:14:04,320 Rather than giving a password, we can just use this key in order to log in to some server. 190 00:14:04,590 --> 00:14:09,600 So if you have this key you can just use it to log in basically. 191 00:14:09,630 --> 00:14:15,180 OK, and I believe we already have that one, so I'm not going to exit out of this one. 192 00:14:15,510 --> 00:14:20,730 Or we can just find a way to copy this as a key private to our local localhost. 193 00:14:20,970 --> 00:14:23,310 But I believe there is no need to do that. 194 00:14:23,490 --> 00:14:25,560 We can just run this as a help. 195 00:14:25,740 --> 00:14:28,980 As you can see, as this H works embedded service as well. 196 00:14:29,520 --> 00:14:33,180 And we can use this identified parameter over here. 197 00:14:33,180 --> 00:14:38,400 We can just say SSA, Dashi, SSA, keep that private. 198 00:14:38,430 --> 00:14:41,340 OK, so we are giving this SSA key. 199 00:14:41,350 --> 00:14:49,890 That private file is a parameter to a parameter over here and we're going to use the port and the hosting 200 00:14:49,980 --> 00:14:51,000 that we have been using. 201 00:14:51,000 --> 00:14:53,490 We can use the localhost over here. 202 00:14:53,760 --> 00:15:00,960 We're just going to say Bendit fourteen at localhost rather than writing the whole thing over here, 203 00:15:00,990 --> 00:15:03,990 OK, because we are already inside of that server. 204 00:15:04,200 --> 00:15:08,790 We were just switching to another user using and this is a key. 205 00:15:09,330 --> 00:15:15,360 So I'm going to say Bendit fourteen that's localhost and I believe we don't even need to specify a port 206 00:15:15,370 --> 00:15:15,900 over here. 207 00:15:15,900 --> 00:15:18,210 We can just say enter and say yes. 208 00:15:18,570 --> 00:15:19,500 And here you go. 209 00:15:19,500 --> 00:15:30,330 We are inside of the Bendit for TI so but be aware that it says the password for this level at these 210 00:15:30,330 --> 00:15:33,960 four, the level fourteen is saved under the ETSI Bendit pass. 211 00:15:34,290 --> 00:15:36,450 So I'm going to make note of that. 212 00:15:36,450 --> 00:15:36,570 I'm. 213 00:15:36,580 --> 00:15:44,050 I'm just going to take the password from here in order to write into my notes and again, maybe this 214 00:15:44,050 --> 00:15:50,200 will be some kind of help when it's when the time comes later, OK? 215 00:15:50,650 --> 00:15:52,810 OK, so I'm going to get this file. 216 00:15:52,990 --> 00:15:55,740 I'm going to say that Seabourne the password. 217 00:15:56,320 --> 00:15:58,120 So not password. 218 00:15:58,120 --> 00:15:59,810 Been the past bandit 14. 219 00:15:59,830 --> 00:16:00,570 And here you go. 220 00:16:00,940 --> 00:16:02,890 This is the Bendit 14 password. 221 00:16:03,280 --> 00:16:06,480 And this we are currently inside of the Bendit 14. 222 00:16:06,490 --> 00:16:11,890 But anyway, again, it's a good thing to have the passwords for the old levels. 223 00:16:12,520 --> 00:16:19,260 We skipped the first four, but maybe you have just taken the note somehow in your own notes as well. 224 00:16:19,480 --> 00:16:19,950 Right. 225 00:16:20,620 --> 00:16:22,140 So here you go. 226 00:16:22,300 --> 00:16:25,320 Now we are inside of the blended 14. 227 00:16:25,540 --> 00:16:29,010 Now, what we want to do, we want to go to the Bendat 15. 228 00:16:29,830 --> 00:16:31,150 So here you go. 229 00:16:31,150 --> 00:16:38,800 It says that the password for the next level can be retrieved by submitting the password of the current 230 00:16:38,800 --> 00:16:43,230 level to Port 300000. 231 00:16:43,240 --> 00:16:44,980 Over here are thirty thousand. 232 00:16:44,980 --> 00:16:47,020 Yep, thirty thousand on localhost. 233 00:16:47,260 --> 00:16:49,810 So it's a good thing that we got that password. 234 00:16:49,990 --> 00:16:51,790 We already knew how to get it. 235 00:16:51,790 --> 00:16:53,950 So it's just sitting on their dachsie. 236 00:16:54,250 --> 00:16:58,400 OK, but as you can see, we need it. 237 00:16:59,020 --> 00:17:01,990 So what we want to do, we want to take that password. 238 00:17:01,990 --> 00:17:11,190 We already have it and we want to submit that password to deport 30000 all localhost. 239 00:17:11,440 --> 00:17:14,500 So how do we submit data to support? 240 00:17:15,100 --> 00:17:21,120 Of course, if you say that's CAT, then you're right because it's a very convenient tool. 241 00:17:21,130 --> 00:17:22,500 It's very easy to use. 242 00:17:22,660 --> 00:17:25,270 You can just write nootkatone over here and see. 243 00:17:25,510 --> 00:17:30,070 And if you have taken my previous courses, I believe you know how to use this. 244 00:17:30,340 --> 00:17:34,510 I'm just going to say that's CAT localhost 30000. 245 00:17:34,840 --> 00:17:43,450 And right after that I'm just going to write tests and we get nothing back. 246 00:17:43,450 --> 00:17:51,440 But rather than test, maybe we can just take the password that we have saved over here like this. 247 00:17:51,440 --> 00:17:58,810 So I'm going to copied this one and come back here and just paste it over there and hit enter and see 248 00:17:58,810 --> 00:18:00,180 if this works or not. 249 00:18:01,540 --> 00:18:09,850 So we are rating, we're rating and we're not getting any response from the server, I believe. 250 00:18:09,850 --> 00:18:11,320 Let me try it like this. 251 00:18:11,320 --> 00:18:17,830 So I'm just going to say Netscape Local 30000 and just hit enter and here you go. 252 00:18:17,830 --> 00:18:18,820 Now it works. 253 00:18:18,970 --> 00:18:20,170 It says correct. 254 00:18:20,380 --> 00:18:23,560 And it gives us some kind of a password back. 255 00:18:23,710 --> 00:18:26,560 And I believe this is the password for the level fifteen. 256 00:18:26,770 --> 00:18:34,090 So I'm going to just come over here and paste the password for the level fifteen over there so that 257 00:18:34,090 --> 00:18:36,660 we can move on to level fifteen. 258 00:18:37,240 --> 00:18:38,770 Here you go. 259 00:18:38,770 --> 00:18:41,320 I'm going to exit out of this one. 260 00:18:41,680 --> 00:18:44,290 OK, and let's see. 261 00:18:44,410 --> 00:18:51,730 Yeah, we can exit and it exited to the thirteen so I'm going to give it one more time and let me just 262 00:18:51,730 --> 00:18:57,880 come over here and rather than thirteen or fourteen I'm just going to go for fifteen and it will ask 263 00:18:57,880 --> 00:19:03,220 me for a password and I'm going to give the password and see if this works or not. 264 00:19:03,670 --> 00:19:06,130 OK, paste this selection and here you go. 265 00:19:06,250 --> 00:19:07,270 We are inside. 266 00:19:07,630 --> 00:19:11,920 Let's continue within the next picture with the level fifteen.